Privacy Policy — Enzz Agent
Status: this product is in development and not yet open to the public. This policy describes how it is designed and what is built so far, and will be confirmed before launch.
Effective date: to be set at launch
This Privacy Policy explains what information Enzz Agent collects, why, who it is shared with, and the choices you have. Enzz Agent is operated by Enzz Technologies Limited ("Enzz", "we", "us"), Nakuru, Kenya.
- Service: Enzz Agent, on the web and in a mobile app
- Website: https://enzz.co.ke
- Contact: support@enzz.co.ke
1. What Enzz Agent is
Enzz Agent lets you hand work to AI agents: describe a task in plain words, add files, and get the result back to review. It can also work through to-dos in a project, handle incoming email from senders you choose, and run work on a schedule. Nothing an agent produces is applied, sent or closed until you approve it.
This policy covers people who hold an Enzz Agent account. The service is for adults using it for their own or their organisation's work.
2. Information we collect
2.1 Information you give us
| Information | Examples | When |
|---|---|---|
| Account | Email address, password, the name of your account | Registration |
| Your work | Projects, to-dos, the instructions and messages you write, files you upload | As you use the service |
| Results | What agents produce: replies, changed files awaiting your review, documents | When a run finishes |
| Connected mailboxes | The mail server address, username and password of a mailbox you connect, the list of senders you allow, and the emails from those senders | Only if you connect a mailbox |
| Your own AI keys | An API key for an AI provider, if you choose to use your own | Only if you add one |
| Automations | What to run and when, and your timezone | When you set one up |
| Payments | The phone number you pay from, the amount, and the M-Pesa receipt number | When you buy a plan or credit |
Passwords are stored only in scrambled (hashed) form. Mailbox passwords and AI keys are encrypted before they are stored, are never shown again after you save them (only a label and the last four characters), and can be replaced or removed at any time.
2.2 Collected automatically
| Information | Purpose |
|---|---|
| Usage records | For each AI call: which provider, how much was used, and what it cost, so you are charged correctly and can see your usage |
| Balance history | Every top-up, hold, charge and refund on your account |
| Run history | What each agent run did, step by step |
| Sign-in records | Sessions, failed sign-in attempts, and emailed one-time links |
| Audit log | Sign-ins, key changes, payments and approved results |
| IP address and basic request data | Security and delivering the service |
The service does not include advertising or third-party analytics trackers.
3. How we use information
- to run the tasks you ask for and show you the results;
- to keep your work separate from every other customer's;
- to check your plan and balance before a run, meter usage, and charge you;
- to take in email from the senders you listed and turn each into a to-do;
- to run automations at the times you set;
- to send account emails: confirming your address, password reset, and "ready for review";
- to provide support, fix problems, and prevent fraud or misuse;
- to comply with legal obligations.
We do not sell your information, use it for advertising, or look at your content except to provide the service, to investigate a problem you report, or where the law requires.
4. Artificial intelligence and your content
To do a task, we send the relevant instructions, files and conversation to an AI model provider. This is the service you are asking for.
- We do not use your content to train AI models, and we use providers on terms under which they do not train on it either.
- AI calls are made by our servers. If you use your own key, it is used only for your calls and never leaves our servers.
- An agent can be wrong. Its result waits for your review, and nothing leaves the service, such as an email reply, without you approving that specific thing.
- Text inside an email, a file or a web page is treated as content, never as instructions the agent must obey. A run started by an incoming email has no internet access and no ability to send, pay or delete.
5. Where your work runs
Each run takes place in its own temporary, isolated computer (a sandbox) that is created for that run and destroyed when it ends. A sandbox holds only the files for that run. It never holds passwords, keys, or another customer's data, and by default it has no internet access.
6. Who we share information with
| Recipient | What is shared | Purpose |
|---|---|---|
| AI model providers (currently Anthropic and Groq) | The instructions, files and conversation for a task | Performing the task |
| Sandbox provider (Vercel) | The files for one run, for the length of that run | Running the agent's work in isolation |
| Railway | The service and its database | Hosting |
| Safaricom (M-Pesa) | Your phone number and the amount | Taking payment on the web. We never see your M-Pesa PIN |
| Google Play and RevenueCat | Purchase and subscription information | Payments in the Android app, when available |
| Brevo | Your email address and the content of account emails | Sending account emails |
| Your mail provider | A read-only connection using the details you gave | Fetching email, only if you connect a mailbox |
We also share information when the law requires it, or in a business transfer, in which case this policy continues to apply.
7. Other people's information in your content
Files and emails you bring into Enzz Agent may contain information about other people, such as your customers or the senders of emails. You are responsible for having the right to process it. We process it only on your instructions, to provide the service to you.
A connected mailbox is opened read-only. Only email from senders you have listed is taken in; everything else in the mailbox is left untouched and unread.
8. Security
- Every piece of data belongs to one account, and that separation is enforced in the application and again in the database.
- Data is encrypted in transit. Secrets are encrypted at rest with a key held outside the database.
- Sign-in is blocked for a time after repeated wrong passwords. Resetting your password signs you out everywhere.
- Downloads are always delivered as files to save, never opened in the browser.
No system is completely secure. Use a strong password that you use nowhere else.
9. How long we keep information
We keep your account and your work while your account is open. You can delete projects, files and to-dos at any time. Usage, balance and payment records are kept for as long as financial and tax law requires. How long files are kept after an account stops paying will be published here before launch.
10. Your choices and rights
- See and export your work by downloading your files and results.
- Delete projects, files, mailboxes, keys and automations in the service.
- Disconnect a mailbox or remove an AI key at any time; it is deleted from our systems.
- Close your account by emailing support@enzz.co.ke from your account's email address. We delete your account and content within 30 days, apart from records we must keep by law.
Under the Kenya Data Protection Act, 2019 you also have the right to be informed, to access your data, to object to or restrict processing, to have inaccurate data corrected, to have data erased, and to receive your data in a portable format. Contact support@enzz.co.ke; we respond within 30 days. You may also complain to the Office of the Data Protection Commissioner of Kenya (https://www.odpc.go.ke).
11. International transfers
Our hosting, sandbox, email and AI providers process data outside Kenya. Where this happens we rely on safeguards permitted under the Kenya Data Protection Act, 2019.
12. Children
Enzz Agent is not for anyone under 18, and we do not knowingly collect information from children.
13. Changes to this policy
We may update this policy. We will change the effective date and, for significant changes, notify you in the service or by email.
14. Contact us
Enzz Technologies Limited, Nakuru, Kenya Email: support@enzz.co.ke Website: https://enzz.co.ke