Zolt AI

Privacy Policy

Effective August 26, 2026

Zolt AI (“the Service”) is operated by Red Media Network LLC (“we”, “us”). This policy explains what information we collect, how we use it, and the choices you have. Questions any time: info@redmedianetwork.com.

Information we collect

• Account information. Your name, email address, and a hashed password — or, if you sign in with Google, the name and email Google shares with us. We never see or store your Google password.
• Workspace content. The businesses, boards, zones, and tiles you create; files you upload; links you import; notes; chat messages; and voice recordings you choose to transcribe.
• Content you import. When you paste a link (a website, video, or article), we fetch and process that content — including extracting text and transcripts — so your workspace chat and generations can use it. You are responsible for having the right to import the content you import (see our Terms of Service).
• Visitor and lead data collected on your behalf. If you publish a landing page or embed a chatbot, we store the form submissions and chat messages your visitors send. For that data, you (our customer) are the data controller and we act as your processor — you are responsible for your own privacy notices to your visitors.
• Billing information. If you buy a plan or a credit pack, our payment processor (Stripe) collects and processes your payment details. We never see or store your full card number— it goes directly to Stripe. We keep the identifiers and records we need to run billing: a Stripe customer and subscription id, your plan, invoice and receipt history, and your credit balance and the ledger of credits granted and spent. Stripe processes this as an independent controller under its own privacy policy.
• Usage information. Sign-ins and product activity (for example, that a board was created), used to operate features like your activity feed and to keep the Service secure.
• Cookies. We use a session cookie to keep you signed in. We do not use advertising cookies or third-party trackers.
• Waitlist and referrals. If you join the waitlist or use a referral link, we store the email and name you provide and the referral relationship.

How we use information

• To provide and operate the Service — including grounding AI chat and generations in your content.
• To send transactional email (account and beta access messages) and, with your consent, occasional product updates. Every marketing email includes an unsubscribe link.
• To secure the Service, prevent abuse, and debug problems.
• To improve the product, using aggregate usage patterns — not the contents of your workspace.

AI processing

Core features send relevant parts of your workspace content to third-party AI model providers — currently Anthropic, OpenAI, Google, and xAI — to generate responses, content, and images. We send only what a feature needs, under each provider’s API terms. We do not use your content to train our own models, and we do not permit these providers to use API data for training where they offer that control.

Connected social accounts

If you connect a social account — a Facebook Page, Instagram professional account, Threads profile, LinkedIn page, X, Pinterest, TikTok, YouTube, or Bluesky — you authorize us to act on that account on your behalf, and we receive data from that platform (“Platform Data”). We ask each platform only for the permissions the features you use actually require.

What we receive and store:the access credential for the account, the account’s id, name or handle and profile picture, the identifier of the post we publish, and performance readings for posts published through Zolt (such as views, reach, likes, comments, shares, and watch time where the platform provides them).

What we use it for:publishing the content you approve, showing you how those posts performed, and improving the content we generate for you — your own results are fed back into generation so future content reflects what works for your audience. We do not use Platform Data for advertising, we do not sell it, we do not combine it with data from other customers, and we do not use it to train AI models.

How long we keep it:credentials for as long as the account is connected, and performance readings for as long as your account is open, because a deleted reading cannot be recovered later — platforms do not keep this history indefinitely.

How to delete it:disconnect the account in Zolt (Settings → Social accounts), or remove Zolt AI in the platform’s own app settings — the platform notifies us and we delete the connection and its stored readings automatically. Full instructions are on our data deletion page. Posts already published remain on the platform; they belong to your account there.

Our use of information received from Meta APIs follows Meta’s Platform Terms and Developer Policies, including their limited-use requirements.

Where your data lives and who can access it

The Service is hosted in the United States: the application and PostgreSQL database run on Railway infrastructure, and the images and files the product generates or you upload are stored on Tigris Data object storage. We do not sell your data, and we share it only with the service providers needed to run the product — hosting (Railway), object storage (Tigris Data), email delivery, payment processing (Stripe), and the AI providers listed above. If you use the Service from outside the United States, your data is processed in the United States.

Legal requests and government demands

We may disclose your information when we are required to do so by law — for example in response to a subpoena, court order, search warrant, or other lawful request from a public authority — or where disclosure is necessary to protect our rights, your safety or the safety of others, or to investigate fraud or a violation of our Terms of Service.

When we receive a request from a public authority for your information, we:

• Review it for legal validity before responding, including whether the request is properly issued and covers the data it claims to.
• Disclose only the minimum necessary. We produce the narrowest set of data that answers the request, rather than an entire account or workspace.
• Document the request and our response, including who asked, what was produced, and the reasoning — so our handling of these requests can be audited.
• Notify you where we are lawfully able to, so that you have the opportunity to object, unless we are legally prohibited from telling you.

Retention and deletion

Your content stays in your workspace until you delete it (boards you delete go to Trash first, then can be permanently removed). To delete your account and its data entirely, email info@redmedianetwork.comand we will complete the deletion within 30 days. Waitlist entries are deleted on request. Data from connected social accounts can be deleted separately and immediately — see our data deletion page.

Billing records are an exception: we retain invoices, payment records, and the credit ledger for as long as tax, accounting, and anti-fraud obligations require, even after an account is deleted. Deleting your account does not reverse a completed purchase — see “Paid plans and Zolt Credits” in our Terms of Service.

Your rights

You can access, correct, export, or delete your information by emailing us. If you are in a jurisdiction with specific privacy rights (such as the EEA, UK, or California), we honor access, correction, deletion, and portability requests under those laws. We do not sell or share personal information as those terms are defined under the CCPA.

Security

Data is encrypted in transit, passwords are stored hashed, sessions are signed, and access to production systems is limited. No system is perfectly secure — if we learn of a breach affecting your data, we will notify you promptly.

Children

The Service is not directed to children under 16, and we do not knowingly collect their data.

Changes

We will post any changes to this policy here and update the effective date. Material changes will be announced by email to account holders.