Privacy Policy
Effective October 26, 2026
This policy covers the Zeron website (zeron.sh), the Zeron desktop app, the Zeron apps for iOS and Android, and Zeron Cloud. Zeron is operated by 1499487 B.C. LTD. (“Zeron”, “we”, “us”).
The short version
- We collect what we need to sign you in and to sync your chats and workspace between your devices.
- Your chats are stored on our servers so they can sync between your devices. They are encrypted in transit and at rest, but not end-to-end encrypted, so our systems can technically read them.
- Our apps contain no advertising, analytics or crash-reporting SDKs. We don’t sell your data or use it for advertising, and we don’t train AI models on it.
- The coding agents you run (Claude Code, Codex and others) send your prompts and code to their own providers under your own accounts. Those providers’ privacy policies apply to that data.
What we collect
Your account
Sign-in is handled by WorkOS. When you sign in we receive your name, email address, a user ID, and the name and ID of your organization. The apps keep this on your device so they can show who is signed in.
Chats and workspace
To keep your devices in sync, our servers store:
- chat transcripts: your messages, agent replies, tool output and diffs, and transcripts of voice calls;
- chat titles, message previews and status;
- your projects: name, folder path on your machine, branch and linked GitHub repository;
- your devices: a random device ID, device name, platform, app version and when it was last online.
Files, images and terminal sessions you open from another device are relayed between your own devices. We do not keep a copy. Where possible, terminals connect directly between your devices.
Voice
The mobile apps use the microphone only during a voice call you start. The call’s audio streams to OpenAI’s Realtime service through the ChatGPT account signed in to Codex on your computer. The resulting transcript is saved in the chat like any other message. We don’t record call audio. Dictation in the desktop app runs entirely on your computer, and its audio never leaves the computer.
Zeron Cloud
If you use Zeron Cloud, we also process:
- Connected accounts. The sign-ins or API keys you connect for Claude, ChatGPT/Codex, Anthropic, OpenAI and GitHub, along with the account’s email, name and plan. Credentials are encrypted with AES-256-GCM before they are stored. They are only handed to cloud machines that you start.
- Cloud machines. A cloud machine holds a clone of the repository you choose, the agent sessions you run on it, and short-lived access tokens. Deleting the session deletes the machine. The chat transcript stays until you delete it.
- GitHub. Through the Zeron GitHub App we access only the repositories you grant: their contents, pull requests and workflows (read and write) and metadata (read). We request no permissions on your GitHub account itself.
- Usage and billing. Machine time, usage and credit records. Payments are processed by Stripe. We never see your card number. We receive a Stripe customer ID and your subscription and invoice status.
Notifications
If you allow notifications on iPhone or iPad, we store your device’s push token. A notification contains the chat title and a short status such as “Run finished”, and is delivered through Apple Push Notification service. The Android app shows only notifications generated on the device.
Website
The zeron.sh homepage counts page views and download clicks with PostHog. Each page load gets a random ID. No cookies or local storage are used, IP addresses and location are not recorded, and nothing is sent if your browser signals Global Privacy Control or Do Not Track.
Logs
Like any web service, our servers see your IP address when you connect. Our hosting provider keeps operational logs for a limited time. We use them only to run, debug and secure the service.
What stays on your device
The apps cache your chats, drafts and settings locally so they open quickly and work offline. On Android, sign-in tokens are encrypted with a key held in the Android Keystore, and app data is excluded from device backups. On iOS, credentials are stored in the Keychain. Signing out clears the local chat cache.
How we use it
- to provide Zeron: sign-in, syncing chats between your devices, relaying commands to your machines, and running cloud machines;
- to bill for Zeron Cloud;
- to keep the service secure, prevent abuse and fix problems;
- to contact you about your account or important changes.
Who we share it with
We share data only with the providers that run parts of Zeron for us, and only what each needs:
| Provider | Purpose |
|---|---|
| Cloudflare | Hosting: servers, storage and backups for everything described above |
| WorkOS | Sign-in and organizations |
| Stripe | Payments for Zeron Cloud |
| Boat | Hosting for Zeron Cloud machines |
| GitHub | Repository access you grant to Zeron Cloud |
| OpenAI | Voice calls, through your own ChatGPT account |
| Anthropic, OpenAI | Refreshing and checking usage of the agent accounts you connect to Zeron Cloud |
| Apple | Push notifications on iPhone and iPad |
| STUN servers that help your devices connect directly. They see your IP address | |
| PostHog | Anonymous page-view counts on zeron.sh |
We may also disclose information when required by law, to protect the rights and safety of our users or the public, or as part of a merger or acquisition. If that happens, this policy continues to apply to your data.
These providers may process data in the United States, Canada and other countries where they operate.
How long we keep it
We keep your account and workspace data while your account is active. Chats and projects you delete are removed from the live service within 30 days. When you ask us to delete your account, we delete your account data, chats and backups within 30 days. The exception is billing records, which we keep as long as tax and accounting law requires.
Your choices and rights
- Delete individual chats and projects in the app.
- Disconnect agent accounts and GitHub, or turn off Zeron Cloud, in Settings.
- Turn off microphone and notification access in your device settings at any time.
- Ask us for a copy of your data, or to correct it. Email sina@zeron.sh from the address you sign in with.
Depending on where you live, you may have further rights under laws such as Canada’s PIPEDA, the GDPR or the CCPA, including the right to complain to your data protection authority. We will honour these requests whatever your location.
Deleting your account
To delete your Zeron account and its data, email sina@zeron.sh from the address you sign in with, with the subject “Delete my Zeron account”. We will confirm the request and, within 30 days, delete:
- your account, profile and organization membership;
- your chats, projects, devices and their backups;
- connected agent and GitHub accounts, and any cloud machines.
We keep billing records as long as tax and accounting law requires. To remove the app’s local data from a phone, sign out or uninstall the app.
Security
All traffic uses TLS. Stored data is encrypted at rest, and connected credentials are additionally encrypted with keys kept separately from the data. No system is perfectly secure. If a breach affects your data, we will notify you as the law requires.
Children
Zeron is a developer tool and is not directed at children under 16. We don’t knowingly collect their data.
Changes
We will post any changes on this page and update the date at the top. Significant changes will also be announced in the app or by email.
Contact
1499487 B.C. LTD., British Columbia, Canada
sina@zeron.sh