Zorli AI Vault Privacy Policy

Who We Are

Zorli AI Vault ("Zorli") is operated by Kerzie Consulting LLC ("Kerzie Consulting LLC," "we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, retain, and delete personal information when you use the Zorli mobile app, website, and related services.

Kerzie Consulting LLC is the data controller for personal information processed through Zorli. If you have privacy questions or requests, you can contact us at admin@zorlivault.com or by mail at 6005 Autumn Way, McKinney, TX 75072-5567, United States.

The Data We Collect

We collect the following categories of data from the current version of the Zorli app: names, email addresses, user IDs, photos or videos uploaded by users, audio submitted for voice transcription, other user content (such as uploaded documents, password vault entries, notes, and chat content), search history inside the app, purchase history and subscription status, and product interaction data used to operate subscription and feature limits.

Depending on how you use Zorli, this information may include your first and last name, email address, account profile details, uploaded files and images, profile photo, password vault entries, Smart Finder questions and AI chat messages, voice recordings submitted for transcription, subscription purchase status, and usage counts such as document uploads, password entries, or AI prompt usage.

How We Collect Data

We collect data directly from you when you create an account, verify your email, sign in, upload documents, add password vault entries, edit your profile, use voice transcription, use Smart Finder or AI chat, or subscribe to a paid plan.

We also collect data automatically when you use core app features, such as subscription usage counts, account security events, and service operations needed to keep the app secure and functioning.

We receive certain subscription and purchase information from Apple and RevenueCat in order to validate subscriptions, restore purchases, and manage access to paid features.

How We Use Data

We use personal information primarily for app functionality. This includes creating and managing accounts, authenticating users, verifying email addresses, recovering accounts, storing and securing uploaded content, providing Smart Finder and AI-powered search, transcribing audio that you choose to submit, syncing password vault entries, enforcing subscription limits, restoring purchases, preventing fraud, and maintaining service security and reliability.

We do not use personal information from the app for third-party advertising. We do not sell or share personal information for cross-context behavioral advertising.

AI Features

If you use Zorli's AI features, we process the documents, filenames, text prompts, search queries, and voice inputs that you choose to submit so we can provide document extraction, transcription, search, and question-answering features.

Before Zorli sends that content to any third-party AI provider, the app presents an in-app permission request that explains what data will be sent and who will receive it. You can decline that permission. If you decline, your files can still be stored in Zorli, but AI-powered document search, Smart Finder question-answering, and voice transcription will not run until you later grant permission.

If you grant permission, these features may involve sending your submitted content to third-party AI service providers, including OpenAI for audio transcription and certain AI processing, and Google Gemini for document extraction and AI-powered document search. We ask for that permission before sharing the data.

We work to delete AI-indexed document data when you delete files or delete your account, but third-party providers may retain limited request or logging data for security, abuse monitoring, billing, or legal compliance for a period of time under their own policies.

Third Parties and Service Providers

We share data only with service providers and processors that help us operate Zorli. These include Railway for application hosting, Supabase for database and private file storage, RevenueCat for subscription state management, Apple for in-app purchases and subscription validation, OpenAI for voice transcription and certain AI processing, Google Gemini and related Google services for document extraction and AI-powered document search, and SendGrid or our configured email delivery provider for verification and password reset emails.

We require third parties that process user data on our behalf to provide protections that are consistent with this Privacy Policy and applicable law. They may process data only as needed to provide services to us, comply with law, or protect the security and integrity of their systems and our service.

Data Retention

We retain account information such as your name, email address, and user ID for as long as your account remains active and as needed to provide the service. User content such as uploaded documents, password vault entries, profile images, chat history, and in-app search history is generally retained until you delete it or delete your account.

Audio that you submit for transcription is retained only as long as reasonably necessary to complete transcription, operate the feature securely, and satisfy processor-side abuse monitoring or logging requirements.

Subscription and purchase records may be retained for longer periods as required for accounting, tax, fraud prevention, legal compliance, and dispute resolution, typically up to 7 years. Verification tokens expire after 30 minutes, and password reset codes expire after 10 minutes. Residual backups and security logs may remain for a limited period after deletion.

Deletion and Account Deletion

You can request deletion of your account and associated app data from within the app using the account deletion option in the Profile area, or by contacting us at admin@zorlivault.com.

When you delete your account, we will delete or de-identify the personal information we control unless we need to retain certain records for legal, security, tax, accounting, subscription, or fraud-prevention reasons. Some data may remain in backups for a limited period before those backups are overwritten.

Your Privacy Rights

Depending on where you live, you may have rights to access, correct, delete, or export your personal information, object to or restrict certain processing, withdraw consent where processing is based on consent, and lodge a complaint with a supervisory authority.

To request access to your data or a portable export of the personal information associated with your account, contact us at admin@zorlivault.com. We may need to verify your identity before fulfilling your request.

If you are a California resident, you may have rights under the California Consumer Privacy Act, including the right to know, delete, and correct certain personal information. Zorli does not sell or share personal information for cross-context behavioral advertising, so we do not offer a separate "Do Not Sell or Share" workflow at this time.

Legal Bases for Processing

Where applicable under GDPR or similar laws, we process personal information based on one or more of the following legal bases: performance of our contract with you, your consent, our legitimate interests in operating and securing the service, and compliance with legal obligations.

For example, we rely on contract and legitimate interests to run your account and subscription, consent for device permissions such as camera, microphone, and photo library access, and legal obligations for retaining certain billing or tax records.

Permissions and Consent

Zorli may request access to your camera, photo library, microphone, or files only when needed to provide features that you choose to use. You can revoke those permissions at any time in your device settings.

Zorli also asks for separate in-app permission before sending your uploaded documents and filenames to Google Gemini for AI-powered document search, before sending Smart Finder questions or related document context for AI processing, and before sending voice recordings to OpenAI for transcription.

You may decline or later stop using AI or voice features at any time. If you want previously stored data deleted, use the in-app deletion tools or contact us using the email above.

Children's Privacy

Zorli is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13 without appropriate authorization, we will delete that information.

Tracking and Advertising

Zorli does not use third-party advertising in the app. We do not use IDFA for advertising purposes, and we do not track users across third-party apps or websites for advertising or advertising measurement.

Because Zorli does not use app tracking for advertising, we do not currently present an App Tracking Transparency prompt.

Security

We use technical and organizational safeguards designed to protect personal information, including encryption in transit, encrypted storage of sensitive vault content such as uploaded files, password vault data, and stored chat history, authentication controls, and access controls intended to limit unauthorized access.

Some account and service metadata, such as email address, username, filenames, subscription records, and usage records, may be stored in standard service databases so we can operate the app. Those records are protected with access controls and related safeguards, but they are not all encrypted at rest in the same way as sensitive vault content.

No system is perfectly secure, but we work to protect the confidentiality, integrity, and availability of the data entrusted to us.

International Transfers

Our service providers may process information in the United States and other countries. When we transfer personal information across borders, we rely on appropriate safeguards as required by applicable law.

Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date above and may provide additional notice through the app, the website, or by email when appropriate.

Contact Us

If you have questions about this Privacy Policy or want to exercise privacy rights, contact Kerzie Consulting LLC at admin@zorlivault.com or by mail at 6005 Autumn Way, McKinney, TX 75072-5567, United States.