Zapier AI

Zapier · Agent platform · US · zapier.com

Last verified 2026-09-16
Entry services/zapier-ai.yaml
Training on your data (default tier)
Not stated in the privacy policy; under the DPA, personal information is not retained, used or disclosed beyond what the agreement and the service require
Retention
Not stated as a period in the policy; DPA requires retention only as needed for the service
Data residency
Transferred to and processed in the United States and other countries where Zapier or its providers operate

Vendor data-handling terms

Training on your data (default tier)
Not stated in the privacy policy; under the DPA, personal information is not retained, used or disclosed beyond what the agreement and the service require

Zapier's AI features (Agents, Copilot, AI actions) route content to model providers listed as sub-processors; training-use statements live in Zapier's help centre rather than the policy and are not verified here.

Notwithstanding anything to the contrary in the Agreement, consistent with Applicable Data Protection Law, Zapier shall not: (a) retain, use, or disclose Personal Information other than as provided for in the Agreement or as needed to perform the Service; (b) “sell” (as such term is defined by CCPA) or “share,” (as such term is defined by CCPA) ; (c) process Personal
checked 2026-09-16
Zapier Data Processing Addendum
Retention
Not stated as a period in the policy; DPA requires retention only as needed for the service

Task history retention varies by plan as a product setting.

not stated by vendor
Data residency
Transferred to and processed in the United States and other countries where Zapier or its providers operate
Information that we collect from the Sites will be transferred to, and processed in, the United States and in any other country where Zapier or its affiliates, subsidiaries, or third-party service providers maintain facilities or personnel.
checked 2026-09-16
Zapier Privacy Policy

Domains and endpoints

observed means seen in Unseen deployments; vendor-documented means listed by the vendor. Vendors do not publish complete lists.

HostRoleSource
actions.zapier.comappobserved
api.zapier.comapiobserved

Assessment

AI Agents, Copilot and AI actions: medium

Reasoning: Zapier's automation platform now embeds agents and AI steps that read and write across every connected app. The DPA limits use to the service, but the AI layer passes content to model sub-processors and the platform holds credentials for the apps it automates. US processing.

Flags: Holds credentials for thousands of connected apps · AI steps send content to model sub-processors · US processing · Assessed 2026-09-16. The assessment is Unseen's; the terms above are the vendor's.

Changelog

  • 2026-09-16Documented. Processing limits verified against the Zapier DPA; transfers against the privacy policy.
  • 2026-09-15Listed from the Unseen catalogue with observed domains.

Corrections

Pull request on GitHub, or the form below. Changes are reviewed and recorded in the changelog.

Edit on GitHub