Zoestra
Privacy notice
Last updated 3 Nov 2026
Who we are
Zoestra is run by ILLI 7 SIA, Māras iela 48, Baltezers, Garkalnes pag., Ropažu nov., LV-2164, Latvia, registration number 58503028371. Write to us at privacy@zoestra.com.
This notice covers this website and requests to join the beta. When you start using Zoestra itself, the terms you accept then say how your workspace's data is handled.
What we keep about you
When you ask to join the beta, we keep your email address. We also keep your organisation, its country and what you would keep in Zoestra, and, if you tell us, your name, which AI you use and how many people would use it. We note the application statement you ticked, and when.
When you visit this site, our web server writes each request to its log: the page, the time, the page you came from, your browser and device type, and your IP address with its last part removed before it is written.
Each night we turn the day's log into counts: visits, pages read, where visitors came from, countries and device types. The counts hold no addresses and nothing else that points to a person.
These public pages set no cookies and load nothing from anyone else. They have no advertising trackers, no analytics scripts, and no fonts or images from other servers. The signed-in app at app.zoestra.ai uses the session and security cookies it needs to work.
Why we keep it
We keep your beta request to answer it and to send you necessary messages about it. That is a step you asked for before a possible contract (GDPR, Article 6(1)(b)). This is not a marketing subscription.
We keep the server log to keep this site working and safe, and to count visits. That is our legitimate interest in running the site (GDPR, Article 6(1)(f)). We shorten your IP address before it is stored, so the log keeps as little about you as it can.
Where it is stored
On our servers at DigitalOcean in Frankfurt, Germany (EU), and in our encrypted backups, also in Frankfurt.
Emails we send you pass through Amazon Web Services' email service in the United States. That transfer is covered by the EU-US Data Privacy Framework and by the standard contractual clauses in Amazon's data processing terms.
Emails you send us are held by Proton AG in Switzerland, a country the EU recognises as protecting personal data adequately.
How long we keep it
Your beta request: until you ask us to delete it, and no longer than 12 months after the beta ends. If you do not confirm your email address within three days, the request expires and is removed. Copies in our encrypted backups expire on a schedule of up to about six months: daily copies for 7 days, weekly copies for 4 weeks and monthly copies for 6 months.
The server log: 30 days, then it is deleted. The nightly counts are kept, because they hold no personal data.
Who else sees it
DigitalOcean, which hosts our servers. Amazon Web Services, which sends our emails. Proton AG, which holds the emails you send us. Each handles your data only on our instructions.
We do not sell your data or use it to train AI models, and we do not instruct our service providers to train models on it.
Your rights
You can ask to see what we keep about you, to correct it, to delete it, to limit how we use it, or to get a copy in a common format. You can object to our server log. You can withdraw your beta request at any time.
To do any of this, write to privacy@zoestra.com. You can also complain to a data protection authority, for example in the country where you live or work.