Effective September 19, 2026
Who runs Zoen
Zoen is an AI assistant operated by Enzo Tironi. This policy covers the Zoen iMessage agent and its account-connection service. For privacy questions and requests, contact enzo@zoen.space.
What you share
Zoen processes the messages, attachments, instructions, and preferences you share, along with your messaging identity and the information needed to deliver replies. Conversation history, task records, and saved memories help it continue your work.
Connecting an account is optional. You choose the account and permissions on the provider's authorization screen. Zoen stores authorization credentials and the connected account's identity so it can carry out your requests without asking you to sign in every time.
Your Google connection
Zoen requests access for the features you choose. Depending on your consent, this can include your email address; Gmail messages for search and summaries; sending email you request; calendar events and calendar lists for scheduling; Drive files for finding and using documents; Contacts for looking up people; and Docs or Sheets for reading, creating, or editing documents and spreadsheets.
Permissions enable a feature; they do not authorize every possible action. Zoen uses connected data to carry out your instructions and any ongoing tasks you have requested. You can decline permissions or stop using a connection.
How your data is used and shared
Relevant messages and connected-account content are processed by the agent and its AI providers to understand requests, use tools, and produce responses. Hosted Zoen uses Plow for messaging, agent hosting, and model routing, and Cloudflare for the authorization callback service. Plow's model processors may include OpenAI, Anthropic, and OpenRouter. Connected services receive the API requests needed for your task. Processing can take place outside your country.
The Google authorization service handles login codes and tokens; it does not fetch your mailbox, calendar, or files. Those API calls run from your agent. Information returned by a tool may become part of the conversation, task history, or saved memory.
Zoen does not sell Google user data, use it for advertising or credit decisions, or use it to train general-purpose AI models. Google data is shared only to provide the features you request, for security, to meet legal obligations, or in a business transfer with your prior consent. Human access is limited to your specific consent, security needs, legal requirements, or data that has been aggregated and anonymized.
Zoen's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.
Storage and protection
Connections use HTTPS. Google's app secret stays in the authorization service; refresh credentials are encrypted before being stored with your agent. Short-lived access tokens and other connector credentials are kept in restricted files in the agent's persistent storage. This is cloud processing, not processing confined to your phone.
Authorization attempts expire after five minutes; acknowledgment or cancellation removes the callback delivery data. Conversation history, memories, task records, and saved credentials persist with the agent until removed or the instance's storage is deleted. Revoking a connection does not erase earlier conversations. Infrastructure providers may retain backups or security records under their own retention policies.
Installation and token-usage totals may be reported to the AI Worth Using Agent Index. The usage reporter does not upload conversation bodies or Google account contents.
Your choices
You can revoke Zoen's Google access in your Google Account connections. To request access to, correction, export, or deletion of data held by Zoen, email enzo@zoen.space. We may need to verify that the request comes from the account owner. Deleting Zoen's stored data does not delete your originals in Google or another connected service.
Self-hosted installations can use different infrastructure or AI providers. Their operator controls that configuration and storage; contact that operator about their processing.
Updates and contact
Material changes will be communicated before they take effect. New uses of Google data require the appropriate notice and consent. Contact enzo@zoen.space with questions.