Privacy Policy

Last updated: 2 August 2026

zespor ("we") provides a work-management platform that ingests activity from services a workspace chooses to connect and turns it into tasks, suggestions, and reports. This policy describes what we collect and how we handle it.

What we collect

• Account data: your email address, display name, and a salted hash of your password.
• Connected-source content: when a workspace admin connects a source (e.g. GitHub, Slack, Google Drive), we receive the content that connection grants — such as issues, pull requests, messages, or documents — and store it as workspace signals. We only access what the provider's consent screen describes, and only after an admin approves it.
• AI provider credentials: workspaces may connect their own AI provider API key. Keys are stored envelope-encrypted and are used solely to run the AI features the workspace triggers. We never train models on your data.
• Usage records: an append-only audit log of actions taken in the product (who created, changed, or approved what).

How we use it

Only to operate the product for your workspace: maintaining your board, generating suggestions and reports you request, and securing the service. We do not sell data, share it with advertisers, or use it for any purpose outside the product.

Where it lives

Data is stored on Google Cloud Platform (europe-west2, London) with nightly encrypted backups. Each workspace's data is isolated with database-level row security.

Subprocessors

Google Cloud Platform (hosting and backups); the AI provider whose key your workspace connects (only when your workspace triggers AI features); the source platforms you connect (per their own terms).

Retention and deletion

Data is retained while your workspace is active. Disconnecting a source stops new ingestion immediately; revoking an AI key deletes it immediately. To delete a workspace and all its data, contact us and we will complete deletion within 30 days.

Google user data

zespor's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google Drive content is used only to create workspace signals your team reviews, and is never used for advertising or model training.

Contact

design@stevenmansfield.com