Privacy Policy

Zora · updated 25 July 2026

This policy explains what data the Zora service (“the service”, “we”) processes and how we protect it. Zora is available as the Telegram bot @zora_pro_bot and on the web at heyzora.ru. By using the service you agree to this policy. The Russian version of this page is the original; in case of discrepancy, the Russian text prevails.

Who processes the data

The service is operated by the independent developer of Zora. For privacy and data-deletion questions, contact us via @zora_pro_bot or at vit.mzokov@gmail.com · mzokov@yandex.com.

What data we process

Profile. The name you provide at sign-up, your Telegram ID and username.
Calendars. Google Calendar — via Sign in with Google: reading your calendars and events, and creating, moving or cancelling meetings at your request. Yandex Calendar and Mail.ru Calendar — over CalDAV, using the login and app password you enter yourself. All access credentials (tokens, app passwords) are stored encrypted.
VK ID. If you connect VK, the access is used solely to create a VK Call link for your meeting. We do not request your messages, friends or feed.
Email. If you connect a Yandex, Gmail or Mail.ru mailbox — access to your messages over IMAP and sending over SMTP. We read messages to build your morning digest, surface threads waiting on you, and propose removing promotional mail. Access tokens are stored encrypted; we never ask for or store your mailbox password.
Meetings and audio. If you invite Zora to an online meeting or send a voice message, an audio file or a link, we record or receive it, transcribe it and produce a summary, a list of tasks and decisions.
Tasks and notes. Tasks and commitments you create, or that Zora extracts from meetings with your confirmation, along with the related people and companies.
VPN. Technical connection metrics: traffic volume and the number of active connections (by IP), used to show status and to protect your key from leaking. We do not inspect or store the contents of your traffic.
Payments. The fact and amount of voluntary donations via Telegram Stars.

The full list of services Zora connects to, at your choice: Google Calendar, Gmail, Yandex Mail, Yandex Calendar, Mail.ru Mail, Mail.ru Calendar, VK ID. None of them is connected automatically — you connect each one yourself and can disconnect it at any time. If we add a new service, it will appear in this list before it becomes available to users.

How we use the data

Only to provide you with the service: managing your calendar and reminders, recording and transcribing meetings, producing tasks, and providing VPN access. We do not sell your data, do not use it for advertising, and do not share it with third parties except as described below.

Processors (third parties)

To transcribe speech and prepare text we pass audio and text to specialised AI providers that process it on our instruction: Groq, Google (Gemini), Yandex (SpeechKit, YandexGPT), Sber (GigaChat), Anthropic (Claude). Only what a given task requires is sent (transcription, summarisation). We choose providers that do not use data submitted through their APIs to train their models.

Google API — Limited Use. Zora’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google Calendar and Gmail data is used solely to provide you with features inside the service; it is not transferred to third parties (except as required to operate the service or by law), not used for advertising, and not used to train AI models. Humans read this data only with your explicit permission — for example, when you ask us to investigate a specific problem.

How we handle your email

Email is the most sensitive part of the service, so the rules here are stricter than the general ones:

Deletion goes to Trash only, and only on your confirmation. Zora may propose removing bulk mail, but never deletes on its own: you see the list and approve it. The service performs no permanent deletion.
Sending happens only when you tap send. No message leaves automatically; you approve both the recipient and the text.
Models receive the minimum. Subject and sender are usually enough for triage — message bodies are sent to an AI provider only when the task cannot be done without them.
Message content is data, not instructions. The service does not act on directions found inside emails.

Storage and protection

Data is stored on our servers. Credentials for access to your calendars and mailboxes, and encryption keys, are stored encrypted. We take reasonable technical measures to protect information against unauthorised access.

Deleting your data

You can delete your account and all associated data at any time by writing to us via @zora_pro_bot. You can also disconnect any connected calendar or mailbox in the bot’s settings — the corresponding tokens are deleted on disconnection. After account deletion, data is erased irreversibly.

Changes

We may update this policy. The current version is always available at this address; the date of the last update is shown at the top.

Contact

For any questions about your data: @zora_pro_bot · vit.mzokov@gmail.com · mzokov@yandex.com