How a connected assistant reaches your Zortix account

A connector key lets an assistant you chose act for your Zortix account over the same API the app uses. This page follows one request end to end, then lists what the assistant can read, what it never sees, what we keep, and how it stops. The privacy policy says the same things in its own words.

One request, end to end

From	To	What moves
You	the assistant	Your question, in the assistant’s own app.
The assistant	its credential vault	Reads the connector key you stored there once. The key never appears in the conversation.
The assistant	Zortix API (https://api.zortix.app)	One tool call over HTTPS: the tool name, its arguments, and the key as a bearer token.
Zortix API	the key row	Looks the key up by its hash, checks it is live and holds the scope the tool needs, and stamps its last use.
Zortix API	the corpus and your account	Reads attributed ideas from the podcast index and, for personal tools, your follows, saves and quotas; writes a follow, a save or an Ask question only when the tool is a write.
Zortix API	the assistant	One JSON answer: cards or an answer with citations, the attribution rule, and on a limit a one-sentence refusal with a link.
The assistant	you	Its reply, under its own terms. Zortix does not see it.

What the assistant can read

Your daily digest: the depth-ranked cards from the shows and tickers you follow.
Search results, ticker mentions and the show catalog, which are public data.
The full ideas it opens, under your plan’s read meter.
Your followed shows and tickers, your saved ideas, your plan and today’s quotas.
The answers to the Ask Zortix questions it sends, with citations.

What it can write

Follow or unfollow a show or a ticker; save or unsave an idea, when you asked it to.
Ask Zortix questions, stored like the ones you ask in the app, and erasable by you.

What it never sees

Your email address, your billing, your portfolio holdings, or anyone else’s account.
The key after creation: it is shown once, stored on our side as a hash, and never returned.
Transcript audio or full transcripts. The source moment is a short quote within the show’s licence, Premium only.
A way to mint or revoke keys: only a signed-in session can do that.

What we keep

The key row: a hash, the name you gave it, its scopes, creation and last-use times, a call count. Deleted with the account; revocable at any time and then inert.
Per call: the tool, the status, how long it took, the assistant’s class (Muse, Grok, other), a hashed account id. Never the key, the question or the answer.
The writes it made on your behalf, which are yours: follows, saves and Ask conversations, all editable or erasable from the app and from Settings.

How it stops

Revoke the key at Settings → Connectors; the next request answers 401. Erase your Ask history there or under Account → Data & privacy. Delete your account and every key goes with it. Rate limits (120 requests a minute per key, 600 an hour per account) bound what a runaway assistant can do in the meantime.

Questions from a directory or a reviewer: hello@zortix.app. The machine surface is documented on /connectors and /developers.