Privacy Policy

Introduction

Zivash Inc. ("we," "our," or "us") operates Ziva.sh and the Ziva AI agent for Godot Game Engine. This Privacy Policy explains how we collect, use, and protect your information when you use our service.

Information We Collect

Account Information

When you sign in using OAuth (GitHub or Discord), we collect:

• Your name
• Your email address
• Your profile image
• OAuth provider information
• Last login method

Session Information

When you use our service, we collect:

• Session tokens for authentication
• IP addresses
• User agent information (browser/device type)

Usage Information

When you interact with Ziva, we store:

• Your conversation history with the AI agent
• Code snippets and project context you share with Ziva
• API usage statistics (request counts, timestamps)
• Anonymized telemetry such as number of success/failed tool calls, active users, etc

What We Don't Collect

We do not collect:

• Automatic tracking of your game projects
• Any data you don't explicitly share with Ziva

How We Use Your Information

To Provide AI Assistance

Your code and conversation data is sent to third-party LLM providers (including Google, Anthropic, and xAI) to generate AI responses. We may add additional providers in the future to improve service quality.

To Maintain Your Account

• Authenticate and authorize access to your account
• Store your conversation history for future reference
• Track API usage for billing and rate limiting

What We Never Do With Your Data

• Never use your code to train AI models. Your game projects and code are never used to train Ziva or any AI models.
• Never share your data with third parties except LLM providers necessary to power the AI features.
• Never sell your data to advertisers, data brokers, or any other parties.

Data Retention

We retain your conversation history and account information indefinitely unless you request deletion. You have the right to delete your account and all associated data at any time.

Third-Party Services

LLM Providers

We use the following LLM providers to power Ziva's AI capabilities:

• Google (Gemini)
• Anthropic (Claude)
• xAI (Grok)
• OpenAI (GPT)
• Additional providers may be added in the future

These providers process your code and prompts according to their own privacy policies and API terms. Many LLM providers do not use API data for training purposes, but please review their individual policies for specifics.

Authentication

We use GitHub and Discord OAuth for authentication. When you sign in, these providers share basic profile information with us according to their privacy policies.

Data Retention

We retain your conversation history and account information indefinitely unless you request deletion. You can delete your account and all associated data at any time through your account settings.

Your Rights

You have the following rights regarding your personal data:

Right to Access

View all information we have about you through your account dashboard at any time.

Right to Delete (Right to Erasure)

You can permanently delete your account and all associated data at any time through the "Danger Zone" section in your account settings. This will immediately and permanently remove:

• Your account and profile information
• All chat history and conversations
• API keys and usage data
• All settings and preferences

Note: Account deletion is irreversible. All data is purged from our servers within 24 hours. Some data may persist with third-party payment providers (if applicable). To request deletion from payment providers, contact us at privacy@ziva.sh after deleting your account.

Right to Control What You Share

You have complete control over what code and project context you share with Ziva. All AI requests are triggered by you.

GDPR Compliance

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

• Right to rectification: Correct inaccurate personal data through your account settings
• Right to data portability: Contact us to receive a copy of your data in a portable format
• Right to object: Object to processing of your personal data for specific purposes
• Right to restrict processing: Request limitation of processing under certain circumstances

To exercise any of these rights, contact us at privacy@ziva.sh. We will respond to your request within 30 days.

Security

We implement reasonable security measures to protect your data from unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet is 100% secure.

Children's Privacy

Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by updating the "Last updated" date at the top of this policy.

Contact Us

If you have questions about this Privacy Policy, please contact us:

Zivash Inc.
Federally registered in Canada
Email: privacy@ziva.sh