1. Information We Access

When you connect your Google Account or LinkedIn account to Zynd, you grant us permission to access the following types of data through each provider’s OAuth scopes. We request only the minimum permissions needed to provide our service.

2. How We Use Your Data

We use the data we access solely to provide Zynd’s core features, and only after you explicitly connect your account and initiate an action:

• Meeting scheduling: Reading your availability to find open times, and creating/updating calendar events when you or your Persona schedules a meeting.
• Brief management: Storing your Brief with context and content you provide or approve, so your Persona can represent you accurately.
• File access: Managing only the Drive files created by Zynd or explicitly shared by you.

All access is user-initiated. Your Persona acts on your behalf only when you direct it to. We do not scan, mine, or analyze your data for advertising, profiling, or any purpose unrelated to your use of Zynd.

3. Data Storage & Security

Your Brief is stored securely on Zynd’s servers. Your calendar events remain stored in your Google Account. We do not copy, replicate, or store the full contents of your calendar events on our servers. We maintain OAuth tokens to act on your behalf, and these tokens are stored securely using industry-standard encryption.

Zynd fetches data from Google’s APIs in real time when needed to respond to your requests. We maintain a privacy-first architecture: for calendar data, we use only free/busy queries that reveal your availability without exposing meeting details. The application also maintains an audit log of privacy-sensitive data accesses so you can review when your data was read and by whom.

4. Data Sharing

We do not sell, rent, or share your personal data with third parties. Your Google Account data is accessed only by Zynd’s services acting on your behalf, and only for the purposes described in this policy.

We do not transfer your Google data to any third-party advertising networks, data brokers, or analytics services.

Our website uses Google Analytics to understand aggregate, anonymized usage of our marketing site. This does not involve your Google Account, LinkedIn account, or any data we access on your behalf.

5. Your Control

You have full control over the data we access:

• Revoke access anytime: Visit myaccount.google.com/permissions to remove Zynd’s access to your Google Account, or revoke Zynd’s access through your LinkedIn account settings. Once revoked, we can no longer access your data.
• Disconnect or delete data: You can disconnect either integration or delete the data we store for a given provider through your Zynd account settings, without deleting your whole account. See our Data Deletion page for details.
• Delete your account: You can delete your entire Zynd account through the app settings. Calendar events created by Zynd remain in your Google Account; you control them directly through Google Calendar.
• Limited scope:We only request the specific OAuth scopes listed above. You can review these permissions at any time through each provider’s consent screen.

6. Use of Google User Data

Zynd’s use and transfer of information received from Google APIs conforms to the Google API Services User Data Policy, including the Limited Use requirements. We access Google user data only to provide and improve our service’s core functionality. We do not use Google user data for advertising or to build user profiles for ad targeting.

7. LinkedIn Data

If you connect your LinkedIn account, Zynd accesses only the LinkedIn data you authorize through LinkedIn’s OAuth consent flow, such as your profile information and posts. We use this data solely to power your Persona’s understanding of your professional background and activity.

LinkedIn data is stored separately from your other data and is identifiable by source. We do not obtain LinkedIn data through scraping or crawling, and we do not combine LinkedIn data received through official LinkedIn APIs with data obtained through any scraping or crawling of LinkedIn.

You may disconnect your LinkedIn account or delete the LinkedIn data Zynd has stored at any time through your account settings or by contacting us. When you request deletion, we delete the stored LinkedIn data and associated access tokens, subject to applicable legal requirements.

8. Data Retention

We retain OAuth tokens only while your integration is connected, and delete them when you disconnect. LinkedIn profile data is retained only while your LinkedIn integration is active. Your Brief and other account content are retained until you delete your account. When you delete your account, we delete your stored data and tokens, subject to legal retention obligations.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you through the Zynd application or via the email associated with your account.

10. Contact Us

If you have questions about this Privacy Policy or our data practices, or wish to exercise your data rights, contact us at contact@zynd.ai or by mail at Zynd AI Inc, 8 The Green STE A, Dover, DE 19901.