1. Who we are

ZenithAI is made by Data Ingenious Global Limited (“Data Ingenious”, “we”, “us”), a company based in Jaipur, Rajasthan, India, and part of Data Group.

You can reach us at sales@data.in or through our contact page.

This policy covers this website (zenithai.data.in), the ZenithAI installer and licence, the optional internet features described below, and services that we host ourselves. It is written to meet the Digital Personal Data Protection Act 2023 (“DPDP Act”) and the Information Technology Act 2000 and the rules made under them.

2. The short version

  • ZenithAI runs on your own servers. Your prompts, documents, chats, workspaces, attachments, outputs and logs stay under your organisation’s control. Data Ingenious does not receive, see or store them.
  • Your organisation is in charge of that data. It is the data fiduciary for it. We touch it only if you ask us for support, and only as you direct.
  • We do process some data. What you send through the forms on this website, basic website analytics, licence and installation details your server sends us, and anything you send to a service we host. Each is explained below.
  • We do not sell personal data.

3. Data inside your ZenithAI deployment

ZenithAI is installed on servers that your organisation owns or controls. The AI models run there. Prompts, documents, chats, workspaces, attachments, generated files and system logs are stored and processed there.

  • Data Ingenious does not receive this data in normal use, and has no access to it unless your organisation gives us access.
  • Your organisation decides who can use the system, what is kept, for how long, and when it is deleted. Under the DPDP Act your organisation is the data fiduciary for this data. If your personal data is held in an organisation’s ZenithAI deployment, contact that organisation about it.
  • If you ask us for installation help, support or maintenance, our engineers may see some of this data: for example on a shared screen, in a log file you send us, or through remote access you grant. We use it only to give that support, only as you direct, and we do not keep it longer than the support needs. In that role we act as your data processor.
  • Some features reach outside your server when your administrator turns them on. Section 6 explains them.

4. This website

Forms

The demo request, contact and installer download forms ask for your name, organisation, work email and, if you choose, your mobile number. Depending on the form they also ask for your role, your sector, what you are interested in, or which server you plan to use. We also record which page or link the form came from.

The form sends these details to our own service on this website. From there they are emailed to our sales team through an email delivery service, added to our sales records system and posted to our internal team chat, so the right person can reply. We use them to answer you, arrange a demonstration, help with the installation and trial, and follow up with you about ZenithAI. A hidden field on each form helps us block automated spam.

Analytics and cookies

Pages on this site load Google Tag Manager, which currently loads Google Analytics. Google Analytics uses cookies and similar technology to count visits and to show which pages and buttons are used. We also record a few events: that a form was sent, that a button or link was clicked, that the pop-up suggestion was used, or that the cost calculator was run. These events say which form or link it was, not what you typed.

Google processes this data under its own terms and privacy policy. You can block or delete these cookies in your browser settings, or install the Google Analytics opt-out add-on.

Storage in your browser

The site sets no cookies of its own. It keeps a few small items in your browser:

  • your light or dark theme choice;
  • whether you have already seen the pop-up suggestion, for the current visit only;
  • whether you have filled in the installer form, so the download links show again;
  • on the API Playground, your API key for 24 hours, and a count of calls for the current visit.

These items stay in your browser and are not sent to us. You can clear them at any time in your browser settings.

Server logs

Our web server records standard request details: your IP address, the date and time, the page requested, the page you came from and your browser type. We use them to keep the site running and secure, to stop abuse and to understand traffic.

5. Installer downloads, trials and licence checks

Downloads

To get the installer you fill in the download form described in section 4. The installer files are served from our documentation site, docs.zenithai.si, whose web server logs each request (IP address, time and file).

Installation registration and daily check-in

When a trial starts, a ZenithAI server sends us a one-time registration. After that it checks in with us once a day when it can reach us. These messages contain:

  • the licence or trial details: serial number, licence ID, licence type, dates, organisation name, user limit and features;
  • the administrator’s name and email address;
  • the server’s hostname, its web address, its operating system, the ZenithAI version, its graphics card models and the hardware identifiers used to tie the licence to that server;
  • the licence status the server reports, and the number of people active in the last 30 days (a number only, no names);
  • the time of the message, and the IP address it comes from.

They do not contain prompts, documents, chats, workspace content, outputs, or the names of users other than the administrator.

We use them to issue and renew licences, to tie each licence to its server, to prevent misuse of licences and trials, to plan support, and so our sales team can contact the administrator about the trial or licence. They are kept in our licence records, and a new or changed installation reaches our sales team the same way as a form enquiry.

The trial starts on your server without contacting us. If your server cannot reach us, ZenithAI keeps working, and a failed check-in never blocks anyone.

6. Optional internet features your administrator turns on

The core platform works on your server without sending your data out. A few features reach the internet by their nature. Your administrator decides whether they are on and who may use them.

Web search

When a person asks for web results, the search words go from your server to web search providers, and the pages chosen are fetched from their websites. Those providers see the search words and your server’s IP address, under their own terms. Each query is logged on your server. Data Ingenious does not receive these queries.

Email, mailboxes and calls

Features that send email, read a mailbox or place a call connect to the mail and phone services your organisation sets up. Those services work under their own terms. If your deployment sends system email, such as sign-in codes, through an email service run by Data Ingenious or Data Group, that service handles the address and the message only to deliver them.

Connect Google (planned)

We are building an optional Connect Google feature so a person can link their Gmail, Google Drive and Google Calendar to ZenithAI. It is not available yet. When it is, it will work like this:

  • The person chooses to connect, signs in on Google’s own page and approves the access shown there.
  • Google’s sign-in tokens pass briefly through a central sign-in service at zenithai.data.in, so they can be issued and refreshed. The tokens are not stored there. They are handed to your organisation’s own ZenithAI server.
  • Gmail, Drive and Calendar content goes directly from Google to your organisation’s own server. It never passes through Data Ingenious.
  • The sign-in service keeps only ordinary request logs, such as the time, IP address and whether the request worked. These logs hold no tokens and no Google content.
  • ZenithAI uses Google data only to give the person the features they asked for, such as finding, summarising or drafting from their own mail, files and calendar.

Google API Services disclosure. ZenithAI’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Google user data is not used to develop, improve or train general AI or machine learning models. It is not sold, not used for advertising, and not read by people unless the user agrees, it is needed for security, or the law requires it.

A person can disconnect Google inside ZenithAI, or remove the access at any time from their Google Account permissions page.

7. Services Data Ingenious hosts

Some ZenithAI services run on servers we operate, not yours. When you use them, we do process what you send, for the purpose of giving you that service, keeping it secure and supporting you.

  • Hosted API and API Playground. The API Playground on this site sends your requests through this website to our hosted ZenithAI API, using an API key we issue to you. Files and prompts are processed in memory and discarded once the response is produced. Uploads, prompts and results are not stored. We keep the key, who it was issued to and usage counts for each key, plus standard access logs (IP address, time, address called and result), not the content.
  • Demonstrations and evaluations. In a live demonstration we use sample documents. If you share your own documents or prompts in a demonstration or evaluation on our servers, we use them only for that purpose and delete them when it ends or when you ask, unless you agree otherwise in writing.

8. Why we process personal data

We process personal data on these grounds under the DPDP Act:

  • Your consent, which you give when you send a form, request a download, start a trial or use a hosted service. You can withdraw it at any time by writing to us. That does not affect what was done before you withdrew it.
  • Legitimate uses the Act allows, such as handling data you gave us voluntarily for a stated purpose, and meeting our legal duties.

9. Who we share it with

  • Data Group companies that help us sell, deliver or support ZenithAI.
  • Service providers who work for us: email delivery, sales records software, team chat, hosting, and website analytics (Google). They may use the data only to provide their service to us.
  • Authorities, where the law requires it, or to protect rights, safety and security.
  • A buyer or successor, if our business is reorganised or sold, under the same protections.

We do not sell personal data, and we do not share it for other companies’ advertising.

10. Where it is processed

We keep transfers to a minimum. Most of the data we hold is processed on servers we run. Some service providers, such as Google for website analytics, may process data outside India. Any transfer outside India follows the DPDP Act and any restrictions the Government of India notifies under it.

11. How long we keep it

  • Enquiries and sales records: as long as we need them to deal with you, and a reasonable time after. Then we delete or anonymise them. We delete them sooner if you ask and no law requires us to keep them.
  • Licence and installation records: for as long as the licence or trial exists, and after that for as long as we need them for audit, tax, legal and dispute purposes.
  • Web server and access logs: for a limited period for security and troubleshooting, and for as long as Indian law requires.
  • Website analytics: for the retention period set in our Google Analytics account.
  • Hosted API: content is not stored. Key and usage records are kept while the key is active and for a short time after.

12. Security

We use reasonable security safeguards for the personal data we hold, as the DPDP Act and the Information Technology Act 2000 require. These include encrypted connections (HTTPS), access limited to the staff who need it, credentials kept out of public files, and filters against spam and abuse. No system is perfectly secure. If a personal data breach affects you, we will tell you and the Data Protection Board of India as the law requires.

13. Your rights

Under the DPDP Act you have the right to:

  • access a summary of your personal data we process and who we have shared it with;
  • correct, complete or update it;
  • erase it, where we no longer need it and no law requires us to keep it;
  • withdraw consent at any time;
  • grievance redressal, through our Grievance Officer (section 14);
  • nominate another person to use these rights for you in the event of your death or incapacity.

To use any of these rights, write to sales@data.in with “Privacy request” in the subject. We may ask you to confirm your identity. For personal data inside an organisation’s own ZenithAI deployment, contact that organisation, because it is the data fiduciary.

If you are not satisfied with how we handle your grievance, you can complain to the Data Protection Board of India.

14. Grievance Officer

Grievance Officer, Data Ingenious Global Limited
Jaipur, Rajasthan, India
Email: sales@data.in (subject: “Grievance”)

We will acknowledge your grievance and reply within the time the law sets.

15. Children

ZenithAI and this website are for organisations and adults. They are not meant for anyone under 18, and we do not knowingly collect personal data from children. If you believe a child has sent us personal data, write to us and we will delete it. An organisation that processes children’s data in its own deployment is responsible for meeting the DPDP Act’s rules on children, including verifiable parental consent.

16. Changes to this policy

We may update this policy as our services or the law change. The date at the top shows when it last changed. If a change is significant, we will say so on this site, or by email where we have your address. Our Terms of Use explain the rules for using ZenithAI.