This policy explains how SEEKING PTE. LTD. ("we") collects, uses and protects personal data when you use Zeze (website, web app, desktop and mobile apps, and the MCP / OpenAPI interfaces). We comply with Singapore's Personal Data Protection Act (PDPA) and, for users in the EEA and the UK, the GDPR.

1. Who we are and who is responsible

Operator: SEEKING PTE. LTD. (Singapore UEN 202308485E), 2 Havelock Road, #05-11, Havelock2, Singapore 059763. Data protection contact: [email protected].

Content inside your organization's workspace — messages, files, sites, approvals and so on — is controlled by that organization, and we process it on its instructions. We are responsible for your account data, website data and platform operations data.

2. What we collect

Account data: email, name, avatar, time zone (you can hide it), and which organizations you belong to and your role.
Content you create in an organization: messages, files, meeting invites and call records (time, duration, participants), sites and tables, approvals, reviews. Voice and video calls are relayed in real time; we do not record them.
AI-related data: which AI clients you authorized (for example Claude or ChatGPT) and what they did on your behalf (audit records, including the "via AI" marker and delegations you approved).
Technical data: IP address, device name, app version, sign-in history (for new-device alerts), push tokens, error reports, and feedback you send us.
Usage statistics: counts such as active users, message volume and AI usage, for running the platform. Platform operators cannot see any organization's chat content.

3. How we use it

To provide the service: messaging, sync, search, notifications, calls, and enforcing your organization's permissions.
Security: abuse and fraud prevention, review of new workspaces, new-device alerts, troubleshooting.
Support and service notices (for example review results, account changes, maintenance).
Improving the product using aggregated counts and error reports — not your message content.

4. AI processing

AI you connect yourself (via MCP or OpenAPI, for example Claude or ChatGPT) can only read and write within the scope you grant, as you, subject to the approval rules you and your organization set. What it reads is handled under your terms with that AI provider.
Zeze's built-in AI features (translation, summaries and similar) are used only if your organization turns them on, with a model provider chosen by the organization's admin (for example Anthropic, OpenAI, Google, or the organization's own key). We send the minimum content needed through the provider's business API, whose terms do not use API data for training by default.

5. Where data is stored

Servers are hosted on Amazon Web Services in Singapore. Each organization has its own isolated server and database; organizations cannot see each other's data unless both agree to connect, and then only the shared conversations flow between them.

So that search, AI and audit can work, messages are not end-to-end encrypted on the server. Data is encrypted in transit (HTTPS / TLS) and server access is tightly restricted.

6. Who we share it with

Only as needed to run the service, with these sub-processors:

Amazon Web Services (hosting, Singapore)
Cloudflare (DNS, network acceleration, app downloads)
Resend (verification codes and notification emails)
Google Firebase Cloud Messaging and Apple Push Notification service (mobile push; notifications include the sender and a message preview by default, which you can turn off under Me → Notifications)
The model provider your organization chose, if built-in AI is enabled

Messages you send in a cross-organization conversation reach the other organization. We may disclose data where required by law. We use contractual safeguards for cross-border transfers.

7. Retention and deletion

Workspace content is kept until the organization deletes it or deletes the organization. When an organization is deleted, its server data is removed immediately and backups are kept for at most 14 days.
You can delete your account at any time under Me → Profile → Delete account: your accounts in all organizations are deactivated, your profile is cleared, and organizations where you are the only member are deleted. Messages you sent remain in other people's conversation history, shown as a deleted user. You can also do this in the web app, or email [email protected].
Technical data such as sign-in history and error reports is kept for up to 12 months.

8. Your rights

You can access, correct, export or delete your personal data, or withdraw consent. For content in an organization's workspace, contact that organization's admin first; for anything else, email [email protected] and we will respond within 30 days. Users in the EEA and the UK may also complain to their local data protection authority.

9. Security

Encryption in transit, isolation between organizations, permissions based on the org chart, tiered approval and audit for AI actions, audit trails for admin actions, and daily encrypted backups. Report security issues to [email protected].

10. Children

The service is for businesses and work, and is not directed to anyone under 16.

11. Changes and contact

We will notify you in the app or by email before material changes. Questions: [email protected], or write to SEEKING PTE. LTD., 2 Havelock Road, #05-11, Havelock2, Singapore 059763.

Privacy policy