Last updated: February 28, 2026
Zib (“we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered knowledge management platform (“the Service”). By using the Service, you consent to the data practices described in this policy.
Account Information: When you register, we collect your email address, username, and password (stored as a salted bcrypt hash). If you sign in via Google or Apple, we receive your name and email from the provider. We never receive or store your social sign-in passwords.
Your Content: Files you upload (documents, images, code, etc.), collections you create, memories you save, and chat messages with the AI agent. This content is stored on our servers to provide the Service.
Usage Data: We collect server logs including IP addresses, request timestamps, and feature usage patterns for security, performance monitoring, and debugging. We also track storage usage, AI token consumption, and API request counts for plan enforcement.
Payment Information: Payment processing is handled entirely by Stripe, Inc. We do not store credit card numbers, bank account details, or other payment credentials on our servers. We only store your Stripe customer ID and subscription ID for billing management.
We use your information to:
To provide AI-powered features, Your Content may be processed by third-party AI services including:
When your content is sent to these providers, it is transmitted securely via encrypted connections. These providers process data according to their own privacy policies and data processing agreements. We do not send your content to AI providers for purposes other than fulfilling your direct feature requests.
Your data is stored on secure servers with encryption at rest and in transit. We implement industry-standard security measures including: encrypted passwords (bcrypt with salt rounds), HTTPS/TLS for all communications, secure API key generation and hashing, and access controls that restrict data access to authorized users only. Despite these measures, no method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security.
We do not sell, rent, or trade your personal information or Your Content. We may share information only in the following circumstances:
We retain your account information and content for as long as your account is active. When you delete your account, it enters a 30-day deactivation period during which you may reactivate it. After 30 days, all your data — including files, collections, memories, embeddings, chat history, API keys, and account information — is permanently and irreversibly deleted from our systems. Server logs are retained for up to 90 days for security and debugging purposes.
You have the following rights regarding your data:
For GDPR, CCPA, or other regional privacy rights requests, please contact us at [email protected].
The Service uses essential cookies and local storage for authentication (JWT tokens) and user preferences. We do not use third-party advertising cookies or tracking pixels. We do not participate in cross-site tracking or ad networks.
The Service is not intended for users under the age of 13 (or 16 in the European Economic Area). We do not knowingly collect personal information from children. If we learn that we have collected information from a child under the applicable age, we will take steps to delete that information promptly. If you believe a child has provided us with personal information, please contact us at [email protected].
Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from the laws of your country. By using the Service, you consent to the transfer of your information to these countries. We take steps to ensure your data is treated securely and in accordance with this Privacy Policy.
We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Service at least 30 days before the changes take effect. Your continued use of the Service after the effective date constitutes acceptance of the updated policy. We encourage you to review this page periodically for the latest information on our privacy practices.
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at [email protected].