Privacy Policy
Last updated: November 23, 2025
Introduction
Zivash Inc. ("we," "our," or "us") operates Ziva.sh and the Ziva AI agent for Godot Game Engine. This Privacy Policy explains how we collect, use, and protect your information when you use our service.
Information We Collect
Account Information
When you sign in using OAuth (GitHub or Discord), we collect:
- Your name
- Your email address
- Your profile image
- OAuth provider information
- Last login method
Session Information
When you use our service, we collect:
- Session tokens for authentication
- IP addresses
- User agent information (browser/device type)
Usage Information
When you interact with Ziva, we store:
- Your conversation history with the AI agent
- Code snippets and project context you share with Ziva
- API usage statistics (request counts, timestamps)
- Anonymized telemetry such as number of success/failed tool calls, active users, etc
What We Don't Collect
We do not collect:
- Automatic tracking of your game projects
- Any data you don't explicitly share with Ziva
How We Use Your Information
To Provide AI Assistance
Your code and conversation data is sent to third-party LLM providers (including Google, Anthropic, and xAI) to generate AI responses. We may add additional providers in the future to improve service quality.
To Maintain Your Account
- Authenticate and authorize access to your account
- Store your conversation history for future reference
- Track API usage for billing and rate limiting
What We Never Do With Your Data
- Never use your code to train AI models. Your game projects and code are never used to train Ziva or any AI models.
- Never share your data with third parties except LLM providers necessary to power the AI features.
- Never sell your data to advertisers, data brokers, or any other parties.
Data Retention
We retain your conversation history and account information indefinitely unless you request deletion. You have the right to delete your account and all associated data at any time.
Third-Party Services
LLM Providers
We use the following LLM providers to power Ziva's AI capabilities:
- Google (Gemini)
- Anthropic (Claude)
- xAI (Grok)
- OpenAI (GPT)
- Additional providers may be added in the future
These providers process your code and prompts according to their own privacy policies and API terms. Many LLM providers do not use API data for training purposes, but please review their individual policies for specifics.
Authentication
We use GitHub and Discord OAuth for authentication. When you sign in, these providers share basic profile information with us according to their privacy policies.
Data Retention
We retain your conversation history and account information indefinitely unless you request deletion. You can delete your account and all associated data at any time through your account settings.
Your Rights
You have the following rights regarding your personal data:
Right to Access
View all information we have about you through your account dashboard at any time.
Right to Delete (Right to Erasure)
You can permanently delete your account and all associated data at any time through the "Danger Zone" section in your account settings. This will immediately and permanently remove:
- Your account and profile information
- All chat history and conversations
- API keys and usage data
- All settings and preferences
Note: Account deletion is irreversible. All data is purged from our servers within 24 hours. Some data may persist with third-party payment providers (if applicable). To request deletion from payment providers, contact us at privacy@ziva.sh after deleting your account.
Right to Control What You Share
You have complete control over what code and project context you share with Ziva. All AI requests are triggered by you.
GDPR Compliance
If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):
- Right to rectification: Correct inaccurate personal data through your account settings
- Right to data portability: Contact us to receive a copy of your data in a portable format
- Right to object: Object to processing of your personal data for specific purposes
- Right to restrict processing: Request limitation of processing under certain circumstances
To exercise any of these rights, contact us at privacy@ziva.sh. We will respond to your request within 30 days.
Security
We implement reasonable security measures to protect your data from unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet is 100% secure.
Children's Privacy
Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by updating the "Last updated" date at the top of this policy.
Contact Us
If you have questions about this Privacy Policy, please contact us:
Zivash Inc.
Federally registered in Canada
Email: privacy@ziva.sh