Legal
Privacy Policy
Last updated: 12 May 2026
This policy explains how CMI MANAGEMENT (ACT) PTY LTD (ABN 63 658 796 215), trading as “Zero BS AI” (“we”, “us”, “our”), handles personal information in connection with the Zero BS AI website and the Zero BS AI app and Sandbox at zerobsai.com (the “Service”). We handle personal information in accordance with the Australian Privacy Principles under the Privacy Act 1988 (Cth).
1. Who we are
The data controller is CMI MANAGEMENT (ACT) PTY LTD (ABN 63 658 796 215), trading as Zero BS AI, Australian Capital Territory, Australia. You can contact us about privacy at privacy@zerobsai.com.
2. Information we collect
Account information. When you create an account we collect your name, email address and authentication details (passwords are stored hashed). If you sign in with Google, we receive your Google account’s name, email address and basic profile information.
Google Workspace data. If you connect a Google account to the Sandbox, you authorise the Service to access data in that account through Google APIs. Depending on the permissions you grant, this can include the contents of Gmail messages and settings; calendars and events; Drive files and their contents and activity, including Docs, Sheets and Slides; contacts and (in Workspace organisations) the directory; Google Chat messages, spaces and memberships; Classroom courses, rosters, coursework, announcements and topics; Tasks; Forms and form responses; Google Meet spaces; Apps Script projects and deployments; and read-only Analytics, Search Console and YouTube reporting data. Google shows you the full list of permissions before you authorise the connection. See our Sandbox page for a per-permission explanation of why each is requested.
Usage and technical data. We collect standard log and operational data — such as IP address, browser type, pages viewed and timestamps — to run, secure and improve the Service.
3. How we use information
We use account and usage information to provide, secure, support and improve the Service. We use Google Workspace data solely to perform the actions you ask the AI assistant to perform — for example reading and replying to email, scheduling events, or drafting and editing documents — and to display the results back to you. We do not use it for advertising, we do not build advertising or marketing profiles from it, and we do not sell it.
4. Google API Services — Limited Use
Zero BS AI’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:
- we only use access to data obtained through Google APIs to provide or improve user-facing features that are prominent in the Service’s requesting interface;
- we only transfer this data to others if doing so is necessary to provide or improve those features, to comply with applicable law, or as part of a merger, acquisition or sale of assets with notice to users;
- we do not use this data for serving advertisements;
- we do not allow humans to read this data unless we have your affirmative consent for specific messages or files, it is necessary for security purposes (such as investigating abuse), to comply with applicable law, or our use is limited to internal operations and the data (including derivatives) has been aggregated and de-identified.
5. Storage and security
The Service runs on Cloudflare infrastructure. OAuth access and refresh tokens for connected Google accounts are stored encrypted at rest. When the assistant carries out a task, the relevant Google Workspace data is fetched on demand and processed in short-lived, isolated sandbox containers; we do not maintain a standing copy of your mailbox, Drive or other Workspace content beyond what is needed to complete the action and show you the result. We use reasonable technical and organisational measures to protect personal information, but no method of transmission or storage is completely secure.
6. Data retention and deletion
You can disconnect a Google account from your account page at any time; when you do, we delete the stored OAuth tokens for that account. You can also revoke the Service’s access from myaccount.google.com/permissions. If you delete your Zero BS AI account, we delete your account information and connected Google tokens, except where we are required to retain certain records by law. To request deletion or ask what we hold, email privacy@zerobsai.com.
7. Sharing and sub-processors
We do not sell personal information. We share it only with service providers who process it on our behalf to run the Service, under contractual confidentiality and security obligations:
- Google LLC — the Google APIs that the Sandbox connects to, at your direction.
- Cloudflare, Inc. — hosting, compute, storage and content delivery.
- Anthropic, PBC — the AI model that powers the assistant; content needed to carry out your request is processed by the model to generate the response.
We may also disclose information if required by law, to enforce our terms, or to protect the rights, safety or security of users or the public.
8. International transfers
Our service providers may process data in countries outside Australia, including the United States. Where we transfer personal information overseas we take reasonable steps to ensure it is handled consistently with the Australian Privacy Principles.
9. Children
The Service is not directed to children under 16, and we do not knowingly collect their personal information.
10. Your rights
You can access or correct your personal information, or make a privacy complaint, by contacting us at privacy@zerobsai.com. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner (oaic.gov.au).
11. Changes to this policy
We may update this policy from time to time. We will post the updated version here and change the “last updated” date above; significant changes will be notified through the Service.
12. Contact
CMI MANAGEMENT (ACT) PTY LTD (ABN 63 658 796 215), trading as Zero BS AI — privacy@zerobsai.com.