KKZENDO
На главную

Privacy Policy

Effective date: June 26, 2026. Last updated: October 6, 2026.

This Privacy Policy describes how 80DAYS PHUKET CO., LTD ("we", "us", or "our"), the operator of the KZENDO platform (app.kzendo.ai), collects, uses, stores, and protects information about you when you use our services.

1. Who We Are

80DAYS PHUKET CO., LTD is a company registered in Thailand (VAT 0835566034911), with registered address at 38 Srisoonthorn Rd, Tambon Choeng Thale, Thalang District, Phuket 83110. You can contact us at legal@kzendo.ai.

2. Information We Collect

Account information

When you create a KZENDO account we collect your name, email address, and (if provided) your profile photo.

Zoom integration data

If you connect your Zoom account, we collect and store the following with your explicit authorization via Zoom OAuth 2.0:

  • Your Zoom user ID, display name, and email address.
  • Metadata about your Zoom cloud recordings (meeting title, date, duration, participant count).
  • Recording file content and transcripts, solely for the purpose of generating meeting summaries and insights within KZENDO.
  • Zoom OAuth access and refresh tokens, stored securely server-side in our database.

Knowledge base files

When you add a file to the knowledge base of a project (by uploading it or by choosing it from Google Drive), we store a copy of the file, the text extracted from it, and its title, type, and size, so that the file can be opened inside KZENDO and used to answer your questions. Files in a project knowledge base may be visible to any member of that project, directly or through the AI assistant's answers.

Google Drive data

If you connect Google Drive, we request access only to the files you select yourself in the Google file picker (Google scope drive.file). We cannot see or list the rest of your Google Drive. With your authorization via Google OAuth 2.0 we collect:

  • The email address of your Google account.
  • For each file you select: its content (for Google Docs, Sheets, and Slides — an exported copy), name, file type, size, last-modified date, and a link to the original in Google Drive.
  • A Google OAuth refresh token, stored encrypted server-side (Supabase Vault) and never exposed to the browser. We use it to download the files you selected and to check those files for changes so that the copy in KZENDO stays up to date.

Website enquiries and feature requests

When you leave a request on our website kzendo.ai (for example, the pre-registration form), we collect your name, your contact details (phone number, email address, or Telegram username), the other answers you give on the form (for example, your business niche, where you currently keep your tasks, or your team size), the page you submitted the form from and the campaign tags (UTM parameters) of the link that brought you there, and, where the form asks for it, whether you gave consent to processing.

When you use Request a feature inside the platform, we collect the text of your request together with your name, email address, and the project you sent it from.

Both are recorded as a deal in the CRM of KZENDO's own account on the platform, so that a KZENDO founder can reply to you. A copy of each website request is also delivered to our team via a Telegram bot.

Usage data

We collect standard server logs (IP address, browser type, pages visited, timestamps) to operate and improve the service.

3. How We Use Your Information

  • To provide and operate the KZENDO platform and its features.
  • To process Zoom recordings and transcripts and generate AI-powered meeting summaries and coaching insights for you.
  • To show knowledge base files inside your project and to let the AI assistant (Tadashi) find and cite them when answering questions in that project.
  • To authenticate you and keep your account secure.
  • To send you transactional communications (e.g. email confirmations).
  • To reply to your website request or feature request — about that request only. We do not send unsolicited marketing mailings.
  • To comply with legal obligations.

We do not sell your personal data to third parties. We do not use your Zoom data or your Google Drive data to train AI models or for advertising.

4. Third-Party Processors

To deliver our services we share data with the following sub-processors, each bound by appropriate data protection agreements:

  • Supabase — managed PostgreSQL database hosting (data at rest).
  • Vercel — application hosting and serverless compute.
  • Railway — recording processing service hosting.
  • AssemblyAI (default) — speech-to-text transcription of Zoom recordings. Audio content is sent to AssemblyAI solely for transcription and is not retained by them beyond the processing window per their data retention policy.
  • OpenAI (via Vercel AI Gateway) — AI language model provider used to generate summaries and insights. For meetings, only the transcript text (not raw audio) is sent. For the knowledge base, the text of the files you add (including files from Google Drive) is sent to build the search index and to answer your questions. OpenAI does not use data sent through its API to train its models.
  • Google — source of the Google Drive files you select; we exchange with Google only the requests needed to read those files and the access token.
  • Telegram — delivery of website request notifications (name, contact details, and your answers on the form) to our team.

5. Data Retention

Raw Zoom webhook event payloads containing personal data are automatically deleted after 30 days. Meeting transcripts and summaries are retained for as long as your account is active. You may delete your data at any time by disconnecting your Zoom integration or contacting us to delete your account.

Copies of knowledge base files (including files from Google Drive) are kept for as long as the document stays in the project knowledge base; deleting the document deletes the copy. Disconnecting Google Drive in KZENDO deletes the stored Google token and stops updates, but does not delete copies of files already added to the knowledge base — delete those documents separately if you no longer want them in KZENDO. You can also revoke KZENDO's access at any time from your Google Account at myaccount.google.com/permissions.

Website requests and feature requests are stored in our platform database (Supabase, United States) for as long as we need them to respond to you and keep in touch, until you ask us to delete them. Copies of website request notifications remain in our team's Telegram chat until we delete them. We process website requests and feature requests because you ask us to respond to them; where a form asks for your consent to processing, we also rely on that consent. You can withdraw your consent and ask us to delete your request at any time by writing to legal@kzendo.ai.

6. Data Security

All data in transit is protected by TLS/HTTPS. Data at rest is stored in a managed PostgreSQL database with row-level security (RLS) policies that restrict access per workspace and user role. OAuth tokens are stored server-side and are never exposed to the client; Google refresh tokens are additionally encrypted in Supabase Vault. Knowledge base files are stored in a private storage bucket and opened only through short-lived signed links issued to members of the project. Application secrets are managed via the hosting platforms' secure environment variable systems.

7. Zoom Data Use Compliance

Our use of data obtained through Zoom APIs complies with the Zoom API License and Terms of Use. Specifically:

  • We access only the scopes necessary to provide the service.
  • We do not share Zoom data with unauthorized third parties.
  • We do not use Zoom data for advertising or to build user profiles for advertising.
  • Users can revoke Zoom access at any time from within KZENDO settings or from their Zoom account.

8. Google API Services User Data Policy

KZENDO's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

  • We use Google Drive data only to provide the knowledge base features you see in KZENDO: storing and showing the files you selected, keeping them up to date, and answering your questions about them.
  • We transfer Google Drive data to third parties only as needed to provide those features (the processors listed in section 4), to comply with applicable law, or as part of a merger or acquisition with your notice.
  • We do not use Google Drive data for advertising, and we do not sell it.
  • We do not use Google Drive data to develop, improve, or train generalized AI or machine learning models.
  • Our staff do not read Google Drive data unless you ask us to (for example, for support), it is necessary for security purposes or to comply with law, or the data is aggregated and anonymized for internal operations.

9. Your Rights

Depending on your jurisdiction you may have the right to access, correct, export, or delete your personal data. To exercise any of these rights, contact us at legal@kzendo.ai. We will respond within 30 days.

10. Cookies

We use strictly necessary session cookies for authentication. We do not use tracking or advertising cookies.

11. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via email or an in-app notice. Continued use of the service after changes take effect constitutes acceptance of the revised policy.

12. Contact

80DAYS PHUKET CO., LTD
38 Srisoonthorn Rd, Tambon Choeng Thale, Thalang District, Phuket 83110, Thailand
Email: legal@kzendo.ai
Phone: +66 62-909-0402