Zodeen / Data processing

Data processing terms

How Zodeen handles personal data on your organization’s behalf.

Roles

Your organization is the controller of the personal data in its workspace. We are its processor, and process it only on your documented instructions: to provide Zodeen as configured by your workspace.

The data

Who: your staff, contractors and other people you add to a workspace. What: names, work email addresses, roles, work assignments, time off and availability, updates and comments, and sign-in records.

Do not put special-category data (for example health details beyond “out of office”) into Zodeen.

Our commitments

Only people who need it to run Zodeen can reach your data, and they are bound to confidentiality.

Security measures as listed on zodeen.com/security, kept up to date.

We tell you without undue delay, and within 72 hours of becoming aware, of a breach affecting your data.

We help you answer requests from the people whose data it is, and with impact assessments where needed.

At the end of the service we delete your data, or return it first if you ask.

Sub-processors

You authorize these sub-processors. We will give 30 days’ notice of any new one, and you may object.

Google Cloud and Firebase (United States): Hosting, the database (Firestore), sign-in (Firebase Authentication), Isabella’s server (Cloud Run), backups (Cloud Storage), error and uptime monitoring.

Anthropic (Claude) (United States): Writes the prose of stand-ups and reports, answers Ask Isabella, translates. It receives the facts of the plan it writes about, not the whole database. Under Anthropic’s commercial terms, API data is not used to train its models.

ElevenLabs (United States): Isabella’s spoken voice on the website, when a visitor turns the voice on. It receives the text she speaks.

Resend (United States): Sends Zodeen’s emails (stand-ups, reports, nudges, mentions) to a workspace’s own people, once a workspace turns email on.

International transfers

Data is processed in the United States. Where the law requires it for data from the EU, UK or Switzerland, the European Commission’s Standard Contractual Clauses (and the UK addendum) apply between us.

Audits

We answer reasonable security questionnaires and give you the information needed to show we meet these terms. To sign a copy of these terms, write to privacy@zodeen.com. Last updated 29 October 2026.

Get started · Why it matters · Features · Charts · Why Zodeen · FAQ