Privacy Policy
Last updated: August 2026
Overview
zn ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our prompt injection detection service.
Information We Collect
Account Information: Email address, company name (optional), and billing information when you subscribe to a paid plan.
Usage Data: API call counts, latency metrics, and aggregate statistics about your usage patterns.
Evidence Data: When our service analyzes input for prompt injection, we generate evidence records for audit purposes.
AI Processing and Retention
Evidence Only: We store evidence records (verdict, confidence, threat classification, timestamps) but do NOT retain the original prompt content after analysis.
No Prompt Retention: Your actual prompt text is processed in memory and discarded immediately after analysis. We never store, log, or train on your prompt content.
SHA-256 Hashing: Evidence records include a SHA-256 hash of the analyzed input for verification purposes. This hash cannot be reversed to recover the original content.
Retention Period: Evidence records are retained for up to 90 days. We do not retain your prompts. You can request earlier deletion at any time.
How We Use Your Information
- To provide and maintain our service
- To process your subscription and billing
- To send you service-related communications
- To improve our detection algorithms (using aggregate, anonymized data only)
- To comply with legal obligations
Data Security
We implement industry-standard security measures including encryption in transit (TLS 1.3), encryption at rest (AES-256), and regular security audits. Our infrastructure runs on AWS with SOC 2 Type II compliance.
Your Rights
You have the right to:
- Access your personal data
- Request deletion of your data
- Export your data in a portable format
- Opt out of marketing communications
Contact
For privacy-related inquiries, contact us at privacy@usezn.com or reach out on X @use_zn.