Privacy policy
Zengist is a product name of, and is operated by, Elowin Labs LLC. References to "Zengist", "we" or "us" mean Elowin Labs LLC doing business as Zengist. This policy explains what happens to the files and text you put into Zengist. It is short because there is not much to explain.
1. Your files and text
On-device runs. When a run happens on your device (Chrome's built-in AI or a private model you downloaded), your files are read, converted to text and summarized entirely inside your browser. No request containing your content is made to our server or to anyone else. We could not look at those files even if we wanted to; there is no server that receives them.
Cloud runs. When your browser cannot run a model, or you choose the cloud in settings, the extracted text and your task are sent to our server, relayed to our model provider, and the answer is streamed back to you. Our server holds the text in memory for the length of the request and does not write it to disk, log it, or keep it. The provider is OpenAI; their API data usage terms apply to that request. At the time of writing, OpenAI states that API inputs are not used to train its models and may be retained for up to 30 days for abuse monitoring unless zero-data-retention applies to the account. Every result shows whether it ran on your device or in the cloud.
Links. When you add a link, our server fetches that public page, extracts its readable text and returns it to your browser. The page text is not stored.
Results. Your recent results are kept in your own browser's storage so you can reopen them. They are not sent to us. Clear them any time from the recent list or by clearing site data.
2. What we do collect
Server logs. Our server keeps standard, short-lived request logs (the route called, response code, timing, and a coarse error message when something fails) to keep the service running. It does not log the text of your files or results.
Rate limiting. To keep the free cloud path free, we count cloud runs per connection address per day. The counter is a number next to an address; it is reset daily and is not linked to anything else.
Analytics. We use Plausible, a privacy-first, cookieless analytics service, to count page views and a few product events (such as "a run finished" and which engine ran it) in aggregate. It sets no cookies, collects no personal data and does no cross-site tracking, which is why no consent banner is needed.
Model downloads. If you opt in to a private model, your browser downloads it from a public content delivery network (the Hugging Face Hub and jsDelivr). Those requests transfer the model to you; they do not transfer anything of yours to them. Chrome's built-in model is downloaded by Chrome itself under Google's terms.
3. Cookies
Zengist sets no cookies. Your settings and recent results live in your browser's local storage and IndexedDB, which stay on your device. See the cookie policy.
4. Your rights
Because we do not keep your content or maintain accounts, there is usually nothing for us to access, correct or delete. If you believe we hold information about you, email us and we will respond. Residents of the EU, UK, California and other jurisdictions with privacy laws have the rights those laws provide; you may also lodge a complaint with your local supervisory authority.
5. Children
Zengist is not directed at children under 13 and we do not knowingly collect information from them.
6. Changes
If this policy changes materially, the date at the top changes and the change is described here. The promises above are tied to how the product is built; if the architecture changes, this page changes with it.