Zist AI

Privacy Policy

Last updated: October 19, 2026

This Privacy Policy explains how ZIST AI INC, doing business as Zist AI ("Zist AI," "we," "us," or "our"), handles information in connection with the Zist AI browser extension, the Zist AI dashboard, and the website at tryzist.com (together, the "Service"). We have written it to be clear and honest about exactly what we do and do not do with data.

What Zist AI is

Zist AI is a research and outreach-preparation platform for sales professionals. Its single purpose is to help users understand a business and craft and send personalized outreach to it, relying on information the business already displays publicly.

The Service has two main parts that work together:

  • A browser extension. On any business website, the extension generates an AI-written business summary, a set of likely pain points, and a personalized outreach pitch with a suggested subject line. It can also identify email addresses and phone numbers that are published publicly, straight from the source, check whether an email address appears valid and deliverable, and surface names that appear publicly for context.
  • A dashboard. On the dashboard at tryzist.com, users can research a business the same way without the extension, organize and save the businesses they research, discover businesses to reach out to, and build and send email sequences from their own connected email account.

Zist AI works with information that is publicly available about the business. What a user does with the output is their own decision.

Part 1 — The browser extension

When you actively choose to analyze a business, the extension:

  • Reads the publicly available content of the business to generate your summary, pain points, and pitch. This content is used only to produce that result for you.
  • Identifies email addresses and phone numbers that are publicly available, and can check whether an email address appears valid and deliverable.
  • Surfaces names that appear publicly (for example, an owner or team member listed on the business's site), shown to you for context. We do not build a separate database of individuals.

What the extension stores on your device. Your login session, a record that the extension was installed, and your most recent results are stored locally in your browser using Chrome's extension storage. This includes a per-site cache, kept for up to 30 days, of the analysis, the email addresses found, and the phone numbers found, so that reopening the same business does not repeat the work. This cached data stays in your browser until it expires, until you generate new results for that page, or until you clear your browser's extension storage or uninstall the extension. We do not store your analysis results, the contact details found, or the content read on our servers unless you choose to save a prospect to your dashboard.

We do not collect your browsing history. The extension only reads a business's content when you actively choose to analyze it.

Signing in. You can create an account and sign in with an email address and password. Signing in with Google is also available as a convenience. If you choose Google sign-in, Google provides us with your basic profile information (your email address and name) solely to create and access your account. We request only basic identity information. We do not request, and the extension does not receive, access to your Gmail, Google Drive, or any other Google service through sign-in.

Part 2 — The dashboard

On the dashboard, in addition to the features above, the Service handles the following:

Your Sales Profile. To personalize your pitches, you can save a profile containing the name and email you sign your outreach with, your website, a description of what you sell, how you prefer to close, a tone preference, and optional social links. This is stored on our servers and used only to generate your pitches and sign your outreach.

Dashboard research. When you research a business from the dashboard, our service reads that business's publicly available content on our server to generate the same summary, pain points, pitch, email addresses, and phone numbers the extension produces. As with the extension, this uses only publicly available information, and we do not keep it except in the results you choose to save or that appear in your recent research.

Recent research. Businesses you research on the dashboard but do not save are kept in a recent-research list so you can revisit them without repeating the work. This list holds the business's domain, the generated analysis, and any email addresses and phone numbers found. It is limited to your most recent researched businesses and is automatically removed after about 30 days. Businesses you choose to save are handled separately, under "Saving prospects" below.

Finding businesses to contact. When you search for businesses to reach out to, we send your search terms to Google's Places service to return matching businesses. We display those results to you and do not store them; from there, researching a business uses our own process on that business's publicly available content.

Saving prospects. When you save a business, we store the generated summary, pain points, pitch, subject line, tags, your notes, the business's name and website, and the email addresses and phone numbers you chose to keep, so you can access them later. Saved prospects remain available until you delete the prospect or delete your account. You can organize saved prospects into lead lists.

Email sequences and your connected inbox. If you connect your own email account, Zist AI can send the outreach sequences you build, from your account, on your instruction. We use a third-party provider (Nylas) to make this connection. We store only what is needed to operate it: the connection's identifier, the connected email address, the provider, and the connection's status. We do not read, download, or store the contents of your mailbox. The connection is used only to send the outreach you set up and to detect activity on the messages you send: when a recipient replies (so the sequence automatically stops), and whether a recipient opened your email or clicked a link in it (so you can see engagement). For a reply, we record only the sender's address and the subject line to mark the sequence as replied — never the message body.

Part 3 — Information and practices that apply to the whole Service

Account information. When you create an account, we collect your first name, last name, email address, and password. Your password is handled by our authentication provider and is never stored by us in readable form. We also store your plan and your usage counts (for example, how many analyses, email finds, email verifications, phone finds, and discovery searches you have used).

How we use information. We use the information described in this policy only to: provide the Service's features; create and secure your account and enforce your plan's usage limits; operate billing and send you transactional messages related to your account; maintain, secure, and improve the reliability of the Service; and comply with applicable law and protect against fraud, abuse, and security threats. We do not use your information for any purpose unrelated to the Service's single purpose.

Who we share information with

To operate the Service, we share limited information with the following third-party service providers ("sub-processors"), only as necessary to provide our features. In each case we share only what that provider needs:

We may also disclose information if required to comply with applicable law, or to protect the rights, safety, and security of our users and the Service.

We do not sell your data. We do not transfer or sell your data to advertising platforms, data brokers, or other information resellers. We do not use your data for personalized advertising, and we do not use it to determine credit-worthiness or for lending purposes.

Where your information is stored

Some information is stored locally in your browser (your login session and the per-site caches described in Part 1). Your account information, usage counts, plan, Sales Profile, saved prospects, lead lists, recent research, connected-account records, and sequences are stored by our database provider, Supabase.

Data security

We take reasonable measures to protect your information. All data transmitted between the extension, the dashboard, our servers, and our service providers is sent over secure, encrypted connections (HTTPS). Account credentials and sensitive data are stored securely by our providers. We keep sensitive keys and credentials confidential on our servers and never expose them in the extension or on the website.

Your choices and rights

  • Access, correction, and deletion. You may request access to, correction of, or deletion of your account data by emailing us at info@tryzist.com. You can also delete your account and its associated data from your account settings, and you can disconnect a connected email account at any time from the dashboard.
  • Local data. You can clear locally stored data at any time by clearing your browser's extension storage or uninstalling the extension.

Limited Use disclosure

Zist AI's use of information obtained through the Service is limited to the practices described in this Privacy Policy. Our use of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.

Changes to this policy

If we make material changes to our data practices, we will update this Privacy Policy and, where appropriate, disclose those changes prominently. Your continued use of the Service after an update means you accept the revised policy.

Contact

If you have questions about this Privacy Policy or how we handle your information, contact us at info@tryzist.com.