Privacy Policy

Zelvra ("Zelvra", "we", "us") is an AI virtual secretary that helps you manage your calendar and email. This policy explains what information we collect, how we use it, and the choices you have. Zelvra is operated from the United States and can be reached at johnthomas@zelvra.dev.

Information we collect

• Account information: your name, email address and password (stored securely by our authentication provider) when you create an account.
• Scheduling information: the calendar entries you create in Zelvra, your timezone, working hours, and the business details and preferences you share during onboarding.
• Assistant conversations: the messages you exchange with the Zelvra assistant, including any calendar or email details the assistant looked up to answer you.
• Google user data (only if you choose to connect your Google account), described in the next section.
• Usage data: pages visited and basic events (such as messages sent and bookings made), collected through Google Analytics to understand how the product is used.

Google user data

Connecting Google Calendar or Gmail is optional. You choose which access to grant on Google's consent screen, and you can disconnect at any time.

Google Calendar. With your permission, Zelvra reads your calendar events and busy times so the assistant can propose times without double-booking you, and creates or deletes events on your primary calendar when you confirm a booking or cancellation.

Gmail. Zelvra asks only for permission to send email. It cannot read your inbox. With your permission, Zelvra:

• Sends email from your account only after you review the exact message in Zelvra and click "Approve & send". Zelvra never sends email on its own.

Zelvra does not read, modify, label or delete your messages.

Limited Use disclosure

Zelvra's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We use Google user data only to provide and improve the user-facing scheduling and email features described above.
• We do not transfer Google user data to others except as necessary to provide those features (see "Service providers"), to comply with law, or as part of a merger or acquisition with your notice.
• We do not use Google user data for advertising, including personalized, retargeted or interest-based ads.
• We do not sell Google user data, and we do not use it to determine creditworthiness or for lending purposes.
• No human at Zelvra reads your Google user data unless you give us explicit permission for specific messages (for example, for support), it is needed for security purposes such as investigating abuse, or it is required by law.
• We do not use Google user data to develop, improve or train generalized or non-personalized AI or machine-learning models.

How we use AI

To answer your requests, the relevant parts of your conversation and any calendar or email content the assistant retrieves are sent to our AI model provider for processing in real time. This data is used only to generate the response for you and is not used by Zelvra or the provider to train AI models.

How we store and protect data

• Data is stored with our cloud hosting provider and transmitted over encrypted (HTTPS/TLS) connections.
• Your Google connection is stored as an encrypted credential (AES-256) that only our servers can use. Google access tokens are never sent to your browser.
• Zelvra has no access to your inbox. Emails you approve for sending are saved only as part of your conversation history.
• Access to our systems is restricted to authorized personnel.

Retention and deletion

• Disconnect Google: open Settings in Zelvra and click "Disconnect" next to Gmail or Google Calendar. This revokes Zelvra's access and deletes the stored credential immediately. You can also revoke access at myaccount.google.com/permissions.
• Delete your data: email johnthomas@zelvra.dev from your account address to delete your conversation history or your entire account. We complete deletion requests within 30 days.
• We keep account data while your account is active and delete it within 30 days after account deletion, except where we must retain it by law.

Service providers

We use trusted providers to run Zelvra: cloud hosting and database, authentication, AI model processing, transactional email delivery (for booking confirmations), and Google Analytics. They process data only on our behalf and under confidentiality obligations.

Emails we send

We send account emails (such as sign-up confirmation and password reset) and booking confirmations. Each booking confirmation includes an unsubscribe link.

Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal information, or object to its processing. Contact johnthomas@zelvra.dev and we will respond within 30 days.

Children

Zelvra is not intended for children under 16, and we do not knowingly collect their information.

Changes

We may update this policy. If changes are significant, we will notify you in the app or by email before they take effect.

Contact

Questions about privacy? Email johnthomas@zelvra.dev.