Privacy Policy
Last updated 2026-10-09
Who we are
Zeus is operated by Zeus Consulting ("we", "us"). This policy explains what personal data the Zeus platform processes, why, and the choices you have. Contact us through zeusconsultingservices.com.
What we collect
Account data: your name, email address, a one-way hash of your password (never the password itself), and, if you sign in with Google, your Google account identifier and verified email.
Workspace data: your organisation profile, the documents you upload, the obligations and matches generated from them, and the actions your team takes. This content belongs to your organisation.
Usage and security data: sign-in sessions, IP address and browser user agent on security-relevant events, and records of AI processing (model, token counts, cost) used for billing and limits.
Billing data: handled by Stripe. We store your Stripe customer and subscription identifiers; we never receive or store card numbers.
How we use it
To provide the service: authenticate you, score funding opportunities against your profile, extract obligations from documents you upload, and send the emails the service depends on (verification codes, password resets, invitations).
To secure the service: detect session theft, rate-limit abuse, and keep an append-only audit trail of administrative actions.
To bill you and enforce the limits of your plan.
We do not sell personal data, we do not use your documents to train AI models, and we do not show advertising inside the product.
AI processing
Documents you upload are sent to our AI provider (OpenAI) solely to extract structured obligations for you. Under the provider's API terms, data submitted through the API is not used to train its models. Uploaded content is treated as data, never as instructions.
Sub-processors
Vercel (hosting), Supabase (database and file storage), Upstash (cache and job queue), OpenAI (document analysis), Resend (transactional email), Stripe (payments) and Google (optional sign-in). Each processes data only as needed to provide its part of the service.
Isolation and security
Each organisation's data is separated by row-level security enforced in the database. Passwords are hashed with scrypt; verification and reset codes are stored only as hashes, expire after 15 minutes and are limited to ten attempts. Refresh tokens are held in cookies scripts cannot read and are rotated on every use.
Retention
Workspace content is kept while your account is active. When you ask us to delete your account or workspace, we delete the associated content, except records we must keep for legal, tax or security reasons (such as billing records and the administrative audit trail).
Your rights
Depending on where you live (including under the GDPR and UK GDPR, and US state privacy laws such as the CCPA), you may have the right to access, correct, export or delete your personal data, and to object to or restrict processing. Contact us through zeusconsultingservices.com. We will respond within 30 days.
Cookies
We use only cookies that are strictly necessary to keep you signed in and protect against cross-site request forgery. We do not use advertising or cross-site tracking cookies in the product.
Changes
We will update this page when our practices change and revise the date above. Material changes will be notified to account owners by email.