Privacy Policy

Zof AI, Inc. provides software testing and reliability services. We act as a controller when deciding how and why to handle information for our website, inquiries, business relationships, recruiting, and administration of our Services. We generally act as a processor or service provider for personal data a customer provides for processing on its behalf.

If your employer or another organization provides your account, that organization may control the account and associated data. Contact it first about access to or deletion of data it controls. We assist that organization under our agreement. This policy does not govern an independent third-party site or service simply because we link to it.

• Data processing agreement
• Company contact details

The information we receive depends on how you interact with us. We collect information directly from you, from your organization or authorized users, through the website and service infrastructure, and from integrations or service providers used for the interaction. Optional fields should contain only information needed for the request.

Avoid including production credentials, sensitive personal records, or confidential customer datasets in public forms or the website assistant. Free-text messages, files, application materials, and test artifacts can contain personal information even when their primary purpose is technical.

We use information to deliver requested services; answer questions; manage accounts, contracts, and payments; support customers; assess applications; maintain and secure our systems; detect misuse; understand website performance; and meet legal obligations. We may send relevant business communications subject to applicable law and your choices.

Where European or UK data protection law requires a lawful basis, we rely on performance of a contract or steps requested before entering one; our legitimate interests in operating, securing, and improving our business and responding to professional inquiries; compliance with legal obligations; or consent where required. We consider your rights and interests when relying on legitimate interests. You may request further information or object as described below.

The Cookie Policy explains the choices recorded by our preference controls and their limits, including analytics requests and attribution storage that may occur separately from cookie-based tracking. Withdrawing consent does not affect the lawfulness of processing that occurred before withdrawal. Where information is required to provide a service or meet a legal obligation, not providing it may prevent us from completing the requested interaction.

The website assistant may send your question and relevant conversation context to an AI service provider to generate a response. Retrieval services may also process the query to find relevant material. Do not use the public assistant to transmit secrets or personal data that you are not authorized to disclose. Its responses may contain errors and do not change Zof’s contractual commitments.

Platform processing depends on the deployment and features your organization enables. Before providing regulated or sensitive data, establish the permitted model providers, locations, retention, training-use restrictions, access controls, and customer instructions in the applicable agreement. A statement about the website assistant should not be read as a description of every private platform deployment.

We do not use this policy to grant ourselves permission to disregard customer processing instructions. The applicable DPA governs Customer Personal Data processed on a customer’s behalf. Contact privacy@zof.ai for a question about a specific feature or processing arrangement.

Information may be disclosed to providers that support hosting, communications, security, analytics, AI features, scheduling, and other requested operations; to authorized members or administrators of your organization; and to professional advisors with a need to know. Which providers receive information depends on the feature and deployment. Website providers and customer-platform subprocessors are not necessarily the same list.

We may disclose information when required by applicable law or a valid legal process; to investigate misuse, protect rights, or address security and safety issues; at your direction or with consent; or in connection with a financing, merger, acquisition, or transfer of business assets subject to applicable protections. We do not sell personal information for money.

Some laws define a sale or sharing more broadly than a payment for data, including certain advertising disclosures. Use cookie preferences to record your choices for consent-aware marketing and analytics features, and contact us to exercise any applicable opt-out right. The Cookie Policy explains the scope and limits of those controls. A commercial label for a provider does not by itself establish its legal role under privacy law.

• Service providers and subprocessors

We retain personal information for as long as reasonably needed for the relevant purpose, taking account of the relationship, the information’s sensitivity, your choices, legal and accounting duties, security investigations, and the establishment or defense of legal claims. Inquiry records, application records, account records, and security logs can therefore have different retention periods.

Customer-controlled service data follows the agreement, configured retention, and lawful customer instructions. Deletion from active systems may occur separately from expiration of backups or legally required records. Retained data remains subject to applicable restrictions. We may keep limited suppression information to honor an opt-out rather than contacting you again. Ask us for information about the retention criteria relevant to your request.

We use technical and organizational measures appropriate to the processing, and customers have responsibilities for their own permissions, integrations, data, and environments. No internet service or storage system can guarantee absolute security. The Trust Center explains how to request information about the controls and service scope relevant to your evaluation.

Zof is based in the United States, and information may be processed in the United States and other countries involved in the applicable service. Those countries may have different data protection laws. Where applicable law requires a transfer mechanism, the relevant parties must use an appropriate mechanism, such as an adequacy decision or applicable contractual safeguards.

Contact us for information about the safeguards applicable to your data. This page does not represent that Zof is certified under the EU–U.S. Data Privacy Framework, has approved Binding Corporate Rules, or guarantees a particular processing region. Residency and cross-border access requirements must be addressed for the actual deployment.

• Trust center

Depending on where you live and the applicable law, you may have rights to know about and access your information; obtain a portable copy; correct inaccurate information; request deletion; restrict processing; object to processing based on legitimate interests; withdraw consent; and opt out of a sale, targeted advertising, or other covered sharing. Some laws provide rights concerning sensitive information or decisions made solely by automated processing. These rights are subject to legal conditions and exceptions.

Send a request to privacy@zof.ai. Tell us your relationship with Zof, the information or account concerned, the right you want to exercise, and how we can respond. We may need proportionate information to verify your identity and authority. Do not send identity documents or sensitive records unless requested through an appropriate channel. We respond within the period required by applicable law and explain any permitted extension or refusal.

Where permitted, an authorized agent may submit a request with evidence of authorization; we may also verify the individual’s identity. If a right of appeal applies, reply to the response asking for a privacy appeal and explain your concern. You may complain to your competent privacy regulator, including a European supervisory authority or the UK Information Commissioner. We will not unlawfully discriminate against you for exercising your privacy rights.

For California residents, the categories, sources, purposes, and recipient descriptions above explain the types of information covered by this policy, including identifiers, commercial information, internet activity, and professional or employment information. Contact us for a request concerning the applicable statutory reporting period.

• Contact privacy@zof.ai

You can unsubscribe from marketing email using its unsubscribe link or contact us directly. Transactional communications needed to administer a service, respond to a request, or provide a security or legal notice may continue. Our email preferences page also provides a route for managing communication choices.

Use the cookie preferences control to accept or reject optional categories or change a previous choice. Browser settings can remove or block stored information, although some functions may then stop working. The Cookie Policy explains first-party storage, third-party requests, and the difference between rejecting optional cookies and preventing all network communication.

• Cookie policy and preferences
• Email preferences

Our business services and website are not directed to children under 16, and we do not knowingly collect their personal information for those purposes. If you believe a child has provided personal information, contact privacy@zof.ai so we can investigate and take appropriate action. The age requirement for entering the Services agreement is separate.

We may revise this policy as our practices and legal obligations change. The revision date appears at the top. Where required, we provide additional notice of material changes or obtain consent. A revised policy does not override an executed customer agreement or remove rights that applicable law provides.

For questions or rights requests, contact the privacy team at privacy@zof.ai. Written correspondence may be addressed to Zof AI, Inc., Privacy, 548 Market St #35410, San Francisco, CA 94104, United States. For a concern about a customer-controlled account or dataset, include the customer’s name so we can direct or assist with the request.

• Contact privacy@zof.ai
• Legal notice