Workflow

Legal

Privacy Policy

Last updated July 4, 2026

Sample content — review with counsel before launch. This document is a placeholder and is not legal advice.

This Privacy Policy explains how Zekara (“we”, “us”) collects, uses, and shares personal information in connection with the Workflow product and related services (the “Service”). It applies to information we process as a controller and, where we act on behalf of a customer, is supplemented by our agreement with that customer.

1.Information we collect

Depending on how the Service is used, we may collect:

  • Account information such as name, work email, company, and role.
  • Documents and knowledge sources uploaded by your organization.
  • Questions and conversations employees have with the assistant.
  • Usage and device information, such as log data and general diagnostics.

2.How we use information

We use personal information to:

  • Provide, maintain, and improve the Service and its guidance.
  • Authenticate users and secure accounts.
  • Respond to support requests and communicate about the Service.
  • Meet legal, security, and compliance obligations.

3.Screen sharing and employee privacy

Screen sharing is always initiated by the employee and can be revoked at any time. Screen content is processed transiently to provide live guidance and is not recorded, stored, or replayed.

An employee's conversations and live screen are visible to their company's admins so they can support the employee. Zekara does not access individual chat content, and conversations are never used to train third-party models.

4.How we share information

We do not sell personal information. We share it with service providers (subprocessors) who help us operate the Service, subject to appropriate contractual protections, and where required by law or to protect rights and safety.

5.Model training

Your documents and your employees’ conversations are not used to train foundation models. They are used only to provide guidance to your organization.

6.Data retention

We retain personal information for as long as needed to provide the Service and for legitimate business or legal purposes. Customer Data is deleted or returned on request in accordance with our customer agreements.

7.Security

We use administrative, technical, and organizational measures designed to protect personal information, including encryption in transit and at rest and role-based access controls. No method of transmission or storage is completely secure.

8.Your rights

Depending on your location, you may have rights to access, correct, delete, or port your personal information, or to object to or restrict certain processing. Where we process information on behalf of a customer, please direct requests to that organization.

9.International transfers

We may process information in countries other than your own. Where required, we use appropriate safeguards, such as standard contractual clauses, for cross-border transfers.

10.Changes to this policy

We may update this Policy from time to time. Material changes will be communicated through the Service or by other reasonable means.

11.Contact

Privacy questions and requests can be sent to privacy@zekara.com.