Skip to main content
Zas encrypts stored content, while processing the metadata needed to deliver and manage it. The privacy policy describes the general service. AI connection privacy explains the hosted ChatGPT and Claude integration.

​
What the service processes

  • Your account or session, sign-in profile, channel memberships, and notification tokens.
  • For an item: its channel, sender account, time, size, expiry, and state. Stored uploads also associate the account and upload session with an object identifier.
  • Network and operational records needed for security and reliability.
  • An external URL when you request its preview, public-link activity counters, and abuse-report information.
This metadata can associate accounts with stored objects. Encryption is not a promise that the service holds no account-to-item relationships.

​
Content and keys

The ordinary Zas browser, native apps, and local coding agent encrypt content before uploading it. The database and object storage hold encrypted content. A separate key service derives account keys from verified identity. An operator controlling that service with the relevant account identifiers could reconstruct keys. Zas does not describe this as end-to-end encryption.

​
When you authorize an AI app

Hosted ChatGPT and Claude access works differently from a local coding agent. A private Zas service holds encrypted connection keys, decrypts authorized reads, and encrypts content supplied by the AI app. Zas and the AI provider process plaintext during those operations. Only selected channels and granted operations are authorized; organization channels require additional admin approval. Review the data flow, duration, and disconnection rules.

​
Storage, retention, and deletion

Zas uses Firebase services and Cloudflare storage and delivery infrastructure. Its privacy policy also describes email delivery and analytics providers. These services may process data outside your country. Items follow their expiration and pinning rules. Deleting an account or item is separate from disconnecting an AI app. Infrastructure logs and backups may follow their own retention periods. For some legacy encrypted files, safe block deletion can be limited by shared storage references. Consult the privacy policy for analytics, retention, deletion, and personal-data rights. Use account deletion to remove your Zas account, and support for questions.