Privacy policy

Version: 24 October 2026. This policy describes Sentiora Zeta Connect for Windows.

Who operates Sentiora Zeta Connect

Sentiora Zeta Connect is a Sentiora product operated under the Sentiora brand by an independent developer based in Romania. Privacy and support contact: sentioradev@gmail.com. Sentiora is the product brand; it is not represented here as a registered company or PFA.

Data used by the application

Sentiora Zeta Connect uses the identities and email addresses of accounts you connect; cloud file names, IDs, folder relationships, paths, sizes, modification dates and storage quotas; email headers, labels, recipients, snippets and message identifiers; and your visibility rules, favorites, drafts and preferences.

OAuth access and refresh tokens, or app passwords for supported IMAP/SMTP connections, enable the actions you authorize. Google passwords are entered on Google's own page, not into Sentiora Zeta Connect. Message bodies and attachments are read for opening messages, downloading or saving attachments, sending email, and rules you enable. IMAP message reading can fetch attachments included in that message. Cloud content is read for preview, playback, download, upload, copying, backup and other tasks you request, including scheduled tasks.

Purpose and Google permissions

Google Drive access enables browsing and managing existing files across your connected accounts. Gmail access enables the inbox, search, composing, sending and label management. The broad Drive and Gmail permissions are used for these visible functions, not unrelated purposes. Account identity information identifies the account and its display label.

Sentiora Zeta Connect's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements. Google data is not sold or used for advertising, credit decisions or training general-purpose AI models. Optional AI requests described below are for the specific task you approve; their availability is subject to applicable provider terms and Google requirements.

Where data stays

The desktop backend runs on your computer and listens on the loopback address. Account tokens, the metadata database, message cache and transfer staging are protected locally; Windows DPAPI binds protected data to your Windows user. This does not protect an unlocked computer from someone already controlling your Windows session.

Cloud files remain at the original provider. Copies you deliberately download, receive, export or save into another service are stored at your selected destination and may be ordinary, unencrypted files. Those copies follow the protections of that folder or service. Organization backups exported by Sentiora Zeta Connect are encrypted with your chosen backup password.

Sharing and network services

Connections contact the providers and servers you choose. Sending an email shares its content and attachments with the selected recipients. Uploads, shared links, copies and backups transfer data to destinations you select; scheduled tasks and active rules may perform those actions later. Review permissions and recipients before enabling them.

Public Sentiora transfers by code are currently disabled. When enabled, their signaling service is designed to exchange sealed connection messages and room identifiers; the payload travels directly between peers through encrypted WebRTC, with no server relay. STUN services help discover connection addresses. This feature will be described in the published policy before general availability.

The operator does not receive your inbox or cloud contents merely by administering the OAuth project. The current app includes no advertising analytics or automatic upload of your messages or diagnostic logs to the operator.

Optional AI assistance

AI features require a provider and model you configure with your own API key. Before a request, Sentiora Zeta Connect displays the content and destination for confirmation. Email assistance can send the selected subject and body, your edited text and instructions to OpenAI, Google Gemini or Anthropic Claude. It does not automatically add attachments or other messages. File organization can send your instructions, source and destination account names and email addresses, provider names, destination folder paths and reported capacity. The automatic organization request does not include the list of file names or file contents; your own instructions may contain private information. Review and remove anything you do not want to share.

AI requests are not sent merely by opening a page or synchronizing an account. Provider data practices, retention and API charges apply to requests you approve. Do not use Google API data for training general-purpose AI models. Each customer must use their own API account and review its terms, retention and data-use controls before approving external processing. Do not enable general-model training or feedback sharing for Google API data. The application does not supply a shared AI key or promise zero retention; a user's confirmation alone does not establish compliance. A proposed organization plan is checked locally and requires a separate approval before file operations. An AI draft is not sent as an email automatically.

Email organization can send your instructions, account names and email addresses, folder names and folder categories to the selected AI provider. Message matching and selection occur locally. Message bodies, attachments, account passwords, Google OAuth tokens and unsubscribe addresses are not automatically included in that organization request. Review the displayed request before approving it. Account and folder metadata can itself contain personal information.

Account vault and PDF exports

The optional local vault can store credentials you enter manually. OAuth tokens are not exposed as account passwords. Revealing saved passwords or including them in a PDF requires local authentication and an explicit action. A PDF containing passwords requires a separate PDF password and uses AES-256 encryption. The PDF password is not saved in Sentiora Zeta Connect. Anyone able to decrypt the PDF can read its included passwords; protect the file and password separately and do not send them to support. Vault passwords and AI API keys are excluded from general organization backups.

Retention, disconnection and removal

Local metadata, cached messages, drafts and rules remain in your installation while you retain them. Disconnecting a provider removes its active local authorization but retains cached metadata and account identity for reconnection. Hiding an item affects visibility and does not erase it. Revoke authorization in the provider's account settings to stop future Google access.

For complete local removal, close the application and remove the installation's local data after preserving any files or backups you need. Copies downloaded into other folders or services are separate and must be managed there. A deliberate delete operation in a connected cloud changes the original provider; Sentiora Zeta Connect requires confirmation for that operation. Provider retention and trash policies apply.

Support and your rights

If you contact support, the operator receives the address, correspondence and attachments you choose to send. Do not send passwords, OAuth tokens or private messages unnecessarily. Support correspondence is used to answer your request and investigate the issue, based on legitimate interests in providing support or steps requested by you. It is retained during resolution and for up to twelve months afterwards, unless a legal obligation requires longer retention. Providing information to support is optional; without enough details, the operator may be unable to investigate your particular issue.

You may request access, correction, deletion, restriction or portability of personal data held by the operator, and object where applicable, by emailing the contact above. You may withdraw an authorization through the provider. Where applicable, you may complain to Romania's data protection authority, ANSPDCP. The operator cannot erase data held solely in your local installation remotely; support can explain how you control it.

Service providers and international processing

These pages are prepared for delivery through Cloudflare Pages. Cloudflare may process request addresses and security logs to deliver and protect the site; see Cloudflare's privacy policy. Support email uses Gmail. Your chosen cloud, email and AI providers process the requests you authorize under their respective terms and privacy notices, which may involve processing outside your country. Review those providers' applicable transfer safeguards and data controls before connecting accounts or sending content. The local Windows backend is not a Sentiora-hosted storage service.

Website and changes

These dedicated Sentiora Zeta Connect pages contain no advertising scripts, visit counter, account forms or tracking cookies. Changes to data access or sharing will be disclosed before the new use, with additional authorization when required. Contact the operator with questions about this policy. Sentiora Zeta Connect does not use your data to make automated decisions about legal or similarly significant matters.