Privacy Policy

Panzoe Technologies ("Panzoe") is a Canadian company serving a global audience, providing an AI-powered subscription platform worldwide. This policy explains what we collect, why, and the rights you have. We design for privacy: your data powers your copilots — it is never sold.

• Account information — name, email, password (stored as a salted hash), job title, timezone and workspace details.
• Connected account data — when you (or a workspace owner/admin) connect Google Workspace or Microsoft 365, Panzoe syncs the content those services return under the permissions you grant: email metadata and message content (Gmail, Outlook), calendar events, contacts, file names and document content (Drive, OneDrive, Word, Excel), and tasks (Google Tasks, Microsoft To Do). Important: connected accounts are attached to your workspace — their synced summaries are available to the workspace's AI Brain, and raw mailbox access is limited to workspace owners and admins.
• AI conversation history — prompts, copilot conversations and the content you add to your pillars (tasks, notes, records, finance entries, goals), so your copilots can maintain context and memory.
• Usage analytics — feature usage, page interactions and performance diagnostics used to improve the product.
• Device information — browser type, operating system, approximate region and identifiers needed for security and session management.
• Cookies — see our Cookie Policy for categories and controls.
• Payment information — handled entirely by Stripe. Panzoe never stores full card numbers; we retain only transaction records (plan, amount, currency, status).

• Provide and personalise the Services, including copilot memory and cross-pillar intelligence within your workspace.
• Process subscriptions, billing and refunds through Stripe.
• Secure the platform — authentication, fraud prevention, audit logging and abuse detection.
• Improve Panzoe — aggregate analytics, quality evaluation and research. We do not use your private content to train third-party foundation models.
• Communicate — service messages, receipts, security notices and (with your consent where required) product updates.

We use a small number of vetted processors to run Panzoe: cloud hosting and database infrastructure, Stripe (payments), AI model providers (to generate copilot responses — requests are sent without unnecessary identifiers), and email delivery services. Each processor is bound by contractual data-protection obligations.

Your data is stored in secured cloud infrastructure with encryption in transit (TLS 1.2+) and at rest. We retain personal data while your account is active and for a limited period afterwards to comply with legal, tax and audit obligations, after which it is deleted or irreversibly anonymised.

Payment transaction records are retained for a minimum of seven years where required by Canadian tax law.

Subject to applicable law, you may:

• Access and export your data — use "Export my data" in Settings for an instant machine-readable copy.
• Correct inaccurate information via Settings or by contacting us.
• Delete your account and data — use "Delete account" in Settings, or email privacy@panzoe.ai. Deletion permanently removes your profile, solely-owned workspaces, connected-account tokens, synced content, AI memory and analytics identifiers — see /legal/data-rights for exactly what is removed.
• Object to or restrict certain processing, and withdraw consent where processing is based on consent.
• Lodge a complaint with your data-protection authority.

As a Canadian company, Panzoe complies with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy law, including British Columbia's PIPA. We follow the ten fair-information principles, obtain meaningful consent, and limit collection to what is necessary for the identified purposes.

For users in the European Economic Area and the United Kingdom, we process personal data under the legal bases of contract performance, legitimate interests (platform security and improvement) and consent (where applicable). International transfers from the EEA/UK rely on appropriate safeguards such as Standard Contractual Clauses. You may exercise all GDPR rights described in section 6.

Panzoe operates globally from Canada — a jurisdiction the European Commission recognises as providing adequate protection for personal data under PIPEDA. When we localise infrastructure to additional regions, this policy will be updated with region-specific detail.

The Services are not directed at children under 16 and we do not knowingly collect their data. If you believe a child has provided personal information, contact privacy@panzoe.ai and we will delete it.

We will notify you of material changes to this policy before they take effect. Privacy questions and requests: privacy@panzoe.ai · Panzoe Technologies.