Who this covers
This notice covers the public zypl.Foundation site and its demo cabinet, run by zypl.ai, Unit 906, Level 09, Innovation One, Dubai International Financial Centre, Dubai, United Arab Emirates. It describes what the site and the demo collect as they work today. It is a draft for legal review and is not yet in force.
What we collect
- When you request a Day-Zero Readout: your name, company and work email; your role, if you give it; the market; what you are launching; any message; and your browser's user-agent string.
- When you sign in: the account's email address, the one-time links and codes sent to it to sign in, and the session that signing in creates. If you start without registering, an account with no email, kept in your browser. If you sign in with Google, the details Google shares for sign-in, such as the email address.
- When you enter the demo: a name, a company and a work email, asked once per account, and your browser's user-agent string.
- When you run a labelled file: the file you upload; the dataset's column names and types, when the run belongs to a project; and the run's settings, metrics, predictions, timings and cost.
- When you run Day-Zero on a file: the file you upload; the questionnaire about the lender and the product; the column descriptions you write, which the demo remembers for your next file; your review decisions and their reasons; and the run's scorecard, predictions and reasons.
What we use it for
- Readout requests are used to arrange the Readout. No automated mailings, no newsletter.
- The demo's short form is used to follow up on the evaluation and for nothing else. No mailing list is fed from it.
- Labelled runs are used to score the file and to show you the results, in your run history and your projects.
- Day-Zero runs are used to write the scorecard for your file and to show you its predictions, in the cabinet and in the Excel file you download.
Where it is kept
- Readout requests, the demo's short form, accounts, projects and runs are kept in the demo's database and sign-in service.
- Files uploaded to the demo are kept in a private folder of your account, with no public address: the demo hands them out only to you, through links that expire within the hour. Upload public or synthetic data all the same, never a borrower file: the demo is an evaluation environment.
- A labelled run is scored by a hosted GPU worker, which receives the rows of that run.
- A Day-Zero run is computed by a hosted worker, which reads your file through such a link. With the consent you give on the form, it sends the model provider (Google Gemini; OpenRouter when Gemini does not answer) the column names and descriptions, the lines about the lender, and statistics and eight rows of the file; the outcome column, the id, the columns you leave out and the expected default rate are not sent. The run's scorecard is stored encrypted.
- The walkthrough of a Day-Zero card on public lending books computes in your browser. What you change on its screens is not sent anywhere.
Cookies
The site sets the cookies it needs to work, and no others. There are no analytics or advertising cookies.
| Cookie | What it does | How long |
|---|---|---|
| Sign-in session | Keeps you signed in to the demo | Until you sign out or the session ends |
zf_intake | Remembers that this account filled in the short form | One year, or until you sign out |
locale | Remembers the language you chose | One year |
| Preferences | Theme, sidebar and layout | Seven days |
zf_cookie_notice (local storage) | Remembers that you closed the cookie notice | Until you clear the site's data |
Your choices
You can ask what we hold about you, ask for it to be corrected or deleted, or withdraw a Readout request. Write to info@zypl.ai and say that the request is about your data.
Changes
This notice will change when the site does, and before it comes into force. The date at the top of the page is the date of this revision.