How ZiroLabs handles information on our website, zirolabs.ai. The Cen10 app has its own privacy policy for the health data you connect.
This Privacy Policy explains how ZiroLabs LLC, a Texas limited liability company doing business as ZiroLabs AI ("ZiroLabs," "we," "us," or "our"), handles information in connection with our marketing and informational website at zirolabs.ai (the "Website"). It applies only to the Website. It does not apply to the Cen10 mobile app or any health data the app processes, those are governed by the separate Cen10 Terms of Use and Cen10 Privacy Policy.
The short version. Our Website is a place to learn about ZiroLabs and Cen10. It has no accounts and no health-data intake beyond a simple contact form. If you write to us through that form, we collect your name, email, and message so we can reply. We also use a privacy-friendly, cookieless analytics tool to understand aggregate traffic, on by default, with no tracking cookies and no personal profiles. We do not sell your personal information, and we do not collect health data on this Website. If you want to know how the Cen10 app handles your health data, that lives in the Cen10 Privacy Policy, not here.
This policy covers the zirolabs.ai Website only, a marketing and informational site with no user accounts, no login, and no health-data intake beyond the contact form described below. The Website does not provide the Cen10 product and does not read Apple Health/HealthKit data, wearable data, lab results, biomarkers, family history, notes, or any other health information.
Cen10 is our consumer iOS app, and it has its own privacy policy and terms. If you use or are considering the app, please review the Cen10 Privacy Policy and the Cen10 Terms of Use for details on how the app handles the health data you choose to connect.
The only place the Website invites you to submit information is our contact form. When you use it, we collect:
Please don't send us sensitive information, including health information, through the contact form. It is a general inquiry channel and is not intended for that purpose. If you do include such details, we'll treat them with care but ask that you avoid sharing them here.
Like most websites, when you visit zirolabs.ai our systems and our service providers automatically collect certain technical information, which may include:
Most of this is measured in aggregate by a cookieless, privacy-friendly analytics tool, described in Section 5. It is on by default and does not build a personal profile of you.
We use the limited information we collect to:
We do not use identifiable information from the Website to train artificial intelligence or machine-learning models.
We share personal information only in the limited circumstances below.
We use vendors that perform services on our behalf, for example, website hosting, email delivery, customer-inquiry tools, and analytics. They may process personal information only to provide services to us and under contracts that require them to protect it and not use it for their own purposes.
We may disclose information when we believe in good faith it is necessary to comply with a law, regulation, legal process, or governmental request; to enforce our terms and policies; or to protect the rights, property, or safety of ZiroLabs, our users, or the public.
If ZiroLabs is involved in a merger, acquisition, financing, reorganization, or sale of assets, personal information may be transferred as part of that transaction. We will require that it remain subject to protections consistent with this policy.
We may share information at your request or with your consent, for example, when you ask us to connect you with someone on our team.
We do not sell your personal information, and we do not "share" it for cross-context behavioral advertising as those terms are defined under applicable US state privacy laws. We also do not sell or share de-identified or aggregated data with third parties for their own purposes; any de-identified or aggregated data is used only to operate and improve ZiroLabs' own Services.
We keep tracking on the Website to a minimum. To understand how the site is used, we use Vercel Web Analytics, a privacy-friendly, cookieless analytics tool. It measures aggregate traffic, such as page views, referring sites, and general device and country information, without setting tracking cookies and without storing personal identifiers or building a profile of you. This measurement is on by default so we can see what's useful and keep improving the site. It does not collect health data, and we do not use it for advertising.
We use only the cookies that are strictly necessary for the Website to function and to be secure, and we do not use advertising cookies. You can control cookies through your browser settings, and we honor the Global Privacy Control (GPC) and Do-Not-Track signals where applicable. Because our analytics is cookieless and aggregate, there is no personal profile to opt out of; if you prefer, you can still block the analytics script through your browser or a privacy extension.
We keep personal information only as long as we need it for the purposes described in this policy. Contact-form messages are retained for as long as reasonably necessary to respond to and manage your inquiry and to keep records, after which we delete or de-identify them. Automatically collected analytics data is retained for a limited period consistent with our analytics providers' settings. We may retain certain information longer where required to meet legal, tax, security, or dispute-resolution obligations.
We use administrative, technical, and physical safeguards designed to protect the information we collect, including encryption in transit when data is transmitted over the internet. No method of transmission or storage is completely secure, however, so we can't guarantee absolute security. Please help protect yourself by not sending sensitive information through the contact form.
You can always choose not to submit the contact form, adjust your browser and cookie settings, and unsubscribe from marketing emails using the link in those messages. Depending on where you live, you may also have the specific legal rights described below. To exercise any of them, contact us using the details in Section 14. We will not discriminate against you for exercising your rights.
If you are a resident of California or another US state with a comprehensive privacy law (such as Colorado, Connecticut, Virginia, Utah, Texas, Oregon, and others), you may have the right to:
California "Shine the Light." California residents may request information about disclosures of personal information to third parties for their direct marketing purposes. We do not disclose personal information to third parties for their own direct marketing.
You may submit a request yourself or through an authorized agent. We will verify your request before responding, which may require confirming information we already hold about you. Where a law provides an appeal process for a declined request, we will tell you how to appeal.
If you are in the European Economic Area, the United Kingdom, or Switzerland, you may have rights to access, correct, delete, restrict, or object to our processing of your personal data, to data portability, and to withdraw consent at any time (without affecting processing already carried out). We rely on the following legal bases to process personal data through the Website:
Where we process your inquiry, our legitimate interest (or steps taken at your request) is the basis. You also have the right to lodge a complaint with your local data protection authority.
Some US state laws, including the Washington My Health My Data Act, Nevada SB370, and Connecticut's health-data provisions, regulate "consumer health data." The Website is not designed to collect consumer health data, and we ask that you not submit it through the contact form. We do not sell consumer health data. For more detail on how this applies to the Website, see our Consumer Health Data notice.
The Cen10 app is different: it processes the health data you choose to connect. That collection, use, and your related rights are governed by the Cen10 Privacy Policy (which includes Cen10's consumer-health-data terms), not by this Website policy.
The Website is intended for adults. It is not directed to children, and you must be at least 18 years old to use it. We do not knowingly collect personal information from anyone under 18 through the Website. If you believe a minor has provided us information, please contact us and we will delete it.
ZiroLabs is based in the United States, and we operate the Website from the United States. If you access the Website from outside the US, your information will be transferred to, stored, and processed in the United States and other countries where we or our service providers operate, which may have different data-protection laws than your own. Where required, we use appropriate safeguards (such as standard contractual clauses) for international transfers.
ZiroLabs is a direct-to-consumer company and is generally not a "covered entity" or "business associate" under HIPAA, so HIPAA generally does not apply to the Website. Nothing on the Website is medical advice, and the Website does not provide diagnosis, treatment, or a substitute for professional medical care. It is for general information and education only, and using it does not create a doctor-patient relationship. If you have a medical concern, talk to a qualified professional; if you think you may have an emergency, call 911 or your local emergency number.
We may update this policy from time to time. When we do, we'll revise the "Last updated" date above and, where appropriate, provide additional notice. Please check back periodically. Your continued use of the Website after an update means you accept the revised policy.
Questions about this policy or your privacy? Reach us at legal@zirolabs.ai or through our contact page.
This policy is governed by the laws of the State of Texas, without regard to its conflict-of-laws rules.