Privacy and data

What we collect, and what we have deliberately made impossible.

Zharfex asks people to speak honestly about their work. That only happens if the rules are clear, so this page states them plainly — including where the product does not yet exist.
Today, this is a website and nothing more.

There is no production deployment of Zharfex. No customer voice notes exist anywhere, because no customer has recorded any. Everything below under “by design” describes commitments built into the software and enforced by its tests — not infrastructure we are currently operating. When there is a deployment, this page becomes a policy with dates and locations in it.

What this website collects

Nothing, unless you write to us. There are no analytics, no cookies, no tracking pixels, no session recording and no advertising identifiers. We cannot tell you how many people visited, because we do not measure it.

If you email us to ask for access, we keep your message and your address so we can reply and tell you when there is something to try. That is the only personal data we hold. Ask and we delete it.

The access form on this site posts to Formspree, which forwards it to us by email. Formspree therefore sees what you type into it. If you would rather not involve them, use the email address beside the form — it reaches the same person.

The external requests

Every page loads three typefaces from Google Fonts — the stylesheet from fonts.googleapis.com, the font files from fonts.gstatic.com. That means Google receives your IP address and user agent, which is a real disclosure we would rather make than omit. Those are the only requests this site makes to anyone but itself, and we intend to self-host the fonts to end them.

By design: what the product does with voice

  • Your notes are yours. A person's wiki is private by default. Sharing is per page, chosen by them, and revocable.
  • Nobody reads your raw words. Leadership never sees a voice note or a transcript — only claims, and only after corroboration.
  • Nothing single-source surfaces. A claim reaches anyone else only when three people who had not spoken to each other independently make it. That is arithmetic in the code, not a setting an administrator can relax.
  • There is no score. No productivity number, no rating, no ranking of people. A test walks every output field and fails the build if one is named like a score. The moment a tool grades people they stop speaking honestly to it, so this is a correctness property, not a preference.
  • Deletion is real. Withdrawing removes your pages, your audio and your transcripts. Already-corroborated findings survive as anonymised claims about an organizational issue, because by then they contain nothing attributable to you.
  • We do not train on your data. Not for models, not for benchmarks, not for anyone else's product.

Where it will run

Zharfex is built to be self-hosted. The intended deployment for the markets it serves runs on the customer's own infrastructure with open-weight models, because the places that need this most cannot reach a foreign API — and because the question “where does our voice go” should have a short answer.

Questions

Write to hoseyn.yousefi@gmail.com.

Last updated October 2026. This page will be replaced by a dated policy when there is a production deployment to describe. If anything here is ever untrue of the shipped product, that is a bug and we want to hear about it.