Privacy Policy
Effective date: April 1, 2026
1. Introduction
Fortune Teller Inc., operating as "Ask Zac" and "Zac" ("we," "us," or "our"), operates the askzac.ai platform — an AI-powered copilot for Zoom administrators. This Privacy Policy describes how we collect, use, store, and protect your information when you use our service.
By using Ask Zac, you agree to the practices described in this policy. If you do not agree, please do not use the service.
2. Information We Collect
2.1 Account Data
When you sign up, we collect your name, email address, and avatar URL from your Google or Zoom OAuth provider. We also store your authentication provider identifier and provider-specific user ID. If you subscribe to a paid plan, we store your plan type and subscription status.
2.2 Zoom Account Credentials
When you connect your Zoom account, we store OAuth refresh tokens and/or Server-to-Server (S2S) client credentials. These credentials provide access to your Zoom account settings, user roster, Contact Center configuration, and other administrative data. All credentials are encrypted at rest using AES-256-GCM (see Section 5).
2.3 Chat History
We store your conversations and messages with Zac, including full message content, timestamps, and any artifacts generated during the conversation (such as configuration plans, code snippets, or tables).
2.4 Configuration Plans and Execution Data
When Zac builds a configuration plan for your Zoom account, we store the plan details, individual execution steps, results of each step, and rollback data necessary to reverse changes if needed.
2.5 Usage Analytics
We track operational metrics per user per day, including LLM token usage, API call counts, request latency, and associated costs. We also track daily activity metrics to understand how the service is used and to enforce plan limits.
2.6 Browser Automation Data
For certain Zoom admin operations that require browser-based automation, we may store session tokens (which expire after 24 hours), recordings of admin page interactions, and screenshots of those interactions. This data is used to execute configuration changes you have approved and to provide an audit trail.
2.7 Payment Data
Payment processing is handled entirely by Stripe. We store your Stripe customer ID, subscription status, and plan type. We do not store, process, or have access to your credit card number, expiration date, or CVC. Stripe is PCI DSS Level 1 compliant.
3. How We Use Your Information
- To provide, operate, and maintain the Ask Zac service
- To read your Zoom account configuration and generate insights
- To build and execute configuration plans you approve
- To respond to your chat messages with relevant answers and recommendations
- To process payments and manage your subscription
- To monitor service health, usage patterns, and enforce plan limits
- To maintain audit logs of all administrative actions taken on your behalf
- To improve the quality and accuracy of our AI responses
4. Third-Party Services
We share data with the following third-party services as necessary to operate Ask Zac:
| Service | Purpose | Data Shared |
|---|---|---|
| OAuth authentication | Email, name (during sign-in) | |
| Zoom | OAuth authentication and API access to your Zoom account | OAuth tokens, API requests on your behalf |
| Stripe | Payment processing | Email, payment method (handled by Stripe) |
| Google Gemini | LLM processing for chat responses and analysis | Chat message content, account context for queries. Google does not store this data per their API data usage terms. |
| Apollo.io | Optional B2B profile enrichment | Email, name, company name. Profile data returned. |
5. Data Security
- Encryption at rest: Zoom credentials (OAuth tokens and S2S secrets) are encrypted using AES-256-GCM with per-record initialization vectors.
- Encryption in transit: All data transmitted between your browser, our servers, and third-party services is encrypted using TLS.
- Audit logging: Every administrative action performed on your Zoom account through Zac is logged with timestamps, action details, and outcomes.
- Access controls: Your data is isolated to your account. Multi-tenant architecture ensures no cross-account data access.
6. Cookies and Local Storage
Ask Zac does not use cookies. Your authentication token is stored in your browser's localStorage. We do not use tracking pixels, Google Analytics, or any third-party analytics or advertising services.
7. Data Retention
We retain your data for as long as your account is active. Chat history, configuration plans, and usage analytics are retained to provide you with a continuous experience and audit trail. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it by law.
8. Your Rights
You have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you.
- Correction: Request correction of inaccurate or incomplete data.
- Deletion: Request deletion of your account and associated data.
- Data export: Request an export of your data in a machine-readable format.
- Disconnect Zoom: Revoke Zac's access to your Zoom account at any time through the Zoom App Marketplace.
To exercise any of these rights, contact us at security@askzac.ai.
9. Children's Privacy
Ask Zac is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 18, we will delete that data promptly.
10. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by posting a notice on the service at least 30 days before the changes take effect. Your continued use of Ask Zac after the effective date of the revised policy constitutes your acceptance of the changes.
11. Contact Us
If you have questions about this Privacy Policy or our data practices, contact us at: