Zolt AI

Privacy Policy

Effective August 20, 2026

Zolt AI (“the Service”) is operated by Red Media Network (“we”, “us”). This policy explains what information we collect, how we use it, and the choices you have. Questions any time: info@redmedianetwork.com.

Information we collect

How we use information

AI processing

Core features send relevant parts of your workspace content to third-party AI model providers — currently Anthropic, OpenAI, Google, and xAI — to generate responses, content, and images. We send only what a feature needs, under each provider’s API terms. We do not use your content to train our own models, and we do not permit these providers to use API data for training where they offer that control.

Where your data lives and who can access it

The Service is hosted in the United States (on Railway infrastructure: application, PostgreSQL database, and object storage). We do not sell your data, and we share it only with the service providers needed to run the product — hosting, email delivery, payment processing (Stripe), and the AI providers listed above. If you use the Service from outside the United States, your data is processed in the United States.

Retention and deletion

Your content stays in your workspace until you delete it (boards you delete go to Trash first, then can be permanently removed). To delete your account and its data entirely, email info@redmedianetwork.com and we will complete the deletion within 30 days. Waitlist entries are deleted on request.

Billing records are an exception: we retain invoices, payment records, and the credit ledger for as long as tax, accounting, and anti-fraud obligations require, even after an account is deleted. Deleting your account does not reverse a completed purchase — see “Paid plans and Zolt Credits” in our Terms of Service.

Your rights

You can access, correct, export, or delete your information by emailing us. If you are in a jurisdiction with specific privacy rights (such as the EEA, UK, or California), we honor access, correction, deletion, and portability requests under those laws. We do not sell or share personal information as those terms are defined under the CCPA.

Security

Data is encrypted in transit, passwords are stored hashed, sessions are signed, and access to production systems is limited. No system is perfectly secure — if we learn of a breach affecting your data, we will notify you promptly.

Children

The Service is not directed to children under 16, and we do not knowingly collect their data.

Changes

We will post any changes to this policy here and update the effective date. Material changes will be announced by email to account holders.