Zenbild Privacy Policy

Effective Date: July 14, 2026
Last Updated: July 14, 2026

This Privacy Policy explains how Zenbild, Inc., a Delaware corporation ("Zenbild," "we," "us," or "our") collects, uses, discloses, and protects personal information in connection with the Zenbild mobile application, website, and related services (the "Service").

Zenbild provides a construction jobsite communication and task platform with an AI assistant for construction and jobsite teams. Our customers are businesses ("Customers") that authorize their personnel ("Authorized Users") to use the Service.

This Policy is incorporated into and subject to the Zenbild Terms of Use.

1. Our Role: When We Are a Service Provider and When We Are a Business

Our privacy responsibilities depend on the data at issue:

• Data we process on behalf of Customers (service provider / processor). When Authorized Users capture and submit Customer Content (voice recordings, images, messages, task and jobsite records), Zenbild acts as a service provider (processor) that processes that information on behalf of, and under the instructions of, the Customer. The Customer is responsible for that information, including for providing notices and obtaining consents (see Section 2 and the Terms of Use). We handle it in accordance with our contract and any Data Processing Addendum ("DPA") with the Customer, and we do not use it for our own independent purposes. If you are an Authorized User and want to exercise privacy rights over this data, we will generally route your request to the Customer or assist the Customer in responding.
• Data we control for our own purposes (business / controller). For account administration, authentication, billing, security, product improvement, and operation of our website, Zenbild acts as a business (controller) and determines the purposes and means of processing. This Policy governs that processing directly.

Billing applies to paid organization subscriptions purchased on the Zenbild website; the mobile app provides jobsite access at no charge and does not process payments. Billing and payment card details are handled by our subscription management and payment providers, Chargebee and Stripe, and are not stored by Zenbild.

You should also review the Customer's own privacy notices for how it handles information in the Service.

2. Personal Information We Collect

We collect the following categories of personal information:

Information you provide and content you submit. When you or your organization use the Service, we collect the content captured and submitted through it, which may include:

• Voice recordings and audio captured through the Service;
• Images, photographs, documents, and video you upload or capture (which may include images of people, jobsites, equipment, and documents). Uploaded files are processed to generate text summaries and search indexes (embeddings);
• Messages and communications you exchange with other users through the Service;
• Task and jobsite records, including descriptions, statuses, jobsite addresses, and related notes. Account and contact information. Name, work email address, phone number, employer or organization, job role, locale, and account credentials.

Usage and device information. Log data, IP address, browser/device user-agent, app version, operating system, access times, and how you interact with the Service. IP address and user-agent are retained per session for security. Push notification tokens/registrations where you enable notifications, on both web and mobile. For mobile push, we collect a push token and basic device information (device name, model, and platform), used solely to deliver notifications you have opted into via the applicable push relay (Expo, and Google FCM / Apple APNs).

Location information. Zenbild does not collect real-time device GPS location. Location information reaches the Service in two ways: (a) photo metadata — photographs you capture or upload may contain EXIF data such as GPS coordinates, capture time, and device make, which we extract and store with the associated file; and (b) jobsite address — the address or location you enter for a jobsite, which we use to associate activity with the correct jobsite and to provide jobsite weather (the jobsite address is sent to our weather provider and, as part of assistant context, to our AI provider). If you do not want photo location metadata stored, you can disable location tagging in your device's camera settings before capturing images.

Communications with us. Information you provide when you contact support or correspond with us.

We do not intentionally collect personal information from anyone under 18. The Service is for business use by adults.

Notice at collection. Where required, a notice at or before the point of collection is presented in the app or website at the time information is collected. This Policy provides the full detail.

Sensitive information and biometrics. Voice recordings and images may, depending on how the Service is used, contain information some laws treat as sensitive. Zenbild does not derive biometric identifiers (such as voiceprints or facial-geometry templates) from Customer Content. Voice recordings are transcribed to text; images are not used to generate facial-recognition templates. Accordingly, Zenbild does not create or store biometric information as defined under the Illinois Biometric Information Privacy Act ("BIPA") or comparable Texas and Washington statutes. Customers remain responsible for obtaining any consents required before capturing such content (see Terms of Use, Section 9).

3. How We Use Personal Information

We use personal information to:

• Provide, operate, maintain, and secure the Service;
• Capture, store, transcribe, and organize voice, images, messages, and task records submitted through the Service (as service provider, on the Customer's behalf);
• Operate the AI features, including searching for information, transcribing audio, interpreting images, translating content, generating summaries and suggestions, and performing actions within the records system, in each case to assist Authorized Users (who remain responsible for reviewing and verifying results);
• Authenticate users and manage accounts;
• Communicate with you about the Service, including support and administrative messages;
• Monitor, analyze, and improve the Service, including through aggregated and de-identified data;
• Detect, prevent, and respond to fraud, abuse, security incidents, and violations of our Terms; and
• Comply with legal obligations and enforce our agreements. We do not use voice recordings, images, or messages for advertising, and we do not sell this information (see Section 6).

4. AI Processing

The Service uses AI to assist Authorized Users. To provide AI features, Customer Content and certain account information are processed by Zenbild's systems and by:

• OpenAI — powers the "Zen" assistant, chat intelligence, automatic translation, and project summaries. To do so, OpenAI receives: your name and work email address and the jobsite address (provided as assistant context); the text of chat messages (including for automatic translation); the contents of files you share with the assistant; and images you send to the assistant;
• Cloudflare Workers AI (Whisper and embedding/reranking models) — receives voice recordings to transcribe them to text, and receives document and message text to generate search indexes (embeddings) and ranking. These providers act on Zenbild's behalf under contractual confidentiality and data-protection terms.

AI output may be inaccurate or incomplete, and Authorized Users are responsible for reviewing and verifying it before relying on it, as described in the Terms of Use.

Vendor use of Customer Content. We use OpenAI and Cloudflare to provide certain features. Under our data processing terms with each, they process your content only to provide those features to Zenbild, not to train their general-purpose models or for advertising.

5. How We Disclose Personal Information

We disclose personal information only as follows:

• To the Customer. Personal information generated through an Authorized User's use of the Service is accessible to the Customer organization that controls the account.
• To other users. Messages and shared task content are visible to the users you communicate or collaborate with through the Service.
• To service providers and subprocessors. We share information with third parties that perform services on our behalf under contracts that require them to protect the information and use it only to provide services to us. These include our hosting and infrastructure provider Cloudflare (Workers, D1, R2, Queues, Vectorize, Containers). A current list is maintained at zenbild.com/subprocessors.
• For legal reasons. We may disclose information to comply with applicable law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of Zenbild, our users, or the public.
• In business transfers. In connection with a merger, acquisition, financing, or sale of assets, subject to this Policy. We do not disclose personal information to third parties for their own marketing purposes.

6. We Do Not Sell or Share Personal Information

Zenbild does not "sell" personal information and does not "share" personal information for cross-context behavioral advertising, as those terms are defined under the California Consumer Privacy Act, as amended by the CPRA ("CCPA"). We have not sold or shared personal information in the preceding 12 months. We also do not use or disclose sensitive personal information for purposes beyond those permitted under the CCPA.

Opt-out preference signals (GPC). Because we do not sell or share personal information, there is nothing to opt out of. Should our practices ever change, we will treat a recognized opt-out preference signal, such as the Global Privacy Control, as a valid opt-out of sale/sharing.

7. Your Privacy Rights

7.1 California (CCPA/CPRA)

To the extent the CCPA applies to Zenbild, and if you are a California resident, you have the following rights, subject to verification and legal exceptions:

• Right to know / access the categories and specific pieces of personal information we have collected, the sources, the purposes, and the categories of third parties to whom we disclose it;
• Right to delete personal information we have collected, subject to exceptions;
• Right to correct inaccurate personal information;
• Right to opt out of the sale or sharing of personal information (note: we do not sell or share, as described in Section 6);
• Right to limit the use of sensitive personal information (we already limit such use to permitted purposes); and
• Right to non-discrimination for exercising your rights. How to exercise your rights. Submit a request to privacy@zenbild.com, or use the in-app account deletion flow described in Section 9 to submit a deletion request. We will take reasonable steps to verify your identity before responding (for example, by matching information you provide against information in your account) and will respond within the timeframes required by law (generally 45 days, extendable where permitted). You may use an authorized agent to submit a request on your behalf with proper authorization.

Note for Authorized Users. Where we process your personal information as a service provider because your employer or another organization uses the Service, that organization is generally responsible for your information, and we will route your request to them or assist them in responding. This routing does not deny you any statutory right; it directs the request to the party able to act on it.

7.2 Other U.S. states

If you are a resident of a U.S. state with a comprehensive consumer privacy law in effect, you may have similar rights to access, correct, delete, and obtain a copy of your personal information, and to appeal a denied request. As of the Last Updated date, states with such laws in effect include Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Iowa, Delaware, Nebraska, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, Indiana, Kentucky, Rhode Island, Florida, and Arkansas.

The specific rights available to you, and whether a given law applies to Zenbild at all, depend on each law's applicability thresholds and its treatment of data processed in a commercial or employment context. Some of these laws exclude Authorized User data processed in an employment or B2B context, so the treatment of that data varies by state.

Appeals. If we deny a rights request, you may appeal by replying to our decision or writing to privacy@zenbild.com. We will respond to an appeal within the period required by the applicable state law (for example, 60 days under the Texas Data Privacy and Security Act). If your appeal is denied, you may contact your state attorney general to submit a complaint.

7.3 Categories of personal information (CCPA disclosure)

In the preceding 12 months, we may have collected the following CCPA categories: identifiers (e.g., name, email, device identifiers); customer records (e.g., contact details, employer); professional or employment-related information (e.g., job role, employer); audio, electronic, and visual information (e.g., voice recordings, images, messages); geolocation data (e.g., photo EXIF coordinates, jobsite address); and internet/network activity (e.g., usage logs). Some of this may constitute sensitive personal information. We collect these for the business purposes described in Section 3 and disclose them only as described in Section 5. We have not sold or shared any category.

8. Data Retention

We retain each category of personal information only as long as necessary for the purposes described in this Policy, subject to the following target criteria:

We may retain aggregated or de-identified data indefinitely. Customer Content is handled in accordance with any applicable DPA and Order.

9. Deleting Your Account and Data

You can delete your account from within the app and on the web. Full step-by-step instructions for both platforms are published at zenbild.com/account/deletion. When you delete your account, Zenbild anonymizes your personal information in place, disables the account, releases your email so it can be used to create a new, separate account, and deletes your private assistant conversations, notifications, push registrations, and credentials. Content you shared with your organization — including files (and any location metadata embedded in photos), messages in shared channels, and direct messages — is retained under the Customer organization's control and re-attributed to a deactivated, non-identifying label. This is an anonymization/erasure process rather than a row-level hard delete. Customer Content that belongs to a Customer organization is handled per that Customer's instructions and the applicable DPA.

10. Security

We implement reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, use, alteration, and disclosure. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security. You are responsible for safeguarding account credentials and notifying us of any suspected unauthorized access.

11. Cookies and Analytics

Our marketing website (zenbild.com) uses Google Analytics to understand aggregate usage. Google Analytics sets cookies and processes usage and device data, including a cookie identifier and IP address. We do not enable Google Analytics advertising features or Google Signals, so it is not used for cross-context behavioral advertising. The Zenbild web application uses only strictly necessary cookies for authentication, and the mobile app does not use analytics or advertising SDKs. For details, see our Cookie Policy.

12. Children's Privacy

The Service is intended for business use by individuals 18 and older. We do not knowingly collect personal information from children. If we learn that we have collected such information, we will delete it.

13. International Users

The Service is operated from the United States. Personal information is processed in the United States and may also be processed by our subprocessors on globally distributed infrastructure. If you access the Service from outside the United States, you understand that your information will be transferred to and processed in the United States and elsewhere, where data-protection laws may differ from those of your jurisdiction.

14. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last Updated" date and provide notice as appropriate through the Service. Your continued use of the Service after changes take effect constitutes acceptance of the updated Policy.

15. Contact Us

If you have questions about this Privacy Policy or our privacy practices, contact us at:

Zenbild, Inc.
2261 Market Street STE 70169
San Francisco, CA 94114
Email: privacy@zenbild.com