Zapier AI
Zapier · Agent platform · US · zapier.com
services/zapier-ai.yamlVendor data-handling terms
Zapier's AI features (Agents, Copilot, AI actions) route content to model providers listed as sub-processors; training-use statements live in Zapier's help centre rather than the policy and are not verified here.
“Notwithstanding anything to the contrary in the Agreement, consistent with Applicable Data Protection Law, Zapier shall not: (a) retain, use, or disclose Personal Information other than as provided for in the Agreement or as needed to perform the Service; (b) “sell” (as such term is defined by CCPA) or “share,” (as such term is defined by CCPA) ; (c) process Personal ”
Task history retention varies by plan as a product setting.
“Information that we collect from the Sites will be transferred to, and processed in, the United States and in any other country where Zapier or its affiliates, subsidiaries, or third-party service providers maintain facilities or personnel.”
Domains and endpoints
observed means seen in Unseen deployments; vendor-documented means listed by the vendor. Vendors do not publish complete lists.
| Host | Role | Source |
|---|---|---|
| actions.zapier.com | app | observed |
| api.zapier.com | api | observed |
Assessment
Reasoning: Zapier's automation platform now embeds agents and AI steps that read and write across every connected app. The DPA limits use to the service, but the AI layer passes content to model sub-processors and the platform holds credentials for the apps it automates. US processing.
Flags: Holds credentials for thousands of connected apps · AI steps send content to model sub-processors · US processing · Assessed 2026-09-16. The assessment is Unseen's; the terms above are the vendor's.
Changelog
- 2026-09-16Documented. Processing limits verified against the Zapier DPA; transfers against the privacy policy.
- 2026-09-15Listed from the Unseen catalogue with observed domains.
Corrections
Pull request on GitHub, or the form below. Changes are reviewed and recorded in the changelog.