Legal

Zenny AI Privacy Agreement

Zenny uses AI hosted through Databricks to give you personalized financial answers. With your permission, this service processes your messages and relevant financial information in a protected environment, with encryption and access controls. Zenloth does not sell your personal data. Using Zenny is optional, and you can withdraw permission at any time in Settings.
Last updated: September 30, 2026

1. Information covered by your permission

Your permission covers the information included in AI requests and the relevant context used to respond. Depending on your question, this can include:
Messages you send to Zenny and conversation history used as context.
Relevant profile information, accounts and balances.
Transactions, including financial records imported from your email.
Budgets, categories and financial summaries.
This is permission to process information for AI answers. It is not a grant of unrestricted database access to the model. Zenloth’s services retrieve relevant account information and include context in AI requests. Messages can also contain information you type yourself, so avoid including passwords or other secrets in the chat.

2. Purpose and limits

The information helps Zenny interpret your request, discuss your financial activity and generate personalized responses. Permission to connect an email account and permission to process information with Zenny AI are separate choices. Accepting the general Terms or Privacy Policy alone does not enable Zenny AI.
AI responses can be incomplete or incorrect. Review important figures and decisions against your own records. Enabling Zenny AI does not authorize Zenny to move money or provide a model with your banking credentials.

3. Processing, retention and your choice

Provider processing and retention depend on the applicable service, model and account terms. Databricks documents that Foundation Model API inputs and outputs may be retained for security and abuse prevention, and that partner model providers may process or retain content for safety review. This agreement does not promise zero retention or exclusive processing in your country. Consult the provider documentation linked below for the published conditions.
You may decline or choose “Not now” and continue using other Zenloth features. AI processing stays off until a separate affirmative choice is saved for your account. If the service is unavailable or your choice cannot be verified, new AI requests remain blocked. Reading this agreement or continuing onboarding does not count as acceptance.

4. Withdrawal, records and questions

You can review or withdraw permission in Settings → Privacy at any time. Withdrawal stops new AI requests; it does not undo processing or erase information already shared with a provider. You can review the agreement again and explicitly enable Zenny AI later.
Zenloth saves your decision and the disclosure version on your account so the same permission applies across your sessions. This decision record is removed when you delete your account. Account deletion and other privacy requests are governed by the Privacy Policy, including any applicable retention obligations. The Privacy Policy also explains how to contact Zenloth about access, correction, deletion or questions about your information.

5. The service and its providers

Zenny is the AI assistant within Zenloth. Zenloth operates the application and selects the information used to answer your request. Databricks hosts the managed AI service used by Zenny, with Google as the model provider. These service providers process information to support Zenny’s answers under the applicable service terms. Zenloth does not sell, rent or commercialize your personal data.
The agreement identifies the hosting platform and model provider before you agree. Processing may involve these providers and routing across regions under the applicable service and data-residency terms.

6. Security and independent assurance

Databricks publishes an ISO/IEC 27001:2022 certification and makes SOC 2 Type II assurance reports available through its compliance program. ISO 27001 concerns an information security management system; SOC 2 reporting evaluates controls within the scope of the relevant assessment.
Databricks protects its model-serving service with encryption in transit and at rest, authenticated and authorized access, and logical isolation between customer requests. Its certifications and reports cover the services and controls assessed. Zenloth remains responsible for the security of its application and the handling of your information.
Databricks compliance programDatabricks ISO 27001 certificationModel serving: data protection and retentionDatabricks model service and supported models