This policy explains what information Zyno Engineering collects when you use our website and products, what we do with it, and the choices you have. We collect what we need to run the services, we do not sell personal information, and we do not use your content to train AI models.
Who we are
Zyno Engineering (“Zyno”, “we”, “us”) builds software products, including Beacon, SCOPE and the other products listed on zynoengineering.com (together, the “Services”). This policy covers the website and the Services. Where we provide a Service to a business under a separate written agreement, that agreement also applies, and it controls if the two differ.
When a business uses a Service for its team, that business decides who has access and what is stored. For that information we act on the business’s behalf, and requests about it may be handled through that business.
What we collect
Information you give us
- Account information: your name, email address, role and team, and the identifier your sign-in provider (for example, Google) returns when you sign in.
- Content: what you and your colleagues put into the Services — for example plans, goals, tasks, documents, messages to the assistant, contacts, drafts and uploaded files.
- Messages to us: what you send when you email us or use the contact page.
Information collected automatically
- Session information: a cookie that keeps you signed in (see Cookies).
- Technical logs: standard server records such as IP address, browser type, the pages and features requested, and the time of the request, used to operate and secure the Services.
- Activity records: some Services keep a record of changes made within a workspace (who changed what, and when) so the workspace can see its own history.
Information from services you connect
If you choose to connect another account — see Connected accounts — we receive the information that connection is authorised to provide.
How we use it
- To provide, maintain and support the Services, including signing you in and showing your workspace its own information.
- To carry out the features you use, such as searching your documents, drafting text, or syncing tasks with another tool.
- To keep the Services secure, prevent misuse, and fix problems.
- To respond to you and to send service-related notices.
- To comply with law and enforce our Terms of Service.
We do not sell personal information, and we do not use it for third-party advertising.
AI processing
Some features use AI models provided by third parties (currently Google’s Gemini models) to produce answers, drafts, summaries and research. When you use these features, the relevant content is sent to the model provider to produce the result you asked for. Research features may also send search queries to the provider’s web search.
We do not use your content to train AI models. AI output can be wrong; please review it before relying on it.
Connected accounts
Some Services let you connect accounts at other providers, such as Google Drive, Microsoft 365, Jira, Asana or Microsoft Planner. You choose whether to connect, and you can disconnect at any time.
- We request only the permissions the feature needs, which the provider shows you before you agree.
- We access that account on your behalf, with your permissions, and only to do what you ask — for example importing a file you selected, or syncing tasks in a project you linked.
- The credentials the provider issues are stored encrypted and are never shown to other users.
- Disconnecting deletes the stored credentials. You can also revoke access from the provider’s own account settings.
Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.
Who we share it with
- Your workspace: content you add to a shared workspace is visible to its members according to their roles.
- Service providers who help us run the Services — hosting and database providers, sign-in providers, and AI model providers — who may use the information only to provide their services to us.
- Providers you connect, when you ask us to send something to them (for example, creating a task in a linked project).
- Legal and safety: when required by law, or when needed to protect the rights, property or safety of our users, the public or Zyno.
- Business transfers: if Zyno is involved in a merger, acquisition or sale of assets, subject to this policy.
Cookies
We use a single essential cookie to keep you signed in to the Services. It lasts up to 30 days or until you sign out. We do not use advertising or analytics cookies. Your browser may also store small preferences (such as light or dark mode) on your own device.
How long we keep it
We keep information for as long as your account or your organisation’s workspace is active, and as needed to provide the Services, comply with legal obligations, resolve disputes and enforce agreements. When a person is removed from a workspace, their private conversations and connected-account credentials are deleted. Workspace leaders can export their organisation’s data, and individuals can export their own. Deleted information may remain in backups for a limited period.
Security
We use reasonable technical and organisational measures to protect information, including encrypted connections, encryption of stored credentials for connected accounts, and role-based access within workspaces. No system is perfectly secure, and we cannot guarantee absolute security. If you believe you have found a security issue, please contact us.
Your choices and rights
Depending on where you live, you may have the right to access, correct, delete, export or restrict the use of your personal information, and to object to certain processing. You can do much of this yourself in the Services; otherwise, contact us. If your account belongs to an organisation, we may refer your request to that organisation. We will not discriminate against you for exercising these rights. You may also have the right to complain to your local data protection authority.
Children
The Services are intended for businesses and are not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us and we will delete it.
International transfers
We and our service providers may process information in countries other than the one where you live. Where required, we take steps so that transferred information remains protected in line with this policy.
Changes to this policy
We may update this policy from time to time. We will post the new version here with a new effective date, and for material changes we will give reasonable notice through the Services or by email.
Contact
Questions or requests about privacy: [email protected], or use our contact page.