Privacy Policy

This Privacy Policy explains how TINCAN, a company based in Delaware, United States, collects, uses, stores, shares, and protects personal data in connection with Zyllai.

This Policy applies to the Zyllai website, user accounts, published catalog, billing flows, support communications, and product features that generate or deliver learning content.

We collect information you provide directly to us, such as your name, email address, password-related credentials, billing details, academic eligibility information for student plans, support messages, and any prompts or learning requests you submit.

We collect account and workspace information generated through your use of the service, including generated courses, titles, summaries, course settings, module structures, slides, scripts, narration assets, video assets, quizzes, progress state, usage events, and account administration history.

We collect technical and operational data such as IP-derived metadata, session identifiers, browser and device information, authentication events, billing events, error logs, security events, and product telemetry needed to operate and improve the service.

We use personal data to provide, maintain, secure, and improve Zyllai, including creating accounts, authenticating users, processing billing, assigning plans and credits, generating learning content, making the catalog available, and supporting customer requests.

We also use personal data to send service communications such as account verification emails, password reset emails, sign-in notifications, course completion notifications, billing-related notices, and important platform updates.

Where permitted by law, we may use data in aggregated or de-identified form for analytics, reliability engineering, product planning, fraud prevention, abuse detection, cost monitoring, and operational reporting.

Depending on your location and applicable law, we rely on one or more of the following legal bases: performance of a contract, compliance with legal obligations, our legitimate interests in operating and securing the service, and consent where consent is required.

Our legitimate interests include service administration, account protection, fraud prevention, abuse mitigation, debugging, analytics, product quality improvement, billing operations, and responding to legal or regulatory requests.

When you use Zyllai to generate content, prompts and associated course metadata may be processed by our third-party AI and media generation providers to create outputs such as curriculum structures, scripts, slides, audio, video, and quizzes.

Generated content and intermediate assets may be stored by us and linked to your account so that courses remain accessible in your workspace, can be resumed later, and can support billing, support, or moderation workflows.

You should not submit personal data, confidential information, or sensitive regulated information to the service unless you are comfortable with that information being processed by us and our providers for the purpose of delivering the product.

Payments and subscription management are handled through third-party payment processors such as Stripe. We receive billing metadata necessary to manage subscriptions, customer records, billing status, plan entitlements, and invoicing history, but we do not store full payment card numbers on our own systems.

We may store customer IDs, subscription IDs, product or price references, billing period dates, currency, invoice summaries, credit allocations, and related account-level commercial metadata.

We use cookies and similar technologies to maintain authenticated sessions, keep users signed in on the same browser, secure the service, remember product preferences such as language or currency, and support the reliable functioning of the site.

Some features may not function properly if session or security cookies are blocked.

We may share personal data with service providers that help us operate Zyllai, including infrastructure hosts, storage providers, payment processors, analytics or monitoring providers, email delivery services, and AI or media generation providers.

We may disclose information where required by law, regulation, legal process, lawful governmental request, or where necessary to enforce our Terms, protect users, investigate fraud or abuse, or defend legal claims.

We may also share information in connection with a merger, acquisition, financing, reorganization, sale of assets, or similar corporate transaction, subject to applicable confidentiality and legal constraints.

Published catalog entries may be made visible publicly, including to visitors who are not signed in. Public catalog visibility is limited to information intentionally designated for publication, such as course title, summary, metadata, and course structure.

Private account workspaces, private generated assets, billing details, and account-only operational data are not intended to be exposed publicly by default.

We retain personal data for as long as reasonably necessary to provide the service, maintain account continuity, comply with legal obligations, resolve disputes, enforce agreements, protect the service, and support legitimate business operations.

Retention periods may vary depending on the type of data, whether your account remains active, whether billing or dispute records must be preserved, and whether technical logs are needed for security, abuse prevention, or debugging.

Zyllai is operated by TINCAN in the United States and may rely on providers in multiple jurisdictions. Your information may therefore be processed or stored outside your country of residence, including in the United States.

Where required by law, we take reasonable steps intended to ensure appropriate safeguards for cross-border data transfers.

We use administrative, technical, and organizational measures designed to protect personal data against unauthorized access, loss, misuse, disclosure, or alteration. These measures include account authentication controls, session management, provider-level infrastructure protections, and operational logging.

No system can be guaranteed perfectly secure, and we cannot guarantee absolute security.

Depending on your jurisdiction, you may have rights to access, correct, delete, restrict, object to, or port certain personal data, and to withdraw consent where processing is based on consent.

You may also have the right to request account deletion, to update your email address, to change your password, and to contact us regarding the processing of your personal data.

We may need to verify your identity before fulfilling certain requests and may decline requests where permitted by law, including where requests are manifestly unfounded, technically infeasible, or conflict with legal obligations.

Zyllai is not directed to children under the age at which parental consent is required under applicable law. If you believe a child has provided personal data to us in violation of applicable law, contact us and we will review the request.

We may update this Privacy Policy from time to time to reflect product changes, legal obligations, or operational developments. The revised version will be posted on this page with a new effective date.

Your continued use of Zyllai after an updated Privacy Policy becomes effective is subject to that updated version.

For privacy questions, account deletion requests, or data-related inquiries, contact us at contact@zyllai.com.

Controller / operator: TINCAN, Delaware, United States.