Privacy Policy

Last updated: 6 April 2026

This Privacy Policy explains how ZERONOISE AI LTD (company number 17083711), registered at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom (“ZeroNoise”, “we”, “us”, or “our”) collects, uses, shares, and protects your information when you use our service at zeronoise.ai.

ZERONOISE AI LTD is the data controller for your personal data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

For data protection enquiries, contact us at legal@zeronoise.ai.

1. Information We Collect

Information You Provide

Account information:

  • Email address
  • Full name
  • Username
  • Password (stored only as a cryptographic hash — we never store your password in plain text)
  • Profile photo (optional)
  • Bio (optional)
  • Timezone

Organisation information:

  • Organisation name
  • Organisation type (personal or team)
  • Workspace names and settings
  • Member invitations (email addresses of invitees)

Agent and service content:

  • Agent configurations, instructions, and settings
  • Sources you add or approve for monitoring
  • Interactions with generated briefs and content

Information from Google Sign-In

If you sign in with Google, we receive:

  • Google account identifier
  • Email address
  • Full name
  • Profile picture URL

We use this information to create and authenticate your account. We store your Google access token and refresh token solely for authentication purposes.

Information Collected Automatically

Technical data:

  • IP address
  • Browser type and version
  • Device type
  • Operating system
  • Pages visited and actions taken within the service
  • Access times and session duration
  • Referral source

Analytics data:

We use Google Analytics to understand how visitors use our website. Google Analytics collects data such as pages visited, time on site, and general location (derived from IP address). See Section 6 (Cookies) for details.

Payment Information

Payments are processed by Stripe. When you subscribe to a paid plan, Stripe collects and stores your payment details (card number, billing address). We never receive or store your full payment card details. We store only:

  • Stripe customer identifier
  • Subscription identifier and status
  • Billing cycle dates
  • Usage and credit balance information

Publicly Available Information About Third Parties

ZeroNoise agents monitor publicly available content from third-party platforms and web feeds. In the course of providing this service, we automatically collect and store publicly available information about content creators, authors, and other individuals who appear in monitored sources. This may include:

  • Names or public usernames
  • Biographical information and profile descriptions
  • Profile images
  • Platform identifiers (channel IDs, account handles)
  • Content they have published on public platforms

This information is collected from publicly available sources to provide our content curation service. We process it on the basis of legitimate interest (UK GDPR Art. 6(1)(f)) — specifically, our interest in providing an effective content monitoring and research tool, balanced against the minimal impact on individuals whose information is already publicly available.

If you are a person whose publicly available information appears in ZeroNoise and you would like to exercise your data protection rights (including access, rectification, erasure, or objection), please contact legal@zeronoise.ai. We will respond within one month.

2. How We Use Your Information

We use your information for the following purposes:

Purpose Lawful basis (UK GDPR)
Creating and managing your account Performance of contract
Operating agents, generating briefs, and delivering the service Performance of contract
Processing payments and managing subscriptions Performance of contract
Sending transactional emails (confirmations, billing alerts, trial notifications) Performance of contract
Responding to support requests Performance of contract
Detecting and preventing fraud, abuse, and security threats Legitimate interest
Improving the service using aggregated, non-personal data Legitimate interest
Processing publicly available information about content creators and authors Legitimate interest
Website analytics (Google Analytics) Legitimate interest
Complying with legal obligations (e.g. retaining billing records) Legal obligation

3. AI Processing

ZeroNoise uses AI services from third-party providers to process content and generate briefs.

What is sent to AI providers:

  • Your agent instructions and configuration
  • Content from sources your agents monitor (articles, posts, transcripts)
  • System prompts (our internal instructions to the AI — not your personal data)

What is not sent to AI providers:

  • Your email address, name, or password
  • Your payment or billing information
  • Your personal data — unless you include it in your agent instructions

Each AI provider processes data under their own terms and privacy policies. We may change which AI providers we use without notice. AI providers may process data outside the United Kingdom (see Section 8).

4. Data Sharing

We do not sell your personal information.

We share your data only in the following circumstances:

  • With third-party service providers who process data on our behalf (see Section 5).
  • When you make content public — public agents and their briefs are visible to other users.
  • When required by law, regulation, or legal process.
  • To protect rights and safety — when necessary to protect the rights, safety, or property of ZeroNoise, our users, or the public.
  • In a business transfer — if ZeroNoise is involved in a merger, acquisition, or sale of assets, your data may be transferred. We will notify you before your data becomes subject to a different privacy policy.

5. Third-Party Service Providers

We use third-party services to operate ZeroNoise. The following table describes the categories of providers and the data they process:

Category Purpose Data processed Location
Cloud infrastructure Hosting, file storage, email delivery All service data, uploaded files, transactional emails United States
Stripe Payment processing Email, name, payment method, billing history United States
Google Analytics Website analytics IP address, browser, pages visited, session data United States
AI service providers Content processing and brief generation Agent instructions, source content United States
Error monitoring Application reliability and debugging Error traces, request metadata, and limited user identifiers when errors occur United States

We also use additional service providers for specific functions, including search, transcription, and content extraction. These providers receive only the data necessary to perform their function and do not receive your personal account information. We may change or update the providers we use at any time.

We maintain appropriate agreements with each provider to ensure your data is handled in accordance with applicable data protection law.

6. Cookies

We use cookies — small text files stored on your device — for the following purposes:

Essential cookies (always active — required for the service to function):

Cookie Purpose Duration
_hub_key Session authentication Browser session
_hub_web_user_remember_me Persistent login (“remember me”) 60 days
CSRF token Form security Browser session

Analytics cookies (can be blocked via browser settings):

Cookie Provider Purpose Duration
_ga, _ga_* Google Analytics Traffic analysis and usage patterns Up to 2 years

You can manage or block cookies through your browser settings. For full details, see our Cookie Policy.

7. Data Retention

Data type How long we keep it
Account data For the duration of your account
Billing records 7 years after the transaction (UK statutory requirement)
Server logs 90 days
Analytics data Event data: 2 months; user data: 14 months (per Google Analytics retention settings)
Data after account deletion Deleted within 30 days of confirmed request, except where legal retention applies
Backup systems Purged within 90 days of deletion from primary systems

8. International Data Transfers

ZERONOISE AI LTD is based in the United Kingdom. Most of our third-party service providers are based in the United States (see Section 5).

When your data is transferred outside the United Kingdom, we ensure appropriate safeguards are in place as required by UK GDPR, including:

  • The UK International Data Transfer Agreement (IDTA)
  • The UK Addendum to EU Standard Contractual Clauses
  • Adequacy decisions by the UK Secretary of State, where available

9. Your Rights

Under UK GDPR, you have the following rights:

  • Access — request a copy of the personal data we hold about you.
  • Rectification — request correction of inaccurate or incomplete data.
  • Erasure — request deletion of your personal data, subject to legal retention requirements.
  • Restriction — request that we limit processing of your data in certain circumstances.
  • Portability — receive your data in a structured, commonly used, machine-readable format.
  • Objection — object to processing based on our legitimate interests.
  • Withdraw consent — where we process your data based on consent, you may withdraw it at any time.

How to exercise your rights: Email legal@zeronoise.ai. We will respond within one month of receiving your request.

Right to complain: You have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

10. California Residents

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with additional rights:

  • Right to know what personal information we collect, use, and disclose.
  • Right to delete your personal information.
  • Right to opt out of sale — we do not sell your personal information.
  • Right to non-discrimination for exercising your privacy rights.

To exercise these rights, contact legal@zeronoise.ai.

11. Children’s Privacy

ZeroNoise is intended for users aged 13 and over. Users between 13 and 17 must have permission from a parent or legal guardian.

We do not knowingly collect personal data from anyone under 13. If we become aware that we have collected data from a child under 13, we will delete it promptly. If you believe a child under 13 has provided us with personal data, please contact legal@zeronoise.ai.

12. Security

We take reasonable measures to protect your information:

  • Passwords are stored using industry-standard cryptographic hashing.
  • All data in transit is encrypted with HTTPS/TLS.
  • Data at rest is encrypted on our hosting infrastructure (AWS).
  • Session tokens are cryptographically generated.
  • CSRF protection is applied to all forms.
  • Payment data is handled entirely by Stripe (PCI DSS Level 1 certified) — we never access your card details.

No system is perfectly secure. If you discover a security vulnerability, please report it to support@zeronoise.ai.

13. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you at least 30 days in advance by email or through the service. Non-material changes take effect when posted.

Your continued use of the service after the updated policy takes effect constitutes acceptance.

14. Contact

For privacy-related questions or to exercise your rights: