Privacy Policy

1. Data Controller

ZeroCart AI LLC ("ZeroCart", "we", "us") is the data controller for the personal data collected through this service.

2. Data We Collect

• Account data: Email address, name, and password hash when you register.
• Payment data: Billing details processed by Stripe. We never store your card number — Stripe handles PCI compliance.
• Usage data: Pages visited, features used, session duration, and interaction logs to improve the service.
• Technical data: IP address, browser type, operating system, and device identifiers collected automatically.
• Communications: Emails you send us and support ticket content.
• Chat messages: The messages you type in our chat assistants (sales, landing-page and support) and, for the sales and landing-page assistants, the page you were on.

3. How We Use Your Data

4. Legal Basis (GDPR)

• Contract performance — delivering the service you subscribed to.
• Legitimate interests — preventing fraud and improving security.
• Legal obligation — tax records and regulatory compliance.
• Consent — marketing communications (you may withdraw at any time).

5. Data Sharing

We do not sell your personal data. We share it only with:

• Stripe — payment processing (PCI-DSS compliant).
• Postmark — transactional email delivery.
• Brevo (Sendinblue) — secondary email delivery (for example confirmations of privacy requests, and as a fallback if our primary email provider is unavailable).
• AI service provider (Anthropic) — processes the messages you type in our chat assistants in order to generate replies.
• VPS hosting providers — server infrastructure in the EU.
• Legal authorities — when required by law or valid legal process.

6. Retention

We retain your personal data for as long as your account is active, plus 3 years for billing records (required by US tax law). Usage and server logs are kept for as long as needed for the security and operation of the service. You can ask us to delete the data that relates to you through the privacy contact at the bottom of this page.

Chat assistants: when you use a chat assistant on our website, the message you type and the last few messages of the conversation are sent to our AI service provider (Anthropic) to generate a reply. The main sales assistant also receives the page you are on, a few indicators measured on the page (time on page, scroll depth, exit-risk level, number of clicks on calls to action, whether you are a returning visitor) and technical context (message number in the session, a discount code when one is offered, an internal test variant). For the main sales assistant and the landing-page assistant, messages that our automatic checks flag as abuse are stored but are not sent to the provider.

What we store: for the main sales assistant and the landing-page assistant, a session identifier, the page, the first 500 characters of your message and of the reply, the model used and the number of output tokens. In our event log, for the main sales assistant, its streaming variant and the support assistants, a session identifier, the page (a fixed label for the support assistants), the first 100 characters of your message, the language and the reply mode; for the main sales assistant and its streaming variant also the plan tier; for the main sales assistant the event log also holds a 100-character excerpt of the reply, the plan shown, the message counter, internal test-variant fields, whether an offer was shown with any offer code, and the page indicators listed above.

We do not store your IP address or your email address in these chat records (your IP address is used to limit the number of requests per minute; server-level logs are described under Technical data above). We do not currently apply an automatic deletion schedule to these chat records. Do not type sensitive personal data in the chat. To have these records deleted, write to the privacy contact at the bottom of this page.

7. Your Rights

Under GDPR you have the right to:

To exercise any right, email privacy@zerocartai.com. We will respond within 30 days. You also have the right to lodge a complaint with your local supervisory authority (in France: CNIL).

8. Cookies

We use strictly necessary cookies for session management and, with your consent, analytics cookies to understand how the product is used. You can adjust cookie preferences in your browser settings at any time.

9. Changes to this Policy

We may update this policy from time to time. When we do, we will update the "Last updated" date above and, where changes are material, notify you by email.