Privacy Policy

1. Information We Collect

We collect the following information when you use Zhenfy:

• Account information: email address and password (hashed)
• Agent data: agent configurations, system prompts, tool URLs, and conversation history
• Zhenfy One data: the ideas and prompts you submit, the generated source code, build and test output, the apps you publish, and any data end users submit to them
• Usage data: API request logs, timestamps, and error reports
• Cookies: authentication tokens stored as HTTP-only cookies

2. How We Use Your Information

We use your information to:

• Provide and maintain the Zhenfy service
• Authenticate your identity and secure your account
• Process your AI agent requests through third-party model providers
• Monitor service health and prevent abuse
• Communicate important service updates

3. Third-Party Services

Zhenfy uses third-party services to operate. Your data may be processed by:

• Amazon Web Services (AWS) — infrastructure and data storage
• AI model providers (Anthropic — via AWS Bedrock, directly through the Anthropic API, or via a Claude subscription) — to process agent requests
• Google reCAPTCHA — to prevent abuse during signup and login

We do not sell your personal information to third parties.

4. Cookies & Site Analytics

We use essential cookies for authentication (login session tokens). These are HTTP-only cookies that cannot be accessed by JavaScript. We do not use tracking or advertising cookies.

Analytics on published apps. Apps built and published with Zhenfy One include privacy-friendly visitor analytics for the app owner. When someone visits a published app we record the page path, referrer, and a pseudonymous visitor identifier computed server-side as a SHA-256 hash of the visitor's IP address and browser user agent, salted with the current day so the identifier rotates daily. This identifier is not stored in the visitor's browser and is not a cookie; the analytics record keeps only the resulting hash, not the raw IP address or user agent. We do not collect names, emails, or account details from visitors. Analytics events are retained for 90 days. Where an app is served through a content delivery network, that network's standard access logs (each visitor's IP address, browser user agent, requested URL, and timestamp) are retained for up to 90 days for security purposes and to compute the same hashed visitor identifier. Raw log data (including IP address) is not shared with the app owner and is not used to identify or track individual visitors across apps. The aggregate analytics are available to the owner of the app.

5. Data Retention

We retain your account data and conversation history for as long as your account is active. You may delete your account at any time from the Account Settings page. Your account is deactivated immediately; your account record is retained for 72 hours before permanent deletion, to allow recovery in case of error. Deleting the account does not delete your agents or your Zhenfy One projects and the apps they run — delete those from their dashboards first. Anonymized usage logs may be retained for service improvement.

6. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request deletion of your account and associated data
• Change your email address or password
• Retrieve your agent configurations via the dashboard or the API (GET /v1/agents/{agent_id})

To exercise these rights, contact us at info@zhenfy.ai.

7. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email. Continued use of the service after changes constitutes acceptance of the updated policy.

8. Contact

For privacy-related questions, contact us at info@zhenfy.ai.