Privacy Policy

Ziritex is an AI-native workspace for scientific writing. This policy explains what personal data we collect when you use the Ziritex website and application at ziritex.com, why we collect it, who we share it with, and the control you have over it.

Ziritex is the controller of the personal data described here. For any question about this policy, write to privacy@ziritex.com.

Note. The operating legal entity and its registered address are not yet published. We will add them to this policy before Ziritex leaves its early-access phase.

Account data

When you create an account, our authentication provider collects your email address and, if you use a social login, your name and profile image. We keep a matching record in our own database so that we can attach your projects and workspace roles to you.

Your content

We store the projects you create: LaTeX and Markdown files, images and other uploads, bibliographies, compiled PDFs, compile logs, and the collaborative edit history that makes realtime editing work. We also store the version history of each project in a Git repository that we operate for you.

Collaboration data

If you invite people to a workspace, we store the invitation, the role you gave them, and their membership. We store short-lived presence records (who is in a file and where their cursor is) so that collaborators can see each other. Presence records are deleted automatically within about a minute of you going idle.

AI conversation data

If you use the AI agent, we store your prompts, the agent's replies, and the edits it proposed or applied, so that the conversation survives a page reload and you can audit what the agent changed.

Technical data

We collect data that your browser sends automatically: IP address, browser and operating system, and the pages you request. We collect error reports and performance traces when something in the application fails.

Communications

If you join the waitlist or write to us, we keep your email address and the content of your message so that we can reply.

We do not collect payment card details. We do not run advertising trackers, and we do not sell personal data.

• To give you the service: store your projects, sync your edits, compile your documents, and show your PDF.
• To authenticate you and enforce who may read or write each workspace and project.
• To run the AI features you choose to use.
• To find and fix faults, and to keep the service secure and available.
• To reply to your messages and to send service notices about your account.
• To comply with the law.

We do not use your content to profile you, and we do not make decisions about you by automated means that have a legal or similarly significant effect.

The AI agent is opt-in. Ziritex works fully with the agent panel closed. Nothing goes to a model provider until you ask the agent for something.

When you do send a request, this is what happens:

• We send your prompt together with the relevant parts of your project (for example the file you are editing, related files, and compile errors) through OpenRouter to the model provider you or we have selected.
• We instruct our model providers not to use your content to train their models. Their contractual terms support this. We cannot, however, give you a guarantee on behalf of a third party.
• Providers may cache your content for a short period to make repeated requests faster and cheaper. This cache is scoped to your request and expires on its own.
• We do not use your content to train any model of our own.

If your work is under an embargo, contains personal data about research participants, or is otherwise confidential, think before you send it to the agent. Keep the agent panel closed for that project.

If the GDPR or the UK GDPR applies to you, we rely on these legal bases:

• Performance of a contract: to supply the service you signed up for, meaning accounts, storage, sync, compiling, and collaboration.
• Legitimate interests: to keep the service secure, to prevent abuse, to fix faults, and to understand aggregate usage. We balance these against your rights.
• Consent: for the waitlist and any marketing email. You can withdraw consent at any time.
• Legal obligation: when a law requires us to keep or disclose data.

We share personal data only with the service providers below, each of which processes it on our instructions under a data processing agreement. We do not sell personal data and we do not share it with advertisers.

We will also disclose data if the law requires it, to enforce our terms, or to protect the rights and safety of our users. If Ziritex is ever acquired or merged, your data may transfer as part of that transaction; we will tell you before it happens and before any change to this policy.

Some of our providers are in the United States. When we transfer personal data out of the European Economic Area or the United Kingdom, we rely on the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, or an adequacy decision, together with the technical measures described in this policy. Write to privacy@ziritex.com for a copy of the safeguards that apply to a given transfer.

• Projects and files: until you delete them. Deleting a project removes its files, its collaborative edit history, and its Git repository from our live systems.
• Account data: until you delete your account.
• Presence: deleted automatically within about a minute of you going idle.
• Compiled PDFs and compile logs: kept while the project exists, and re-created on each compile.
• Error reports and traces: up to 90 days.
• Backups: deleted content can persist in backups for up to 35 days before it is overwritten.

We protect your data with measures that include:

• Encryption in transit with TLS, and encryption at rest at our storage providers.
• Role-based access control on every workspace and project, checked on the server for every request.
• Isolated, short-lived containers for LaTeX compiling, so one project's build cannot reach another's.
• Least-privilege access for our own staff, granted only when needed to operate or support the service.

No system is perfectly secure. If we find a breach that puts your rights at risk, we will tell you and the relevant supervisory authority as the law requires.

Depending on where you live, you have some or all of these rights:

• To ask what personal data we hold about you and get a copy of it.
• To correct data that is wrong or incomplete.
• To have your data deleted.
• To restrict or object to how we process it.
• To receive your data in a portable, machine-readable format.
• To withdraw consent where we rely on consent.
• To complain to your data protection authority.

You can export or delete most of your data from the application directly. For anything else, write to privacy@ziritex.com. We will reply within 30 days. We do not charge for this and we will not treat you differently for asking.

We use cookies and browser storage only for functions that the service needs. We do not use advertising or cross-site tracking cookies, so we do not show a consent banner.

• Session cookies set by our authentication provider keep you signed in.
• Local storage keeps your interface preferences, such as light or dark theme, and queues your edits while you are offline so that nothing is lost.

You can clear this storage in your browser at any time. If you clear the session cookies, you will be signed out.

Ziritex is not intended for children under 16. We do not knowingly collect data from them. If you believe a child has given us personal data, write to privacy@ziritex.com and we will delete it.

We will update this policy as the product changes. When a change matters to you, such as a new sub-processor, a new purpose, or a new category of data, we will tell you by email or with a notice in the application before it takes effect. The effective date at the top of this page always shows the current version.

For privacy questions, data requests, and anything in this policy: privacy@ziritex.com

For everything else: contact@ziritex.com