Zehan
Zehan.pk
Open Chat
Privacy & Security

Privacy Policy

Last Updated: September 15, 2026

Our Core Promise: Zero AI Training On Your Private Chats

Zehan.pk does NOT sell, share, or use your personal prompts, code, project files, or AI responses to train public machine learning models. Your business logic, student assignments, and private correspondence remain exclusively yours.

1. Information We Collect

We collect only the minimum data required to provide a reliable and secure AI experience:

  • Account & Auth Data: Your email address, used solely to send passwordless Magic Links via Supabase Auth.
  • Payment & Top-up Verification: Transaction IDs (TRX ID), sender phone/account numbers, and payment rail names (JazzCash, EasyPaisa, Raast) provided during manual credit purchases.
  • Conversation History: The messages, system instructions, and uploaded document text you choose to store in your personal chat workspace.
  • Technical Telemetry: Anonymized latency, token consumption figures, and error codes necessary for ledger balance settlement and platform health.

2. How Your Data Is Stored & Protected

We adhere to strict data segregation and encryption standards:

  • PostgreSQL Row Level Security (RLS): All conversations, ledger records, and projects are strictly isolated at the database layer. No user can read or modify another user's records.
  • Model Identity Redaction: Upstream provider keys and internal model routing logic are secured on the server side and never sent to the client browser.
  • Encrypted in Transit: All web traffic and streaming SSE connections are encrypted using TLS 1.3 / HTTPS.

3. Live Web Retrieval & Scraper Safety

When you trigger live web searches or paste external URLs:

  • Searches are performed via open search protocols (Google News RSS, DuckDuckGo Lite, Wikipedia Open API).
  • We enforce strict Server-Side Request Forgery (SSRF) filters that block private IP ranges, local networks, and metadata endpoints.
  • Your personal identity or account email is never transmitted to the search engines or scraped websites.

4. Data Retention & 1-Click Deletion

You maintain full control over your conversation history:

  • Delete Conversations: Clicking the delete action on any chat instantly removes the conversation and all associated message turns from our database.
  • Delete Projects: Deleting a custom project workspace cascades and cleans up all associated context files.
  • Financial Audit Records: Append-only ledger transaction rows (credits reserved/settled) are retained for legal accounting and dispute resolution.

5. Cookies & Local Tracking

Zehan.pk does NOT use third-party marketing tracking pixels (such as Facebook Pixel or ad trackers). We only use essential, first-party SameSite session cookies required for authentication and theme preferences (light/dark mode).

6. Contact Our Privacy Team

If you have questions about your data privacy or wish to request an account data purge, please contact us via our contact form or WhatsApp support.