Zima

1. Who we are

Zima Chat Inc. ("Zima", "we", "us", or "our") operates the Zima platform at zima.chat.

This Privacy Policy explains how we collect, use, and protect your personal information when you use our services.

2. Information we collect

We collect information you provide directly to us, including:

• Account information: name, email address, and password when you create an account.

• Phone number: if you choose to enable SMS notifications, we collect and store your phone number to send you pricing alerts.

• Usage data: how you interact with our platform, API usage, and model preferences.

• Payment information: billing details processed securely through our payment provider.

3. SMS notifications and phone number data

If you opt in to SMS notifications through your account settings, we collect your phone number for the sole purpose of sending you AI model pricing change alerts.

• Your phone number is encrypted at rest using AES-256-GCM encryption.

• We do not sell, rent, or share your phone number with third parties for marketing purposes.

• SMS messages are sent via Twilio, Inc. as our messaging service provider.

• You can opt out at any time by replying STOP to any SMS message or by disabling SMS notifications in your account settings at zima.chat/settings.

• Message frequency varies based on pricing changes. Message and data rates may apply.

4. How we use your information

We use the information we collect to:

• Provide, maintain, and improve our services.

• Send you transactional notifications including pricing alerts (if opted in).

• Process payments and manage your account.

• Respond to your questions and support requests.

• Comply with legal obligations.

5. Data sharing

We do not sell your personal information. We share your data only with:

• Service providers: Twilio (SMS delivery), Resend (email delivery), and Supabase (database) who process data on our behalf under strict confidentiality agreements.

• Legal requirements: when required by law, court order, or government authority.

6. Data retention

We retain your personal information for as long as your account is active or as needed to provide services.

Phone numbers collected for SMS notifications are deleted within 30 days of opting out or account deletion.

7. Security

We implement industry-standard security measures including encryption at rest and in transit to protect your personal information.

Phone numbers are encrypted using AES-256-GCM before storage.

8. Your rights

You have the right to:

• Access the personal information we hold about you.

• Request correction or deletion of your data.

• Opt out of SMS notifications at any time by replying STOP or via your account settings.

• Request a copy of your data by contacting us at privacy@zima.chat.

9. Contact us

If you have questions about this Privacy Policy or how we handle your data, please contact us at:

Zima Chat Inc.

privacy@zima.chat

zima.chat