Privacy Policy

1. About This Policy

This Privacy Policy covers two things: the zenithro.com.au website — how we handle information submitted through our contact form and what data our hosting infrastructure collects — and Zenithro Desktop, our desktop application for Mac and Windows. It applies to visitors and prospective clients of Zenithro Pty Ltd, and to people who use Zenithro Desktop.

Zenithro Desktop is local-first. It is used by one person on their own computer, and that person's data lives on their computer, in a folder they choose, optionally inside their own OneDrive. We do not run a database of users' emails, documents or clients. The sections below say which of the two they apply to.

2. What We Collect (Website)

Contact form

When you submit the contact form on this website, we collect your name, email address, and the message you write (plus company and mobile number if you choose to provide them). This information is sent to us via Resend (a transactional email service) and delivered to our inbox. We do not store contact form submissions in a database.

Cookies

This website uses a cookie consent banner. If you accept cookies, a preference cookie is stored in your browser to remember your choice. We do not use advertising cookies.

Analytics

This website uses Vercel Analytics to understand overall traffic, such as which pages are visited and how many people visit them. It is cookieless and privacy-friendly: it does not use cookies, does not collect personal information, and does not track you individually across websites. It only reports aggregate, anonymised page-view data.

3. How We Use Website Data

• Contact form data is used solely to respond to your enquiry.
• We do not sell, share, or use your contact details for marketing purposes.
• We do not use your data for any purpose beyond responding to your message.

4. Zenithro Desktop and Your Microsoft Account

Signing in

Sign-in to Zenithro Desktop is through Microsoft (Microsoft Entra ID). We never see or store your Microsoft password. Microsoft issues Zenithro Desktop a token, and that token is stored on your computer only.

The permissions Zenithro Desktop asks Microsoft for, and why

• Read your profile (your name and email address) — to show who is signed in.
• Read and write mail — to read emails in your own mailbox, and to create drafts in your Drafts folder.
• Read and write your own calendar — to show deadlines and to put reminders on your own calendar. No invitations are sent to anyone.
• Read contacts — to match names in emails to people you already know.
• Stay signed in (offline access) — so you are not asked to sign in every time.

Zenithro Desktop never sends email. It only creates drafts in your Drafts folder. You send from Outlook yourself.

Where your mail goes

Emails and attachments are read from your mailbox and stored on your own computer. We do not copy them to our servers.

Disconnecting

You can disconnect Zenithro Desktop at any time in the app's Settings, or from your Microsoft account page (myaccount.microsoft.com, under Apps). Either revokes our access.

Other people's information

Your emails and documents will contain information about other people, such as your clients. Zenithro Desktop processes it only to do what you ask, on your behalf, and it stays on your computer apart from the text sent for AI processing described below.

5. How Zenithro Desktop Uses AI, and What Leaves Your Computer

To summarise emails, draft replies, read documents and answer questions, Zenithro Desktop sends the relevant text to a language model run by Anthropic (Claude). This goes through a relay service we operate on Google Cloud (Firebase), in the Sydney region (australia-southeast1).

What is and is not sent

• Sent: the text of the emails, documents and notes needed for that task, plus your question.
• Not sent: your Microsoft token, your password, or your whole mailbox.

Before text leaves your computer, Zenithro Desktop replaces Australian Tax File Numbers and similar identity numbers with placeholders. Your original documents are never altered.

Text in transit between Zenithro Desktop, our relay and these providers is encrypted (TLS). Content is not stored on our relay; our relay keeps a usage count per subscription (how much was used, and when), not the content.

Anthropic processes the content to produce the answer under Anthropic's Commercial Terms, which do not permit it to train on customer content. Anthropic may retain content briefly for abuse monitoring under its own policy. See Anthropic's privacy policy.

Anthropic is based in the United States, and content sent for AI processing is processed there. Our relay and licence records stay in Australia (Sydney). Microsoft, Stripe, Sentry and Cloudflare may process data outside Australia under their own terms.

Zenithro Desktop currently uses Anthropic only. If we add another AI provider, we will list it here and update this policy before any of your content is sent to it.

Zenithro Desktop can be used with AI switched off. Features that need it are then unavailable; nothing else changes.

6. What Stays on Your Computer

• All emails, documents, clients, deadlines, notes, and Zenithro Desktop's memory of how you like things done stay on your computer, in a folder you choose. If that folder is inside OneDrive, Microsoft syncs it under your own OneDrive terms.
• Dictated notes use your computer's built-in dictation. On Mac, supported languages are transcribed on the device. On Windows, Microsoft's speech service may process the audio under your Microsoft privacy settings. Zenithro Desktop does not keep audio on disk and does not send audio to us or to Anthropic.
• Zenithro Desktop keeps versions of documents for 14 days so changes can be undone. It never deletes your files; it only moves them within the folder you chose.
• Uninstalling Zenithro Desktop leaves your folder in place. You delete it yourself if you wish.

7. Payments

Subscriptions to Zenithro Desktop are handled by Stripe. Card details are entered on Stripe's pages, and we never see or store them. Stripe handles GST invoicing. See Stripe's privacy policy.

We store the subscription status, the email address used to subscribe, and an install identifier for each licensed computer, on Google Cloud (Firestore, Sydney region), so that Zenithro Desktop can check the subscription is active.

8. Crash and Performance Reports

Zenithro Desktop sends crash reports and slow-screen timings to Sentry so we can fix problems. These contain technical details and a hashed install identifier — never email or document content. You can switch this off in the app's Settings at any time.

There is no other analytics or tracking in Zenithro Desktop, and no third-party advertising or analytics SDKs.

9. Updates

Zenithro Desktop checks for updates from our download server (Cloudflare R2). That request includes the app version and platform only.

10. Third-Party Services

• Resend — website only. Used to deliver contact form submissions to our inbox. Governed by Resend's privacy policy.
• Vercel — website only. This website is hosted on Vercel. Standard server logs (IP address, request metadata) may be retained per Vercel's data policy.
• Microsoft — identity and mail access for Zenithro Desktop, under your own Microsoft agreement.
• Anthropic — the language model behind Zenithro Desktop's AI features.
• Google Cloud / Firebase — our AI relay and our licence records, in the Sydney region.
• Stripe — payments for Zenithro Desktop subscriptions.
• Sentry — crash reports from Zenithro Desktop.
• Cloudflare — Zenithro Desktop downloads and updates.

11. Data Breaches

Data breaches: If a breach of data we hold is likely to cause serious harm, we will notify affected people and the Office of the Australian Information Commissioner under the Notifiable Data Breaches scheme.

12. Your Rights

You may request access to, correction of, or deletion of any personal data you have submitted to us by getting in touch through our contact form. We will action your request promptly.

For Zenithro Desktop, you can export or delete your data at any time yourself, because it is on your own computer. To have your subscription record and install identifiers deleted from our servers, ask us through the same contact form; we delete them within 30 days.

13. Complaints

Complaints: If you have a concern about how we handle your personal information, contact us at support@zenithro.com.au. We will respond within 30 days. If you are not satisfied, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

14. Contact Us

• Get in touch: use our contact form
• Email: support@zenithro.com.au
• Company: Zenithro Pty Ltd, Melbourne, Australia
• ABN: 73 691 889 620