Privacy Policy
The Zera (thezera.net) collects little data: what the tools need to work, and what we need to run the service and prevent abuse.
Without signing in
Every tool works without an account. What you enter, such as Team Split's face contacts, stays in your browser (localStorage) and is not sent to our server. Camera images are processed on your device, unless you send a recognition report, which includes the photo (see below). Voice Clone is the exception: it sends your text and sample recording to our server to synthesize speech; when you are not signed in, the server discards the sample recording and the generated audio after processing, but the text you had read is recorded in the activity log (see below). Voice Clone's history of readings (text and audio) for playing back is kept only in your browser, for up to 30 days, and you can delete it at any time.
Karaoke
Your search terms are sent to our server, which asks YouTube and caches the results for up to 7 days (without your IP or account). Videos play in YouTube's embedded player, so YouTube (Google) receives access data under its own policy. A room (the name you choose, the queue, who holds the mic) lives only in server memory and is deleted one hour after everyone has left. The shared "Often picked" list holds only songs and how often they were picked, not who picked them. Singing goes directly between the browsers in the room (WebRTC), never through our server, and is not recorded; your microphone turns on only when you press Turn on mic.
Signing in with Google
We receive only your Google account ID, email, display name and profile picture (openid, email, profile scopes). We never read your Gmail, Drive, contacts or any other Google data, and never post on your behalf.
Data saved to your account
When signed in, data you choose to save in a tool (currently: Team Split contacts, i.e. names and small face images with numeric face embeddings; Voice Clone voices, i.e. a voice name and its sample recording; Award Tracker's awards book, i.e. award catalogue, staff names and departments, grants, rewards and notes; Hiring Desk's hiring book, i.e. roles, criteria and the candidate details AI read from CVs: name, email, phone, location, assessment, survey answers, notes) is stored on our server so you can use it across devices. Hiring Desk's original CV files and AI keys are never synced; they stay in your browser. Only your account can access it, apart from the administrator access described below.
Activity log and administration
The server keeps an activity log: time, IP address, account (if signed in) and what you do in the tools, including sign-in, sign-out, tool data sync (Team Split contacts, Award Tracker book, Hiring Desk book; only the number of rows is logged, not their content), sending recognition reports, adding, renaming or deleting voices, and every Voice Clone reading (the text read, the voice used, its length). The log is kept for 90 days and then deleted automatically, and is deleted with your account if you delete it. When signed in, the server also stores the last time you used the site (open pages check in with the server every few minutes), so the administrator can see which accounts are active; only the latest timestamp is kept, and it is deleted with your account. The web server also keeps access logs (IP, page opened, browser) for visit statistics. The Zera's administrator can view this log and, to handle abuse, technical problems or requests from competent authorities, can view data saved to accounts (Team Split contacts, Award Tracker book, Hiring Desk book, voice sample recordings). Every time the administrator views or changes your data it is recorded in an internal audit log. The administrator may suspend accounts, delete voices or data, and block IP addresses that break the Terms of Service.
Ideas and feedback you send
Anyone can send an idea from the home page, or feedback and bug reports with the feedback button in each tool, without signing in or leaving contact details. The server stores its text, the feedback type, any contact details you enter (if you are signed in and leave it empty, your account email), your account (if signed in), the time, your IP address, browser (User-Agent), browser language, time zone, screen size, the page or tool you sent it from and the page that referred you. Only the administrator can read it, to reply to you, fix and improve the tools, build new tools and block spam. Feedback is kept until the administrator deletes it, or until you delete your account (for feedback sent while signed in). To remove feedback sent without signing in, email us.
Recognition reports (Team Split)
When Team Split boxes the wrong thing, misses someone or shows the wrong name, you can press "Report" to tell us. A report contains the error types you pick, your note, the positions of the face boxes the tool detected and what you corrected, the names shown on the boxes (if any), the number of groups, the time, your IP address, browser (User-Agent) and account (if signed in). Every report includes the photo you are looking at (downscaled), so we can see where the tool went wrong. It may contain faces (biometric data), so only send a report when the people in it agree; the report dialog says so before you send. Only the administrator can see reports, to fix recognition errors, and every time a photo is viewed it is recorded in the administration log. Reports are deleted automatically after 90 days, and with your account if you delete it; to remove one sooner, email us.
Hiring Desk and AI providers
Hiring Desk uses an AI key you enter yourself (Anthropic, OpenAI, Google or a compatible service). The key is stored only in your browser. When screening, the CV content (text or page images) and the role description are sent straight from your browser to the AI provider you chose, under that provider's data policy. CloudGO's AI gateway (ckit) does not accept calls from browsers, so it goes through the thezera.net server as a relay: only when signed in, the server passes the request and the result through without storing CV content or keys, counting only the number of calls per account to prevent abuse. CVs contain candidates' personal data; you, as the hiring organisation, are responsible for having candidates' consent under Decree 13/2023. AI scores and comments can be wrong and are for reference only.
Cookies
We use one sign-in session cookie (tz_session) and a short-lived cookie during sign-in. No advertising or third-party tracking cookies.
Sharing
We do not sell, rent or share your data with third parties, and do not use it for advertising. Data received from Google APIs is used in accordance with the Google API Services User Data Policy, including the Limited Use requirements.
Storage and security
Data is stored on a server in Vietnam operated by The Zera and transferred over HTTPS. Sessions are stored only as hashes.
Deleting your data
You can delete your account and all its data at any time on the Account page (/en/account/). Deletion is immediate. You can also revoke The Zera's access at myaccount.google.com/permissions.
Contact
For any privacy question, email zerazyrus@gmail.com.
Last updated: 29/10/2026