1. Introduction
This Privacy Policy describes how ZagAIrot Technologies LLC ("ZagAIrot," "we," "us," or "our"), operating the DonDataBrain platform and related services, collects, uses, and protects your personal information when you use our websites, applications, APIs, AI agents, and related services (collectively, the "Services").
By using our Services, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use our Services.
2. Information We Collect
2.1 Information You Provide
- Account information: Name, email address, and password when you create an account.
- Payment information: Billing details processed securely through Stripe. We do not store your full credit card number.
- Conversation logs: Messages, prompts, and interactions you have with our AI agents and services.
- User content: Files, configurations, bot definitions, task data, and any content you upload or create within the platform.
- Communication data: Information you provide when contacting support or corresponding with us.
2.2 Information Collected Automatically
- Usage data: Pages visited, features used, session duration, click patterns, and interaction frequency.
- Device information: Browser type, operating system, screen resolution, and device identifiers.
- Log data: IP address, access timestamps, referring URLs, and API request metadata.
3. How We Use Your Data
We use the information we collect for the following purposes:
- Provide and operate our Services: Process your requests, run AI agents, manage your account, and deliver the features you use.
- Improve the platform: Analyze usage patterns to improve performance, fix bugs, and develop new features.
- Communicate with you: Send service-related notices, respond to inquiries, and provide customer support.
- Process payments: Handle subscriptions, billing, and refund requests through our payment processor.
- Governance and compliance: Maintain audit records required by the ArkHive Protocol governance framework.
- Security: Detect and prevent fraud, abuse, and unauthorized access to the platform.
4. Data Storage and Infrastructure
4.1 Local Storage
Core application data is stored in SQLite databases on our secured servers. User account information, task data, bot configurations, and platform settings are maintained in encrypted local storage with regular backups.
4.2 ArkHive Audit Chain
Governance decisions, agent spawn events, and certification records are logged to the ArkHive audit chain. These records are cryptographically hashed and append-only, meaning they cannot be retroactively modified. ArkHive audit records are permanent by design and are retained indefinitely to maintain governance integrity.
4.3 Voice Data
If you use voice features, text-to-speech requests are processed through Kokoro. Audio is generated in real time and is not stored by ZagAIrot after delivery. Kokoro' own privacy policy governs their handling of request data.
5. Third-Party Services
We use the following third-party services to operate our platform. Each service processes data according to its own privacy policy:
We do not sell your personal information to any third party. Data shared with third-party services is limited to what is necessary to provide the specific functionality.
6. Your Rights
You have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you.
- Deletion: Request deletion of your account and associated personal data. We will process deletion requests within 30 days.
- Export: Request a machine-readable export of your data, including conversation logs, bot configurations, and task history.
- Correction: Request correction of inaccurate personal information.
- Opt-out: Opt out of non-essential data collection and marketing communications at any time.
To exercise any of these rights, contact us at shahram@zagairot.com.
7. Communication Consent
We may communicate with you via email, phone calls, or text messages only with your explicit opt-in consent. You will never be added to a communication list without affirmatively agreeing.
- Marketing emails: Opt-in only. Every marketing email includes an unsubscribe link.
- Phone calls and text messages: Opt-in only. Reply STOP to any text message to immediately opt out.
- Service notifications: Essential service communications (security alerts, billing confirmations, account changes) are sent as part of operating your account and do not require separate opt-in.
We honor all opt-out requests within 48 hours.
8. Cookies and Local Storage
We use browser localStorage to maintain authentication tokens and session state. This is necessary for the platform to function and to keep you logged in.
- Authentication tokens: Stored in localStorage to maintain your session. Cleared on logout.
- User preferences: Theme settings and UI preferences stored locally on your device.
- No tracking cookies: We do not use third-party tracking cookies, advertising cookies, or analytics cookies that track you across other websites.
9. Data Retention
10. Data Security
We implement appropriate technical and organizational measures to protect your personal data, including encrypted data storage, secure API authentication, rate limiting, IP-based access controls, and regular security audits. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.
11. Children's Privacy
Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, contact us immediately and we will delete it.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on our website. Your continued use of the Services after changes take effect constitutes acceptance of the updated policy.
13. Contact
For questions, concerns, or requests related to this Privacy Policy, contact:
Effective date: March 1, 2026