Privacy Policy for CorZen by Zenly LLC
Updated: July 27, 2026
Zenly LLC (“Zenly,” “we,” “our,” or “us”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use CorZen, our proprietary tool (“CorZen” or the “Service”). By using CorZen, you agree to the practices described here and the CorZen Terms of Service, which are incorporated herein by reference. If you do not agree, do not use the Service.
1. Scope and Regulatory Preemption
This Privacy Policy applies solely to your use of CorZen. CorZen is designed for individuals in the United States. We implement strict data residency controls to ensure compliance with U.S. national security regulations. If you access the Service from outside the U.S., you do so at your own initiative and are responsible for compliance with local laws.
The “Regulatory Pivot”: In the event of a conflict between state regulations (e.g., CO SB24-205, CA CCPA) and Federal mandates or Executive Orders, you agree that Federal law shall preempt and control. Zenly LLC reserves the right to unilaterally adjust its compliance posture to align with a National AI Framework.
2. Information We Collect
a. Information You Provide
We collect the following: Account Credentials (name, email, birthday (optional), organization) and Project and Team Data (goals, milestones, task descriptions, and identifiers of team members).
- Warranty: You warrant that you have obtained affirmative consent from any team member whose data you input. This warranty extends to any individual who participates in a call or meeting you record or import into CorZen through a connected integration, including participants outside your organization.
- User Content: Prompts, questions, or textual inputs.
- Support & Subscription Data: Feedback, bug reports, and billing data handled via PCI-compliant processors (we do not store full credit card details).
b. Information Collected Automatically
We log IP addresses, browser type, device info, and usage metadata. We honor Global Privacy Control (GPC) signals.
CRITICAL LEGAL NOTICE: Do not submit sensitive personal information. Per U.S. v. Heppner (2026), you acknowledge that communications with CorZen are NOT privileged. Inputting sensitive strategies likely WAIVES attorney-client privilege and work-product protection. Zenly LLC disclaims all liability for the disclosure of such data in legal discovery or subpoenas.
3. Google API Services and Google Workspace Integration
If you choose to connect a Google account, CorZen requests limited access to Google Drive solely to let you import files you explicitly choose to bring into the Service.
What we access. Only files you personally select through Google’s own file-selection window (Google Picker) when importing — CorZen does not browse, list, or otherwise access any other files in your Google Drive, Docs, Sheets, or Slides. We also access the email address of the connected Google account, shown to you in-app so you can confirm which account is connected.
How we use it. Files you select are imported into your CorZen “My Files” storage and, only at your further choice, used as context for CorZen’s project-planning features. We do not use this data for advertising, and we do not sell it.
How we store it. Imported file content is encrypted at rest and in transit, consistent with Section 7. The security token that authorizes future access on your behalf is stored securely, accessible only to our servers, and is never shared with any third party.
How you revoke access. You may disconnect your Google account at any time from CorZen’s Account Settings → Integrations page. Disconnecting immediately revokes CorZen’s access at Google’s end. You may also revoke access directly from your Google Account’s own security settings at myaccount.google.com/permissions. Disconnecting does not automatically delete files you already imported into My Files — you may delete those independently at any time from within CorZen.
Policy compliance. CorZen’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
4. Fathom and Meeting-Notetaker Integrations
If you choose to connect Fathom or another supported meeting-notetaker service, CorZen imports meeting notes you choose to sync into the Service.
What we access. Meeting title, date, attendee names and emails, the AI-generated summary, and action items. The full word-for-word transcript is only imported if you separately enable that option.
Third-party consent is your responsibility. You are solely responsible for obtaining the consent of every participant in any call you record or import into CorZen, including participants outside your organization, and for complying with all applicable recording and wiretap laws in your jurisdiction. CorZen does not independently verify that this consent was obtained.
How we use it. Imported notes are stored in your CorZen “My Files” storage and, only at your further choice, used as context for CorZen’s project-planning features. We do not use this data for advertising, and we do not sell it.
How we store it. Imported content is encrypted at rest and in transit, consistent with Section [Data Security]. The credential that authorizes future access on your behalf is stored securely and never shared with any third party.
How you revoke access. You may disconnect a notetaker integration at any time from CorZen’s Account Settings → Integrations page. Disconnecting stops future syncing; it does not automatically delete notes already imported — you may delete those independently at any time from within CorZen.
5. Consent and Legal Basis
Where required (including GDPR), we rely on: your explicit consent, fulfillment of a contract, compliance with legal obligations, and our legitimate interests in operating and securing the platform. You may withdraw consent at any time by contacting support@thezenly.com.
6. How We Use Your Information
We use your data to: provide and improve the Service; process payments; communicate with you regarding updates or support; ensure security and prevent fraud; and comply with legal obligations. We do not use your inputs to train third-party models outside of our secure, encrypted environment.
7. Sharing Your Information
We do not “sell” your personal data. We may share information with: Service Providers (hosting, payment processing, security auditing); Legal Authorities (when required by subpoena or to comply with U.S. national security laws); and Business Transfers (in the event of a merger or acquisition).
8. Data Security and Encryption
We implement industry-standard administrative, technical, and physical security measures. All User Content is encrypted at rest and in transit. However, no system is 100% secure, and you provide information at your own risk.
9. Data Retention
We retain your information for as long as your account is active or as needed to provide the Service. We may retain data longer if required for legal compliance, dispute resolution, or to enforce our agreements.
10. Your Rights (CCPA, VCDPA, CPA, CTDPA, GDPR)
Depending on your location, you may have the right to: Access (request a copy of your data); Deletion (request we delete your data); Correction (fix inaccuracies); and Opt-out of profiling or automated decision-making. To exercise these rights, email support@thezenly.com.
11. Use of Cookies and Tracking
We use essential cookies to maintain your session and security. We do not use third-party advertising cookies or trackers for behavioral targeting.
12. AI Accountability and Bias
Zenly LLC is committed to the responsible development of AI. We perform periodic audits for algorithmic bias. As the “Operator,” you are responsible for reviewing and verifying the accuracy of all AI-generated outputs before implementation.
13. Age Restrictions (13/16/18 Rule)
You represent that you are 18+ only.
- 18+ Only: CorZen is strictly for business and professional use by individuals aged 18 and older. By using the Service, you represent and warrant that you meet this requirement.
- Minors & State Protections: We do not “sell/share” personal data. We do not knowingly collect (as defined by CCPA) the personal data of users under 16, nor do we knowingly collect data from children under 13 in accordance with COPPA.
- Remediation: If we become aware that we have inadvertently collected data from any individual under 18, we will take immediate steps to delete such information and terminate the account without refund. Contact support@thezenly.com for concerns.
14. Future Compliance and AI Regulatory Adaptation
Zenly LLC monitors evolving laws (e.g., EU AI Act, Colorado SB24-205) and will update operations accordingly.
15. Governing Law and Dispute Resolution
This Privacy Policy is subject to the Mandatory Individual Arbitration, Class Action Waiver, and Liability Caps set forth in the CorZen Terms of Service. Any dispute regarding data privacy – including alleged violations of state or federal privacy laws – shall be resolved exclusively through the methods described in the Terms.
16. Changes and Contact
We may update this Privacy Policy over time. Significant updates will be communicated via email or in-app notification. Continued use indicates acceptance.
17. Contact us
Zenly LLC | San Diego, California, USA
📧 support@thezenly.com