Legal

Privacy Policy

Effective July 31, 2026

This policy covers both this website (zeno.plamen-it.com) and the ZENO desktop application. ZENO is operated by Plamen IT (plamen-it.com). Questions about this policy can be sent to info@plamen-it.com.

1. Who we are

ZENO is free software developed and operated by Plamen IT. This policy explains what data the website and the desktop app process, why, and what rights you have over it.

2. The desktop application

2.1 What stays on your machine

ZENO is local-first. Everything you create — vault entries, boards, cards, notes, calendar events, transactions, links and canvases — is written to a single encrypted SQLite database in your operating system's per-user application data directory. We have no server that receives it, and no ability to read it.

The database is encrypted at rest with a key held in your operating system's keychain (DPAPI on Windows, Keychain on macOS, libsecret on Linux). Vault entries are additionally protected by a master password that only you know. We cannot recover that password, and we cannot decrypt your data.

2.2 What the app does not collect

The desktop app sends no analytics, no telemetry, no crash reports and no usage statistics. There is no account to create and no identifier assigned to you. The application window is prevented at the process level from making network requests of its own.

2.3 Connections the app makes, and only when you ask

• Google Drive backup — only if you connect it. You supply your own Google OAuth credentials, the authorisation happens between you and Google, and the resulting token is stored encrypted on your machine. Snapshots are encrypted before upload; Google stores ciphertext.
• SFTP backup — only if you configure it. Snapshots are encrypted before transfer and sent to a server you specify and control.
• Favicons — when you save a link, the app may fetch that site's icon from that site. This reveals your request to that website, as visiting it would.
• Exchange rates — if you use the finance module with more than one currency, the app fetches public reference rates. No account data is sent.
• Opening a link — launching a bookmark hands the URL to your browser, exactly as clicking it anywhere else would.

Each of these is off until you turn it on, except favicon fetching and exchange rates, which are incidental to using those features.

3. This website

The website is a set of static pages. It sets no cookies, runs no advertising, and does not build a profile of you.

The site is hosted on Vercel and installers are served from Cloudflare R2. As with any web host, those providers process standard server request data (IP address, user agent, requested URL, timestamp) in order to deliver the page and the file. We do not combine that with anything else or use it to identify you.

The download buttons detect your operating system in your browser, purely to highlight the right installer. That detection never leaves your device.

4. Legal basis and retention

We hold no personal data about users of the desktop application, so there is nothing for us to retain, export or delete on your behalf. Server logs held by our hosting providers are retained according to their own standard periods.

5. Your rights

Under the GDPR and similar regimes you have rights of access, rectification, erasure, restriction, portability and objection. Because we do not hold personal data about you, most of these have no data to act on. Your ZENO data is in your possession: you can export it, back it up, or delete it by removing the application's data directory. If you believe we hold data about you, write to info@plamen-it.com.

6. Children

ZENO is not directed at children under 13, and we do not knowingly collect data from them.

7. Changes to this policy

If this policy changes materially, the effective date above will change and the updated version will be published on this page.