1. Scope and our role
This draft describes personal information associated with Zubu’s website, business communications and legal hold, preservation and collection services. The Zubu contracting entity is identified in the applicable services agreement. For privacy inquiries, contact contact@zubu.ai.
When a customer uses Zubu to process information about employees, custodians or other individuals, that customer determines the purpose and scope of the activity. Customer-directed processing is governed by the customer’s instructions, agreement and any applicable data processing agreement. The customer’s own privacy notice may also apply.
2. Information provided directly
Information supplied through a demo request or business inquiry can include your name, work email address, company and message. If you contact Zubu about careers, this can include the introduction, professional profile, portfolio or other information you choose to send.
Account and service administration may involve business contact information, user identifiers, organization details and support communications. Avoid including sensitive personal information in a general inquiry unless it is necessary and a suitable transfer method has been agreed.
3. Information associated with the service
Depending on the customer’s enabled integrations and instructions, service data may include custodian details, hold notices and acknowledgments, business communications and document content, related metadata, collection instructions and activity records. Technical records may include IP addresses, authentication events and audit logs.
Connected sources may include Microsoft 365, Google Workspace, Slack and Confluence. The information involved depends on the source, permissions and configured workflow. Collection to customer-controlled storage does not mean that Zubu handles no account information or operational metadata.
4. Purposes of processing
Information is used as relevant to respond to inquiries, administer the customer relationship, provide requested functionality, support users, investigate service problems and protect against unauthorized activity. Customer Data used for preservation or collection is processed in the context of the customer’s authorized workflow.
Any separate marketing, analytics or optional processing must be described in the relevant notice and handled in accordance with applicable choices and law. This notice does not independently authorize unrelated use of customer content or training of general-purpose AI models.
5. Legal grounds, where applicable
Where a legal basis is required, it depends on the activity: performing an agreement, taking requested pre-contract steps, complying with legal obligations, pursuing legitimate business interests subject to applicable safeguards, or obtaining consent where required. For customer-directed processing, the customer is responsible for the legal basis of its instructions.
Where processing relies on consent, you may withdraw it by contacting Zubu. Withdrawal does not affect processing lawfully undertaken before withdrawal or processing supported by another applicable legal basis.
6. Recipients and connected services
Information may be made available to authorized customer administrators or recipients selected by the customer, and to service providers as necessary for the agreed service. Any processors and their access should be identified in the applicable processing documentation. Disclosures may also be required by law or valid legal process.
Third-party platforms and customer-controlled storage operate under their own terms and applicable privacy notices. Visiting an external link, including LinkedIn, takes you to a separately operated service.
7. Retention, preservation and deletion
Retention depends on the purpose of the information, the service agreement, customer instructions and applicable legal obligations. Account and inquiry information and collected customer content can have different retention requirements.
An active legal hold or other binding preservation duty may restrict deletion. Ending a user account or requesting deletion does not automatically release a hold or delete information held in a customer’s source systems or storage. Contact the relevant customer about its preservation and retention decisions.
8. International processing
The locations in which information is processed depend on the deployment, connected services and authorized providers. Customers should obtain the applicable hosting and processing-location details during contracting. Where cross-border transfer requirements apply, the relevant legal safeguards must be addressed in the processing agreement; a particular storage region is not promised by this page.
9. Cookies and similar technologies
Cookie and tracking disclosures must reflect the technologies actually enabled on the website and service. Your browser can control or remove cookies, although restricting essential storage may affect some functionality.
This draft does not assert that advertising cookies, analytics tools or a consent platform are enabled or disabled. The final notice must identify actual cookie purposes and applicable preference controls after the deployed website configuration is reviewed.
10. Privacy requests and choices
Depending on applicable law and your circumstances, you may have rights to access, correct, delete or receive a copy of personal information, restrict or object to processing, withdraw consent, or complain to a relevant supervisory authority. These rights are subject to applicable conditions and exceptions.
Contact contact@zubu.ai with your request and enough information to identify the relevant relationship. Identity or authority may need to be verified proportionately. If your information is processed for a Zubu customer, contact that organization first; its instructions and legal duties govern the response.
Requests concerning any applicable sale, sharing or targeted-advertising rights can also be directed to this contact. Whether those activities occur and which regional disclosures or preference mechanisms are required must be confirmed before publication; this draft makes no blanket sale-or-sharing claim.
11. Security and sensitive information
Security responsibilities depend on the service component and the applicable agreement. See the Security page for shared responsibilities and reporting information. Do not send passwords, access tokens, identity documents or confidential case files through a general email inquiry.
12. Children and changes to this notice
Zubu is an enterprise legal technology service. If you believe a child has provided personal information directly to Zubu inappropriately, contact contact@zubu.ai. Information about minors that appears within customer-directed legal matters remains subject to that customer’s legal duties and instructions.
The published notice should identify its effective date. Material revisions and required notices will be handled under applicable law and relevant agreements. Questions about this draft may be sent to contact@zubu.ai.
.svg){kind=small}
