Privacy policy
How Zero Agency processes data in Liquid Cybersecurity and its ChatGPT plugin.
Operator and contact
Liquid Cybersecurity is operated by Zero Agency. Contact contact@zeroagency.com for privacy questions or requests concerning your data. This policy covers the platform and the Liquid Cybersecurity plugin; services you connect have their own policies.
Data and purposes
The platform processes account and company information, access permissions, assessment scope, authorizations, recorded security evidence, reports and operational records to provide the service, control access, support customers and investigate misuse. Payment and credit records support billing. Provide only information you are entitled to share; use synthetic data for tests where possible.
Account-based code trial
The free code trial requires a verified account. Submitted source is processed transiently on the server and is not saved in the trial record. We retain a limited result, file name, content hash, project stage and completion time to deliver the preview and enforce the account quota. Trial records follow the retention and deletion terms below. Optional product-email consent is recorded separately and can be withdrawn on the trial page; account registration does not itself opt you into product emails. Do not submit secrets or unnecessary personal records.
What the ChatGPT plugin receives
When you authorize a connection, the plugin can read recorded findings, reduced remediation context from one company assessment and the current service catalog. You may also explicitly authorize submitting bounded JavaScript/TypeScript files or diffs for immediate static analysis. Those tool handlers process source transiently without executing it, retaining it in assessment records or sending it to a separate AI model. Responses contain candidate locations, guidance and content hashes rather than source bodies or matched credential values. Partial coverage or an empty result does not approve production. Repository-review preparation only returns a portal approval link and cost; it does not queue work or spend credits. The plugin does not run live target tests, apply patches or buy services. Returned information enters your ChatGPT conversation and is also governed by the terms and data settings of your OpenAI account. Revoking a Liquid Cybersecurity connection does not remove information already shared with ChatGPT.
Providers and transfers
Liquid Cybersecurity uses Lovable and Supabase for platform infrastructure and authentication, Stripe for payment processing, and configured providers for email and optional AI features. These providers may process data in other countries under the arrangements applicable to each service. Optional AI processing follows the consent and access controls shown in the product. The plugin tools do not call a separate Liquid Cybersecurity AI model.
Local imports and public DNS
Supported tool-export reviews are processed in your browser; their raw files are not uploaded by that review flow. The public domain diagnostic sends the entered domain and your connection IP to Cloudflare’s DNS resolver after you accept the notice. It does not request pages from the submitted website. These flows differ from stored assessments and their evidence.
Retention and deletion
The default retention period for service data is 30 days. Data needed to maintain an active account, fulfill legal obligations, resolve disputes or substantiate transactions may require retention for the applicable purpose. This policy does not state that every record or provider backup is automatically erased on day 30. Contact Zero Agency to request deletion or clarify the period applicable to a record; requests are handled after verifying identity and company authority.
Access, correction and control
You can request access, correction or deletion, ask about sharing, or withdraw consent where it is the basis for processing. Contact contact@zeroagency.com without sending passwords or secret keys. Applicable legal rights and retention exceptions remain in force. Connection revocation, publication withdrawal and account cancellation are separate actions; cancelling billing does not itself remove a published grade or a ChatGPT conversation.
Security and updates
Access to private records depends on account and company permissions. Public grades expose a limited summary only when published through the platform. No security measure eliminates every risk. This policy may be updated as the service changes; the effective version is dated on this page.