Privacy Policy

This Privacy Policy explains how ZIST AI INC, doing business as Zist AI ("Zist AI," "we," "us," or "our"), handles information in connection with the Zist AI browser extension and the website at tryzist.com (together, the "Service"). We have written it to be clear and honest about exactly what we do and do not do with data.

What Zist AI is

Zist AI is a research and outreach-preparation tool for sales professionals. Its single purpose is to help users understand a business and craft personalized outreach for it, relying only on information the business already displays publicly on its own website. When a user chooses to analyze a business's website, Zist AI reads the publicly available content on that site, and may read other publicly available pages on the same website, to generate an AI-written business summary, a set of likely pain points the business may be facing, and a personalized outreach pitch with a suggested subject line. Zist AI can also identify email addresses that are publicly published on the website and check whether those addresses appear valid and deliverable. Users may save the businesses they research, along with the generated summary, pitch, and any identified email addresses, to a personal dashboard for later reference. Zist AI is a preparation tool only. It does not send emails, contact anyone, or take any action on a user's behalf; what a user does with the output is entirely their own decision.

The information we handle

Account information. When you create an account, we collect your first name, last name, email address, and password. Your password is handled by our authentication provider and is never stored by us in readable form. We also store your account's usage counts (for example, how many analyses, email finds, and email verifications you have used) and your plan.

Website content you choose to analyze. When you run an analysis, the extension reads publicly available content from the business website you are viewing, and may read other publicly available pages on that same website. This content is used only to generate your summary, pain points, and pitch for that request. We do not sell it, and we do not build a database of the businesses you analyze.

Email addresses published on those websites. When you use the email features, the extension identifies email addresses that are publicly published on the business website, and can check whether a given address appears valid and deliverable. We only handle addresses that the business has chosen to display publicly on its own site.

Usage and account activity. We store your plan, your usage counts, and information necessary to operate your subscription. We keep the businesses, summaries, pitches, and verified email addresses that you explicitly choose to save to your dashboard.

We do not collect your browsing history. Zist AI only reads a website's content when you actively choose to analyze that website.

How we use information

We use the information described above only to:

• Provide the Service's core features (generate summaries, pain points, and pitches; find and check email addresses; save prospects to your dashboard).
• Create and secure your account, and enforce your plan's usage limits.
• Operate billing and send you transactional messages related to your account.
• Maintain, secure, and improve the reliability of the Service.
• Comply with applicable law and protect against fraud, abuse, and security threats.

We do not use your information for any purpose unrelated to the Service's single purpose described above.

Who we share information with

To operate the Service, we share limited information with the following third-party service providers ("sub-processors"), only as necessary to provide our core features:

• Anthropic (Claude API). We send the text content of the business website you are analyzing, together with your optional description of what you sell, so that AI can generate your summary, pain points, and pitch. We do not send Anthropic your name, email address, or account details. Privacy policy: https://www.anthropic.com/legal/privacy
• MillionVerifier. When you check an email address, we send that email address to MillionVerifier so it can assess whether the address appears valid and deliverable. We do not send your name, account details, or website content. Privacy policy: https://www.millionverifier.com/policies/privacy-policy/
• Supabase. Our authentication and database provider, which stores your account credentials, session, usage data, and the prospects you save. Privacy policy: https://supabase.com/privacy
• Cloudflare. Our backend infrastructure provider, which processes and secures requests between the extension and our service providers. Privacy policy: https://www.cloudflare.com/privacypolicy/
• Resend. Our email delivery provider, used only to send account-related transactional messages (such as an upgrade confirmation) to your account email address. Privacy policy: https://resend.com/legal/privacy-policy
• Google Fonts. The extension loads a web font from Google when the popup opens. As part of this, your IP address is visible to Google. No page content or account information is sent. Privacy policy: https://policies.google.com/privacy

We may also disclose information if required to comply with applicable law, or to protect the rights, safety, and security of our users and the Service.

We do not sell your data. We do not transfer or sell your data to advertising platforms, data brokers, or other information resellers. We do not use your data for personalized advertising, and we do not use it to determine credit-worthiness or for lending purposes.

Where your information is stored

Locally in your browser. Your login session, your saved profile settings, and your most recent analysis results are stored locally in your browser using Chrome's extension storage. Cached analysis results remain in your browser until you generate a new analysis for that page, clear your browser's extension storage, or uninstall the extension. We do not store your analysis results, scraped email addresses, or website content on our servers unless you choose to save a prospect to your dashboard.

On our servers. Your account information, usage counts, plan, and the prospects you choose to save are stored by our authentication and database provider, Supabase.

Data security

We take reasonable measures to protect your information. All data transmitted between the extension, our servers, and our service providers is sent over secure, encrypted connections (HTTPS). Account credentials and sensitive data are stored securely by our providers. We keep sensitive keys and credentials confidential on our servers and never expose them in the extension or on the website.

Your choices and rights

• Access, correction, and deletion. You may request access to, correction of, or deletion of your account data by emailing us at info@tryzist.com. You can also delete your account and its associated data from your account settings.
• Local data. You can clear locally stored data at any time by clearing your browser's extension storage or uninstalling the extension.

Limited Use disclosure

Zist AI's use of information obtained through the Service is limited to the practices described in this Privacy Policy. Our use of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.

Changes to this policy

If we make material changes to our data practices, we will update this Privacy Policy and, where appropriate, disclose those changes prominently. Your continued use of the Service after an update means you accept the revised policy.

Contact

If you have questions about this Privacy Policy or how we handle your information, contact us at info@tryzist.com.