Data Processing
Practices

This page describes how ZeroDrift processes, stores, and protects personal data on behalf of its customers. It supplements ZeroDrift’s Privacy Statement and applies to all personal data processed by ZeroDrift in the courseof providing its services.
This page is a description of our practices and is not a contract. Contractual data processing terms are set out in the data processing agreement executed under your Customer Agreement.
Data Storage and Retention
Your personal data is stored by ZeroDrift on its servers, and on theservers of the cloud-based database management services ZeroDrift engages,located in the United States.
Customer data. Data submitted to the ZeroDrift platform by acustomer is retained only for as long as necessary to provide the service. Customer-uploaded data processed through the platform is retained for 7 days. On termination of the customer relationship, remaining customer data is returned or deleted at the customer’s election, except where retention is required by law.
Business contact and prospect data. ZeroDrift retains businesscontact data for as long as we have an active business relationship with you oryour organisation. After that relationship ends, we retain the data only for aslong as necessary to meet our legal, tax, accounting, and audit obligations, orto establish or defend legal claims, and delete it once those obligations have expired. Prospect data is retained until it no longer has business value or until you ask us to delete it, whichever is sooner, and is then purged from ZeroDrift systems.
Aggregated data. ZeroDrift may retain aggregated and de-identified operational metrics that do not identify any individual, for service improvement and capacity planning.
All personal data that ZeroDrift controls may be deleted upon verified request from data subjects or their authorized agents.
For more information on where and how long your personal data is stored, and for more information on your rights of erasure and portability, please contact us at: support@zerodrift.ai.
Transferring Personal Data to the U.S.
ZeroDrift is headquartered in the United States, and personal data we collect is processed here. Where we receive personal data from the European Economic Area (EEA) or the United Kingdom, we rely on the European Commission’s Standard Contractual Clauses (SCCs), which are incorporated into our data processing agreements with vendors and customers, as the appropriate safeguardfor these transfers.
For more information or if you have any questions, please contact us at support@zerodrift.ai.
Sub-Processors
The personal information ZeroDrift collects from you is stored in one ormore databases hosted by third parties located in the United States. Thesethird parties do not use or have access to your personal information for anypurpose other than cloud storage and retrieval or, where applicable, theAI-based analysis performed to deliver the service, as described in our Privacy Statement. Third-party model providers process data solely to deliver theservice and do not retain it or use it to train their own models.
ZeroDrift uses external large language model providers, currently OpenAIand Anthropic, as sub-processors.
A list of our third-party sub-processors can be found here: ZeroDrift Trust Center.
Government Requests
Since it was founded, ZeroDrift has received zero government requests for information.
Contact
For more information or if you have any questions about our data processingpractices, please contact us at:
ZeroDrift
4 World Trade Center, 150 Greenwich Street, Ste 2929
New York, NY10007
support@zerodrift.ai
201-305-9646
Ready to enforce compliance before delivery?
See how ZeroDrift validates, rewrites, and blocks AI communication across your agents, applications, and enterprise workflows.