Privacy Policy

Who we are

Zerro is operated by SmartScale Solutions LLC (“SmartScale”, “we”, “us”). Zerro is a macOS menu-bar app that lets you record a region of your screen, dictate what you want, and receive exactly what you need: an agent prompt, a message, a snippet, a document, or a clear answer to your question. This policy explains what data we collect through the Zerro app and the getzerro.app website, how we use it, and the choices you have. Questions? Email us at support@getzerro.app.

The short version

• We do not store your recordings. Screen frames, audio, and transcripts are held briefly on your device and in memory during generation, and are never written to our database. Our generation log has no content columns by design; it records only token counts, model, estimated cost, and success.
• Processing starts on your Mac. Your recording is prepared locally, and best-effort secret redaction runs on your Mac before anything is uploaded. Redaction covers detected on-screen text only; your spoken audio is uploaded as recorded.
• On the BYOK trial and plan, recordings never touch our servers. Generations go directly from your Mac to your AI provider using your own API keys, which are stored in your macOS Keychain.
• We do not sell your personal information or share it for cross-context behavioral advertising.
• Anonymous analytics are optional. The app collects anonymous usage and crash diagnostics (metadata only, never your recordings, transcripts, or prompts) to improve reliability, and you can turn it off any time in Settings.

Information we collect

Account information. We collect your email address if you choose the Zerro Cloud Trial or create a paid account. The anonymous BYOK trial does not require an email or account. Zerro Cloud Trial users verify their email with a one-time 6-digit code; paid access uses a license key issued by Lemon Squeezy. We do not offer social sign-in (such as Apple or Google), and there is no password to manage. Authentication and our database are handled by Supabase.

Billing information. Payments are processed by Lemon Squeezy, our merchant of record. We never see or store your full card number. We receive and store your subscription status, plan, and billing events needed to operate your account.

Recordings (Zerro Cloud and Zerro Cloud Trial). When you start a recording, the app captures the screen region you select and your voice. Your Mac first prepares the recording locally and masks detected secrets before upload. This masking is best-effort: it scans on-screen text for common structured secrets (such as API keys and tokens), so it can miss things, and it does not apply to your spoken audio; your narration is uploaded and transcribed as recorded. The frames and audio are then sent to our generation service, where the audio is transcribed and the content is sent to the third-party AI model you selected (OpenAI, Google (Gemini), or Anthropic) to produce your prompt. This data is processed transiently: frames, audio, transcripts, and prompts are not stored in our database. The generated output is held in a short-lived cache for up to 15 minutes solely so that a dropped connection can be retried without charging you twice, then becomes unreadable and is purged.

You must not submit data subject to special legal protection, such as HIPAA-covered health information or PCI-regulated payment card data; see the Acceptable use section of our Terms of Service.

Recordings (BYOK trial and plan). If you bring your own API keys, generations are sent directly from your Mac to the relevant provider (OpenAI, Google (Gemini), or Anthropic). You can transcribe audio on your Mac, or choose OpenAI cloud transcription; the cloud option sends audio directly to OpenAI and requires an OpenAI API key. Your recordings and keys never pass through our servers; keys are stored locally in your macOS Keychain.

Dev Mode (optional).If you turn on Dev Mode, Zerro launches Claude Code (Anthropic’s coding-agent CLI) locally on your Mac, inside the project folder you choose. Acting at your direction, the agent can read and modify files in that folder and run commands there; it runs under sandboxing and permission controls that scope its access to your project. To match your recording to the right project, Zerro can read the address of your active browser tab via Apple Events, but it only ever uses a local (localhost) address to detect the development-server port; any non-local address is discarded the instant it is seen, and is never stored, logged, or transmitted. Your project files stay on your Mac and are not sent to SmartScale; when the agent runs, it communicates with Anthropic under its own terms to carry out the work you request.

Usage data. For Zerro Cloud generations, we record per-generation metadata (token counts, estimated cost, model, provider, and success) to operate credits and billing. For the anonymous BYOK trial, Zerro sends only the one-way device hash and a random generation identifier after a successful result so we can enforce the 10-generation limit and avoid counting a retry twice. We do not receive the recording, prompt, transcript, result, API key, model, or provider for that generation. We also process IP addresses and session identifiers for rate limiting and abuse prevention.

Trial verification. The Zerro Cloud Trial requires an email verified with a one-time code sent via Resend. We store only a hashed version of the code, never the raw code. The anonymous BYOK trial requires no email. To prevent trial abuse, both paths use a one-way hash of a hardware identifier and are mutually exclusive, limiting each Mac to one free-trial type. The underlying identifier never leaves your Mac (only the hash is sent), and it is used solely for fraud prevention, never for tracking or advertising.

App analytics and crash reports.The Zerro desktop app uses PostHog to collect anonymous product-usage events (such as completing onboarding, starting a recording, or copying a result) and diagnostic crash and error reports. These contain only metadata (event names, timings, app version, model identifiers, and error types) and never your recordings, transcripts, generated prompts, file paths, or API keys. This data is associated with an anonymous device identifier, not your name or email. You can turn it off at any time in the app under Settings → “Send Anonymous Usage Data & Crash Reports.”

Website analytics. The getzerro.app website uses PostHog to collect anonymous product-usage metadata (page views, referrer and campaign source, device and browser type, and interaction events such as clicking a download button or expanding an FAQ), along with aggregated heatmaps of where visitors click and scroll. This is metadata only and is not tied to your name or email. We do not record your browsing session, and the site is cookieless: PostHog sets no cross-site tracking cookies and keeps no identifier between visits.

Affiliate attribution and checkout.If you arrive through an affiliate link (a getzerro.app address carrying an “aff” code), we send that code to our server keyed to your public IP address so that a later purchase can be credited to the referrer. Because checkout happens inside the Mac app (a separate browser context), the app also passes its analytics identifier into the Lemon Squeezy checkout so that a completed subscription can be matched back to the app’s usage events. Where this identifier is linked to a checkout or subscription in this way it is pseudonymous rather than fully anonymous, though it is still not your name or email.

How we use your information

• To provide the service: generating prompts from your recordings, managing your account, credits, and subscription.
• To process payments and prevent fraud and abuse, including rate limiting and trial-abuse prevention.
• To communicate with you about your account, such as trial verification codes and support responses.
• To understand aggregate usage of our website and improve the product.
• To diagnose crashes and errors and improve the app’s reliability.
• To comply with legal obligations.

We do not use your recordings, transcripts, or generated prompts to train AI models.

Service providers

We share data with a small set of providers, each only to the extent needed to run Zerro: Supabase (authentication, database, and generation service), OpenAI, Google (Gemini), and Anthropic (AI model processing of recordings on Zerro Cloud and the Zerro Cloud Trial, direct model processing on BYOK, and optional BYOK cloud transcription through OpenAI), Anthropic (Claude Code) (the local coding agent that powers Dev Mode, a role separate from Anthropic’s model API above), Lemon Squeezy (payments, as merchant of record), Resend (transactional email), Slack (internal routing of in-app feedback and issue reports you choose to send, which include your email address when you are signed in), PostHog (app and website analytics and crash reporting), and Vercel (website hosting). AI providers process your content under their API terms; we use API offerings under which inputs are not used to train their models. We do not sell your personal information to anyone.

Data retention

• Screen frames, audio, transcripts, prompts: not stored in our database; held briefly on your device and in memory during generation only.
• Zerro Cloud generated output: cached up to 15 minutes for retry safety, then purged. BYOK output is returned directly by your AI provider and is never cached by Zerro.
• Account, subscription, and generation metadata: kept while your account is active and as required for accounting and legal purposes.
• Trial verification codes: stored hashed and expire within minutes.
• BYOK trial ledger: the one-way device hash and random successful-generation identifiers are retained to enforce the one-trial-per-Mac and 10-generation limits.
• Anonymous app analytics and crash diagnostics: retained by PostHog under our configured retention period and tied only to an anonymous device identifier.

You can request deletion of your account and associated data at any time by emailing support@getzerro.app.

Security

We use industry-standard safeguards: data is encrypted in transit (TLS), API keys on the BYOK trial and plan live in your macOS Keychain rather than on our servers, trial verification codes are stored only as hashes, the underlying trial device identifier never leaves your Mac, and our backend enforces authentication, rate limits, and least-privilege access. Some account data, such as your email address, is necessarily stored in readable form so we can operate billing and trials. No system is perfectly secure, but we design so that the most sensitive data (your screen and voice) is held by us for the shortest possible time, or not at all.

International transfers

We are based in the United States and our service providers process data primarily in the United States. If you use Zerro from outside the US, your data will be transferred to and processed in the US. Where required, we rely on appropriate safeguards such as standard contractual clauses offered by our providers.

Your rights (EEA, UK, and similar jurisdictions)

If you are in the European Economic Area, the United Kingdom, or a jurisdiction with similar laws, you have the right to access, correct, delete, or receive a copy of your personal data, to object to or restrict certain processing, and to withdraw consent where processing is based on consent. Our legal bases are performance of a contract (providing the service), legitimate interests (security, abuse prevention, product improvement), and consent where required. You may also lodge a complaint with your local supervisory authority. To exercise any right, email support@getzerro.app.

Your rights (California)

If you are a California resident, you have the right to know what personal information we collect, to access and delete it, to correct inaccurate information, and to not be discriminated against for exercising these rights. We do not sell personal information or share it for cross-context behavioral advertising, so there is nothing to opt out of. To exercise these rights, email support@getzerro.app.

Children

Zerro is not directed to children under 13 (or the minimum age in your jurisdiction), and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. We will post the updated version on this page and revise the “Last updated” date. For material changes, we will provide more prominent notice, such as email.

Contact us

SmartScale Solutions LLC · support@getzerro.app