Roles
You are the data controller. Zime is the data processor and processes your data only to provide the service, on your instructions. Zime's contracting entity is Inner Fit Research Inc., 2238 Lusardi Drive, San Jose, California 95148, USA.
Zime does not sell customer data.
Data Zime processes
- Account: name, work email, company, job title and role.
- Meetings: recordings, transcripts, summaries, meeting title, time and participants.
- Calendar: meeting title, time, join link, attendee names and emails.
- CRM: accounts, opportunities, contacts, leads, users, and the emails and calls logged in your CRM.
- Usage: how people use the product, and basic device and browser information.
Data Zime is not meant for
Zime is built for business and sales information. Under the DPA, customers agree not to put the following into Zime: social security numbers, financial account numbers, health information, driver's license numbers, passport or visa numbers, credit card information, or any special categories of personal data.
Where data is stored
| Data | Where |
|---|---|
| Account data, CRM data, transcripts, insights, logged email content | Amazon Web Services, US East (N. Virginia) |
| Meeting recordings | Backblaze (US East) or Google Cloud (United States), depending on your workspace |
| Product emails Zime sends | Amazon SES, US West (Oregon) |
| AI processing | See AI data use; some AI providers process outside the United States |
Your own cloud: Zime can keep your meeting recordings and transcripts in an Amazon S3 bucket in your own AWS account. Zime sets this up per customer; call insights, search data and account data stay in Zime's systems. Talk to your Zime contact.
Zime's team in the United States and India, including Zime's subsidiary Inner Fit Labs Private Limited, can access data for support and engineering, on a need to know basis.
Retention and deletion
By default, Zime keeps each call recording for three years. Longer retention is available on request. Transcripts and insights are retained.
The three years start on the day the recording is uploaded to Zime. What Zime stores depends on how a call arrives: the notetaker and native Zoom and Teams recording keep the recording and its transcript, while some imports, such as Chorus, bring in the transcript only.
Admins can delete a recording in Zime, and can allow users to do the same; this removes the recording and its insights from the app. When an admin asks Zime to delete data, it is deleted within one month.
At the end of the contract, at your choice, Zime returns your personal data, or deletes it and certifies the deletion.
Data Processing Agreement
Zime signs its standard DPA with every customer that asks, or reviews yours. It covers:
- Zime processes your data only on your instructions, as data processor.
- Confidentiality and need to know access for Zime staff.
- Zime notifies you within 48 hours of becoming aware of a personal data breach that affects your data.
- Zime gives 30 days' notice before adding or replacing a sub-processor, and you can object on reasonable data protection grounds.
- Information and audit support to demonstrate compliance, with ten business days' notice, once a year.
- Return or deletion of your data at the end of the contract.
- EU Standard Contractual Clauses (Module Two, controller to processor) for customers subject to GDPR.
On request we add the no-training commitment to the DPA: Zime does not train or fine-tune AI models on your data or any other customer's data.
Your rights
Requests to access, correct, delete or export personal data go to support@zime.ai. Zime responds within one month.
Contact
Data Protection Officer: Ashish Gupta, ashish@zime.ai.