Privacy policy
What personal data we hold, why we hold it, how long we keep it, and how to make us delete it.
DRAFT · NOT LEGAL ADVICE
This document records how Zuger intends to operate and is published so you can read it before you sign up. It is a working draft pending review by counsel in each of our three jurisdictions, and it is not legal advice to you. The executed version you receive at signup is the one that governs. Last updated 13 September 2026.
Who we are
Zuger Technologies OÜ, Tallinn, Estonia, is the contracting entity, the seller of record and the controller of the personal data described here. Zuger Technologies AG (Zug, Switzerland) is the intended group holding company and is under formation; it is not a party to anything you agree with us today. For personal data inside your own company’s files and tools, you are the controller and we are your processor — that relationship is governed by the DPA.
What we collect
Account data — name, work email, company, plan and billing details. Usage data — logins, feature use, run metadata and diagnostic logs. Content — the documents, messages, records and credentials you connect so agents can work. Support data — what you write to us and what we write back.
Why we hold it
To provide the platform (performance of a contract), to keep it secure and to prevent abuse (legitimate interests), to bill you and keep our own books (legal obligation), and to send product email you can unsubscribe from in one click (consent, withdrawable at any time).
What we do not do
We do not train models on your content. We do not sell personal data. We do not use your content to improve anything for another customer. We do not profile you for advertising. These are commitments in the DPA, not preferences in a settings screen.
Credentials
Credentials you connect are encrypted at rest with per-tenant keys and decrypted only inside the worker that uses them, at the moment of use. They are never included in a model prompt, never written to a transcript and never visible in the audit log. You can revoke any credential at any time and the sessions using it die immediately.
Where it lives
The European Union. Swiss residency is offered once the infrastructure honours it, not before. Where a subprocessor sits outside the EEA, transfers rely on an adequacy decision or on Standard Contractual Clauses. The current list is on the subprocessors page.
How long we keep it
Account data for the life of the account plus 30 days. Content until you delete it, or 30 days after you close the account. Support email for two years. Audit logs and accounting records are kept for seven years as Estonian accounting law requires, detached from your profile — this retention survives account deletion, and it is the one exception to deleting everything.
Your rights
Access, correction, deletion, restriction, portability, and objection to processing based on legitimate interests. Write to privacy@zuger.ai and you will hear back within 30 days, usually far sooner. You may also complain to the Swiss FDPIC or to your local supervisory authority.
Cookies
Essential. The Console sets one first-party session cookie to keep you signed in. The site uses browser storage, not cookies, to remember two things on your device: your theme, and the choice you made on the cookie card. Essential cookies and storage are needed for the site to work and do not need your consent.
Optional. There are none today. The marketing site sets no tracking cookies and runs no third-party analytics. If we add measurement later, it will load only on devices where you chose Accept all, and this section will name it, what it records and who provides it, before it goes live.
Your choice. The card appears once per device and browser. You can change your answer at any time from Cookie settings in the footer of every page; clearing your browser storage asks again. Reject non-essential cookies leaves you with the essential set, which is also what you have if you never answer.
Changes
Material changes are announced by email and in the Console 30 days before they take effect. The date at the top of this page always reflects the last change.
Questions about this?
Write to privacy@zuger.ai for anything on this page. A person answers, not a portal.