Privacy Policy

Effective October 13, 2026

This Privacy Policy describes how Embedchain, Inc. ("Embedchain", "we", "us" or "our") collects, uses, shares and stores information in connection with zuzu, the personal assistant you reach by text message, messaging app, email, the web or any other channel we offer ("zuzu"), and the websites at tryzuzu.app and app.tryzuzu.app and any related software and services (together with zuzu, the "Services"). Your use of the Services is governed by our Terms of Service. By using the Services, you acknowledge that you have read this policy. This policy is a notice, not a contract, and does not create any rights or obligations beyond those provided by law.

This policy does not apply to third-party services, websites or people that you connect to, visit or contact through zuzu. Their own terms and policies govern how they handle information.

Information we collect

Information you provide

• Account information, such as your name, phone number, email address, time zone and sign-in credentials.
• Content you send or create, such as messages, voice notes, photos, files, instructions and reactions, and the replies and outputs zuzu generates.
• Information about other people that you include in your content, such as names, contact details and notes.
• Website logins and other details you choose to save so zuzu can act for you.
• Feedback and communications you send us.

Information from services you connect

If you connect a third-party service, we receive the information that service makes available under the permissions you grant. This can include email, calendar events, contacts, documents and files; financial account, balance and transaction information; payment methods and purchase details; and notes, meeting records and transcripts.

Information collected automatically

• Usage information, such as the features and tools used, actions taken, websites visited by zuzu on your behalf, timestamps, delivery status and errors.
• Device and connection information, such as IP address, browser and device type, operating system and approximate location derived from IP address.
• Information from cookies and similar technologies on our websites, used to keep you signed in and to understand how the websites are used.

Optional signup measurement

On our public signup pages, you can choose to share signup steps and ad attribution with Google Analytics, Google Ads and Meta to help us understand which ads bring signups. These services receive event names, the signup page address, permitted ad attribution parameters, and browser and connection information such as IP address. Ad cookies may be used after you opt in; Google Analytics storage and ad personalization remain disabled. We do not send signup form values, names, email addresses, phone numbers, messages or connected-service data to these services.

This is optional and off until you opt in beside the signup form. Activity before opt-in is not sent later. Uncheck the preference to stop future signup tracking on this browser; this does not remove information already sent. Signing up works without it. We do not load these tags on private app pages, and browser Global Privacy Control or Do Not Track signals disable signup measurement.

Information from other people and sources

• Messages and information from other participants when a user adds zuzu to a group conversation, and information about you that other users share with zuzu.
• Information from websites and services zuzu visits or uses to complete your requests, and from publicly available sources.
• Inferences we draw from other information, such as your preferences, habits, routines, relationships and interests.

Sensitive information

Do not send zuzu sensitive information, such as government identification numbers, health information or bank account numbers, unless a task you request needs it. If you do, you consent to our processing it as described in this policy.

How we use information

• To provide, operate and maintain the Services.
• To carry out the tasks and actions you request.
• To personalize the Services, including remembering your preferences and context.
• To communicate with you, including replies, reminders, updates and service messages.
• To develop, improve and analyze the Services.
• To secure the Services, and to detect, prevent and investigate fraud, abuse and security incidents.
• To comply with law, respond to legal process, and enforce our Terms and other policies.
• For any other purpose disclosed to you when we collect the information, or with your consent.

We may create de-identified or aggregated information and use it for any lawful purpose. We do not use personal information to make decisions that produce legal or similarly significant effects about you, such as decisions about credit, employment or housing.

Google user data

If you connect a Google account, zuzu may access the Google data you authorize, which can include Gmail messages, labels and drafts; Google Calendar events; Google Drive files; Google Docs, Sheets and Slides; and Google Meet records and transcripts. We use this data only to provide and improve the user-facing features you use, such as answering your questions, finding and summarizing information, preparing drafts, and taking actions you request. Google access tokens are stored encrypted.

Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data to develop, improve or train generalized or non-personalized AI or machine learning models, to serve advertising, or to determine credit-worthiness, and we do not sell it. We transfer Google user data to service providers, including AI model providers, only as needed to provide those features, for security, or to comply with law. People do not read Google user data unless you give permission, it is necessary for security or to comply with law, or it is aggregated and anonymized for internal operations. Our use of raw or derived user data received from Google Workspace APIs adheres to the Google Workspace API User Data and Developer Policy.

You can revoke access at any time at myaccount.google.com/permissions.

How we share information

• Service providers that perform services for us, including messaging carriers and platforms, AI model providers, browser automation, hosting and infrastructure, analytics, error monitoring, email delivery and customer support.
• Third-party services you connect or ask zuzu to use, and the people, businesses and websites you ask zuzu to contact or act with.
• Our affiliates, for the purposes in this policy.
• Government authorities, law enforcement and others, when we believe disclosure is required by law or legal process, or is necessary to protect the rights, property or safety of Embedchain, our users or others.
• A buyer, successor or other party in a merger, acquisition, financing, reorganization, bankruptcy or sale of assets.
• Anyone else, with your consent or at your direction.

We do not share personal information with third parties for their own direct marketing purposes. We do not share mobile phone numbers or text messaging opt-in data and consent with third parties, except service providers that deliver messages for us.

Retention

We keep information for as long as your account is active and afterwards as long as needed for the purposes in this policy, including to comply with legal obligations, resolve disputes, prevent abuse and enforce our agreements. Copies may remain in backups and logs for a period after deletion. Information that another person sent or received is not deleted from their account when you delete yours.

Where we process information

We are based in the United States. We and our service providers may process and store information in the United States and other countries, whose data protection laws may differ from those where you live.

Security

We use administrative, technical and physical measures designed to protect information. No method of transmission or storage is completely secure, and we cannot guarantee the security of your information. You use the Services at your own risk.

Your choices

• You can disconnect connected services at any time.
• To review or request changes to the personal information you have given us, or to close your account, email privacy@mem0.ai. We may need to verify your identity before we act. We may decline a request where the law allows, and we may keep information as described in Retention.
• Depending on where you live, you may have additional rights under applicable law. We will respond to requests as that law requires.
• We may send you service messages about your account and the Services. You cannot opt out of these while your account is open.

Do Not Track

Global Privacy Control and Do Not Track signals disable optional signup measurement, even if you previously opted in. Essential functions such as sign-in continue to work. Outside the optional signup measurement described above, we do not allow third parties to collect information about your activities across websites through our websites, except service providers acting for us.

Children

The Services are not directed to, and may not be used by, anyone under 18. We do not knowingly collect personal information from children under 13. If we learn that we have, we will delete it.

Changes to this policy

We may change this policy at any time. We will post the updated policy here and change the effective date. If a change is material, we will give notice as required by law.

Contact

Embedchain, Inc.
privacy@mem0.ai