All legal documents

Privacy Policy

Last updated: March 16, 2026

1. Introduction

ZeroSuite, Inc., operating sh0, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

2. Information We Collect

2.1 Information You Provide

  • Account Information: Email, password, name, organization
  • Deployment Data: Git repository URLs, environment variables, configuration files
  • Payment Information: Billing address, payment method (processed by Stripe)
  • Support Requests: Communications with our support team

2.2 Automatically Collected Information

  • Device information (IP address, browser, OS)
  • Usage analytics (features used, interaction patterns)
  • Container metrics (CPU, memory, network usage)
  • Cookies and similar tracking technologies

3. How We Use Your Information

  • Provide and improve the sh0 platform
  • Process payments and billing
  • Communicate product updates and support
  • Analyze platform usage and trends
  • Comply with legal obligations
  • Improve AI features (anonymized data only, with consent)

4. AI Data Processing

sh0 uses AI features powered by OpenRouter for code analysis and build diagnostics:

  • Code snippets may be sent to AI providers for analysis
  • AI processing is optional and can be disabled
  • Self-hosted users can provide their own API keys
  • No code is stored by AI providers beyond the processing window
  • You can request data deletion anytime

5. Data Retention

  • Active deployments: Data retained while deployment is active
  • Deployment logs: Retained for 30 days by default (configurable)
  • Backup data: Retained per your backup policy configuration
  • Account data: Retained for account lifetime
  • Account deletion: Full data removal within 30 days

6. Data Security

We implement industry-standard security measures:

  • AES-256-GCM encryption for secrets and sensitive data
  • TLS 1.3 encryption for all data in transit
  • Argon2 password hashing
  • Regular security audits and penetration testing
  • Strict access controls and authentication
  • GDPR and CCPA compliance

7. Third-Party Sharing

We share data only when necessary:

  • OpenRouter: AI processing (code analysis, build diagnostics)
  • Stripe: Payment processing (PCI compliant)
  • Infrastructure Providers: Contabo, Hetzner (for sh0 Cloud)
  • Law Enforcement: Only with valid legal orders

8. Your Privacy Rights

  • Access your data anytime
  • Request data correction or deletion
  • Opt-out of marketing communications
  • Download your data in portable format
  • Request we restrict processing

9. EU Users (GDPR)

If you are in the EU, you have additional rights under GDPR:

  • Right to access, rectification, and erasure
  • Right to restrict processing
  • Right to data portability
  • Right to object to processing

10. California Users (CCPA)

If you are in California, you have rights under CCPA:

  • Right to know what data is collected
  • Right to delete your data
  • Right to opt-out of data sales
  • Right to non-discrimination for exercising rights

11. Self-Hosted Deployments

For self-hosted sh0 installations:

  • All data remains on your own servers
  • No telemetry is sent to sh0 without explicit opt-in
  • AI features can be disabled entirely or use your own API keys
  • License validation requires periodic connectivity to sh0.dev

12. Contact Us

For privacy questions or to exercise your rights: