AI Usage & Personal Data Policy

This policy applies to the ZorgSocial mobile applications for iOS and Android, the ZorgSocial web application, and any AI-powered feature made available through them (together, the "AI Features"). It covers personal data and content that you provide to us or that we process on your behalf when you use those AI Features.

The AI Features include, without limitation:

• Image generation and image editing, including reference-based editing, portrait retouching, background removal, upscaling and vector (SVG) generation
• Video generation, image-to-video animation, video editing, video extension, upscaling and lip-sync
• Text-to-speech, voice cloning and voice changing, multi-speaker dialogue, music generation, sound design and AI dubbing / speech translation
• Transcription, translation, captioning and audio understanding
• The Easy Zorg agent, which reasons about your request, plans multi-step workflows and selects the appropriate models and tools
• Content generation, copywriting, hashtag and caption generation, strategy planning, analytics and social listening

Our mobile apps request operating-system permissions only when a feature needs them, and only for the purpose described. The table below explains what each permission is used for, what it does not do, and how you can change it.

Denying a permission never blocks the rest of the app. It only disables the specific capability that depends on it. Every AI Feature that needs media also accepts an upload from your gallery or files, so you always have an alternative path.

On both iOS and Android, the operating system itself enforces these permissions. Even if ZorgSocial were to request access, the OS will not deliver camera, photo, microphone or file data unless you have granted it. You can review and revoke permissions at any time without deleting your account.

When you use an AI Feature, your content follows a controlled path. At each step, the app tells you what will happen before it happens:

1. You select or capture media, or type a prompt, inside the app.
2. The app shows a just-in-time notice identifying the AI Feature, the type of content to be processed, and — where the model is known — the AI model and provider that will process it.
3. You approve the action. No content is transmitted before this approval.
4. Your content is uploaded over an encrypted connection (TLS) to ZorgSocial's own infrastructure, where it is stored so you can access your job history and reuse sessions.
5. ZorgSocial submits the content to the selected third-party AI model provider using ZorgSocial's own service credentials. The provider does not receive your ZorgSocial account identity, name, email address or payment details.
6. The provider returns the generated or edited output, which is stored on ZorgSocial's infrastructure and shown to you in the app.
7. You can delete the job, the session or your account at any time, which removes the associated content from our systems subject to the retention rules in Section 9.

What may be sent to an AI model

• Images and photographs you upload or capture, including photographs that may contain identifiable faces where you have chosen to use a portrait, avatar or face-editing feature
• Videos and video clips you upload, capture or generate
• Audio recordings, voice samples and music files you upload or record
• PDFs, documents and other files you attach as inputs or references
• Text you enter: prompts, instructions, chat messages and editing directions
• Conversation context: the relevant portion of your current session and summaries of prior turns needed for the model to understand your request
• Previously generated outputs that you feed back for further editing or extension
• Technical processing metadata: file format, resolution, duration and job parameters required to run the model

What is never sent to an AI model

We do not send your name, email address, phone number, payment or billing information, contacts, precise location, device advertising identifiers, or your connected social media account credentials to AI model providers. Requests are transmitted under ZorgSocial's own service credentials, so providers do not receive your ZorgSocial account identity. We do not use facial data to identify individuals and we do not build facial recognition databases.

We rely on your explicit consent as the legal basis for transmitting your content to third-party AI models. Consent works as follows:

• First use: the first time you use an AI Feature in the mobile app, we display a consent screen that identifies the categories of data to be sent and the AI providers involved. No content is transmitted until you affirmatively accept.
• Just-in-time approval: every meaningful generation, edit or upload action shows what will be processed and, where known, which model will process it, and requires your approval before it runs.
• Granular control: you can consent to some AI Features and decline others. Declining AI processing does not prevent you from using the non-AI parts of the Service, such as scheduling, publishing, calendars and analytics.
• Third-party rights: if you upload photographs or recordings of identifiable individuals, you confirm that you have the necessary rights and, where required by law, their consent. You must not upload biometric or special-category data of others without a lawful basis.
• No dark patterns: consent is never bundled with unrelated terms, never pre-ticked, and never inferred from continued use of the app.

Your content is sent to AI models solely to deliver the feature you asked for. Specifically, to:

• Generate, edit, composite, retouch, upscale, extend or transform the images, videos, audio and text you request
• Analyse and describe reference media you attach so that outputs match your intent
• Enable the Easy Zorg agent to reason about your request, plan multi-step workflows and select appropriate tools and models
• Transcribe, translate, caption or dub audio and video at your direction
• Produce voiceovers, music and sound design from the briefs you provide
• Provide quality assurance, abuse prevention and safety filtering required by law and by our model providers' terms

We do not send your content to AI models for advertising, behavioural profiling, credit or employment decisioning, or any purpose other than fulfilling the specific request you make. We do not sell your content, and we do not permit model providers to use your content to train their general-purpose AI models under the enterprise and API terms in place with each provider.

Your content is shared only with the parties necessary to deliver the AI Feature you requested:

• AI model providers: the specific provider(s) whose model you or the Easy Zorg agent selected for the job, as listed in the inventory in Section 4. Each provider is bound by contractual terms — including data processing agreements where applicable — requiring protection of your data equal to the protections in our Privacy Policy.
• Model routing and hosting platforms: where a model is accessed through a routing or hosting layer such as OpenRouter or fal.ai, that platform processes your content in order to route and run the job.
• Infrastructure providers: cloud storage and compute providers that host ZorgSocial's own systems, under data processing agreements.
• Legal and safety disclosures: where we are legally required to disclose, or where disclosure is necessary to prevent serious harm or to enforce our terms. We will tell you unless legally prohibited.

We do not sell your personal data. We do not share your content with advertisers, data brokers or any party for their own marketing purposes. We do not use your content to build advertising profiles.

We apply technical and organisational measures designed to protect your content throughout the AI workflow:

• Encryption in transit using TLS for all uploads, model requests and downloads
• Encryption at rest for stored media, prompts and generated outputs
• Access controls: only a limited number of authorised personnel can access production systems, under least-privilege and audit logging
• Provider due diligence: we assess each AI provider's security posture and contractual data-protection commitments before enabling it
• No-training commitments: we contractually require providers not to train their general-purpose models on your content
• Transient processing: providers retain your content only as long as needed to process the request and for limited abuse-monitoring periods defined in their API terms
• Deletion tooling: in-app controls to delete individual jobs, sessions, assets or your entire account

Your uploads, prompts and generated outputs are stored on ZorgSocial's own infrastructure so that you can access your job history, reuse sessions and re-download assets. We keep them for as long as your account is active and as needed to provide the Service.

You may delete individual jobs, sessions or assets at any time, and you may delete your account entirely. When you delete content, it is removed from active systems promptly and from backups within our standard backup rotation period. We may retain limited records where required by law, for tax and accounting purposes, or to resolve disputes — and AI model providers retain content only transiently as described in Section 8.

Subject to applicable law, including the UAE Personal Data Protection Law and, where it applies to you, the GDPR, you have the right to:

• Access the personal data we hold about you, including which AI Features processed your content
• Correct inaccurate personal data
• Delete your personal data and generated content
• Restrict or object to processing, including objecting to third-party AI processing
• Withdraw consent at any time, without affecting prior lawful processing
• Data portability: receive your data in a structured, commonly used, machine-readable format
• Lodge a complaint with your local supervisory authority
• Not be subject to a decision based solely on automated processing that produces legal or similarly significant effects — ZorgSocial does not make such decisions about you

To exercise any of these rights, email legal@zorgsocial.com or use the in-app privacy controls. We respond within 30 days, or sooner where required by law. You will not be charged, and exercising your rights will never degrade your access to the Service.

The AI Features are not directed to children. You must be at least 18 years old, or the age of legal majority in your jurisdiction, to create a ZorgSocial account and to use AI Features. We do not knowingly collect personal data from children or process children's images through AI Features.

If you believe a child's data has been processed through our AI Features, contact legal@zorgsocial.com and we will investigate and delete the data promptly.

ZorgSocial is operated from the United Arab Emirates, and many of the AI model providers we use are located in the United States, the European Union, Singapore and China. When you use an AI Feature, your content may therefore be transferred to and processed in a country other than your own.

We only transfer personal data where a lawful transfer mechanism is in place — such as standard contractual clauses, an adequacy decision, or your explicit consent to the transfer for the specific AI Feature you requested. The location of each provider is shown in the AI Sub-Processors & Providers list, and the provider's own privacy policy explains its transfer practices.

We may update this policy to reflect new AI Features, new model providers, or changes in law. When we make material changes — for example, adding a new category of AI provider or a new use of your content — we will notify you in the app and, where required, ask for your consent again before the change applies to your content.

The "Last Updated" date at the top of this page always reflects the current version. Continued use of an AI Feature after a non-material update constitutes acceptance of the updated policy.

If you have questions about how AI processes your personal data, or want to exercise your rights, contact us:

• Legal: legal@zorgsocial.com
• Product support: support@zorgsocial.com

ZorgSocial is operated by QUANTIMEDX COMPUTER SYSTEMS TRADING L.L.C, registered in Dubai, United Arab Emirates.