Privacy Policy

Last updated: March 17, 2026

1. Introduction

Zoldea ("we," "our," or "us") operates the Zoldea platform at zoldea.com. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform, including our website, APIs, and integrations with third-party services.

By using Zoldea, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information You Provide

  • Account Information: Name, email address, profile picture, and other details you provide during registration.
  • Workspace Content: Artifacts, datasets, notebooks, code, research notes, and other materials you upload or create within workspaces.
  • Communications: Messages, comments, discussions, and other communications you make through the platform.
  • Integration Data: When you connect third-party services (e.g., GitHub, Google Drive, Notion), we store OAuth access tokens and your external username to enable the integration.

2.2 Information Collected Automatically

  • Usage Data: Pages visited, features used, timestamps, and interaction patterns.
  • Device Information: Browser type, operating system, IP address, and device identifiers.
  • Cookies: We use cookies for authentication, preferences, and analytics. See Section 7 for details.

3. How We Use Your Information

We use collected information to:

  • Provide, maintain, and improve the Zoldea platform
  • Authenticate your identity and manage your account
  • Process workspace operations, artifact uploads, and integrations
  • Enable collaboration features including sharing, comments, and reviews
  • Send service-related notifications and updates
  • Detect and prevent fraud, abuse, and security incidents
  • Comply with legal obligations

4. Third-Party Integrations

When you connect external services (GitHub, GitLab, Google Drive, Notion, Dropbox, OneDrive, Box, Slack, Kaggle, Microsoft Teams, ORCID), we:

  • Store OAuth access tokens and refresh tokens securely on our servers
  • Use these tokens only to perform actions you explicitly request (e.g., importing files, listing repositories)
  • Never share your tokens with other users or third parties
  • Allow you to disconnect integrations at any time, which revokes stored tokens

Each third-party service has its own privacy policy. We encourage you to review them before connecting.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your information in the following situations:

  • With Your Consent: When you explicitly authorize sharing, such as making a workspace public.
  • Service Providers: With trusted vendors who assist in operating the platform (hosting, analytics, email).
  • Legal Requirements: When required by law, regulation, legal process, or governmental request.
  • Safety: To protect the rights, property, or safety of Zoldea, our users, or the public.

6. Data Security

We implement industry-standard security measures to protect your data, including:

  • Encryption of data in transit (TLS/HTTPS)
  • Secure storage of OAuth tokens and credentials
  • CSRF protection for authentication flows
  • Regular security reviews and access controls

No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

7. Cookies

We use essential cookies for authentication and session management. We may use analytics cookies to understand usage patterns. You can control cookie preferences through your browser settings.

8. Data Retention

We retain your data for as long as your account is active or as needed to provide services. You may request deletion of your account and associated data at any time by contacting us.

9. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access, correct, or delete your personal data
  • Export your data in a portable format
  • Withdraw consent for data processing
  • Object to automated decision-making
  • Lodge a complaint with a supervisory authority

To exercise these rights, contact us at support@zoldea.com.

10. Children's Privacy

Zoldea is not intended for use by individuals under the age of 13. We do not knowingly collect personal information from children under 13.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes by posting a notice on the platform. Continued use of Zoldea after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy, contact us at:

Email: support@zoldea.com

Website: https://zoldea.com