Z.ai Privacy Policy

Thank you for using Z.ai!

JINGSHENG HENGXING TECHNOLOGY PTE.LTD, along with its affiliates (collectively referred to as "we", "our", or "us"), is committed to respecting your privacy and diligently protecting any information we gather from or about you. This Privacy Policy outlines how we process Personal Data that we collect from or about you in connection with your use of our websites, applications, and other services on Z.ai (together referred to as the "Services").

This Privacy Policy only applies to individual users and does not apply to content that we process on behalf of customers of our business offerings. If you are enterprises or developers using the API Services ("API Services") available on Z.ai, please refer to the Data Processing Addendum for API Services.

1 Data Controller

The Services are provided and controlled by JINGSHENG HENGXING TECHNOLOGY PTE.LTD with its registered address in 10 ANSON ROAD, #26-03, INTERNATIONAL PLAZA, SINGAPORE 0759903. JINGSHENG HENGXING TECHNOLOGY PTE.LTD is the controller and is responsible for the processing of your Personal Data as described in this Privacy Policy. If you have any questions about how we use your personal data, please contact user_feedback@z.ai.

2 What Personal Data We Collect

2.1 We collect personal data relating to you ("Personal Data") as follows:

Personal Data You Provide to Us Directly
We collect Personal Data if you create an account to use our Services or communicate with us as follows:

• Account information. We collect information that you provide when you set up an account, such as your date of birth (where applicable), username (where applicable), email address, and password.
• Communication Information. When you contact us, we collect the information you send us, such as proof of identity or age, contact details, feedback or inquiries and the contents of any messages you send.
• User Content. This includes any text prompts, images, or other data you input. This information is processed in real-time to provide you with the Service.

Personal Data We Receive from Your Use of the Services:
We automatically collect certain information from you when you use the Services, including internet or other network activity information such as your IP address, unique device identifiers, and cookies.

• Device and Network Information. In accordance with the permissions set on your device or browser, your device or browser automatically provides us with information regarding the timing and manner in which you install, access, or use our Services.
• Usage Information. We collect information about your use of the Services, such as the dates and times of access, browsing history, information about the links you click, pages you view, and other information about how you use the Services, and technology on the devices you use to access the Services.
• Log Information. We collect information about how our Services are performing when you use them.
• Cookies & Similar Technologies. We use cookies and similar tracking technologies to operate and provide the Service.

Personal Data We Receive from Other Sources
We may receive information described in this Privacy Policy from other sources:

• Log-in, Sign-up, or Linked Services. If you choose to sign-up or log-in to the Services using a third-party service such as Google or GitHub, we may collect information from the service, such as access token.
• Security Information. We receive information from our trusted partners to protect against fraud, abuse, and other security threats to our Services.
• Public Information. We may obtain publicly available information via Internet sources to train our models and provide services.

3 How We Use Your Personal Data

We use your information to operate, provide, develop, and improve the Service. We may also aggregate or anonymize Personal Data in such a way that it no longer identifies you and use this data for the purposes mentioned above. We will keep and use the anonymized data in its de-identified form and will not attempt to re-identify it, unless required by law.

4 How We Share Your Personal Data

We may disclose your personal data to the following categories of recipients:

• Affiliates: our affiliated companies.
• Vendors and Service Providers: third party vendors necessary to provide you with our Services.
• Business Transfers: any business partner, investor, assignee, or transferee to facilitate transactions.
• Government Authorities or Other Third Parties: any competent law enforcement body, regulatory agency, court, or third party.
• With your consent: any other person, with your consent to the disclosure.

5 Your Rights and Choices

Depending on where you live, you may have certain rights with respect to your personal information.

• Right to know: the right to know what personal data we process about you.
• Access & data portability: the right to request a copy of the personal data we process about you.
• Deletion: the right to request that we delete personal data collected from you.
• Correction: the right to request that we correct inaccurate personal data.
• Objection: the right to object to processing of your personal data.
• Restriction: the right to restrict our processing of your personal data.
• Withdrawal of consent: where processing is based on consent, you have the right to withdraw your consent.

Contact us if you would like to exercise any of your rights.

6 The Security of Your Personal Data

The security of your personal data is a priority for us. We implement security measures to protect your personal data from unauthorized access, theft, disclosure, alteration, or loss.

7 How Long Do We Keep Your Personal Data

We retain personal data for as long as it is needed to provide our Services and for the purposes outlined in this Privacy Policy.

8 Where We Store Your Personal Data

Depending on your location, your personal data may be transferred and processed outside the jurisdiction in which you reside, generally processed in Singapore.

9 Personal Data relating to children

Our Services are not directed to individuals under 18, and we do not knowingly collect Personal Data from children under 13.

10 How Do We Use Cookies and Similar Technologies

We may use cookies and similar technologies to gather information resulting from access and use of our Services. Specific technologies can include:

1. Cookies or Browser Cookies: small text files for record keeping purposes.
2. Web Beacons: small electronic files for counting users and understanding how our Services are used.

11 Privacy Policy Updates

We may update this Privacy Policy from time to time. Review the Privacy Policy each time you access our Services.

12 Contact Us

Questions, comments, and requests regarding this policy should be addressed to user_feedback@z.ai.

Data Processing Addendum for API Services

This Data Processing Addendum ("DPA") governs the processing of the data provided by business and enterprises users through API Services.

1. Obligations of the Company

• Process Customer Data on Customer’s behalf.
• Safeguard the security of Customer Data.
• Provide reasonable assistance to Customer for their legal obligations.

2. Obligations of the Customer

• Comply with all Data Protection Laws.
• Represent and warrant necessary rights to provide Customer Data to Company.

3. International Data Transfer

• Services provided from Singapore.

4. Data Return and Deletion

• DPA remains in effect as long as Company carries out Customer Data processing operations.