Legal · working draft · 2026-04-23
Working draft — counsel has not stamped the final wording yet. Snapshot below mirrors how Zettly is engineered today.
Zettly is local-first by design. The desktop and web app store the entirety of your notebook on your machine using IndexedDB and the operating system's user data directory. We do not collect note content, drawings, or attachments by default. When you opt into hosted services such as AI access or end-to-end encrypted sync, we collect only the metadata strictly required to deliver those services: account email, billing identifiers, and aggregate usage counters.
Data we collect is used solely to operate the services you opted into: routing prompts to the AI providers you selected, delivering encrypted blobs between your devices, sending account email, and billing. We do not sell, rent, or share your data with advertisers or data brokers, and we do not use your notes to train any model — including our own.
Out of the box Zettly never sends note bodies, ink, or attachments off your device. The hosted AI tiers are off until you choose a model that runs in the cloud. The encrypted sync tier transmits ciphertext only — keys are derived locally and never leave your devices in plaintext form.
When you route a prompt to a third-party AI provider — for example OpenAI, Anthropic, or Google — the request and response transit that provider's infrastructure under their terms. We do not log or store the prompt body on Zettly servers; the request is proxied with your account credentials so the provider handles billing on our side. Provider names appear next to each model in the AI panel so you always know where a request is going.
Local data lives on your device until you delete it. Encrypted sync blobs are retained for the lifetime of the device association; revoking a device wipes the corresponding ciphertext from our infrastructure within 30 days. Account records are deleted within 30 days of cancellation, except where a longer retention is required by law.
You may request a copy of the account data we hold for you, ask us to correct it, or request its deletion at any time. Because note content lives on your device, you control it directly — exporting, editing, or deleting notes does not require any request to us.
We will post material changes on this page and, where you have an account, notify you by email at least 30 days before they take effect. Continued use of Zettly after the effective date constitutes acceptance.
Privacy questions: support@zettly.app.
Final counsel-approved text will supersede this draft.
