Z.ai's data privacy issue: ZCode uploaded developer code without consent

What happened

Z.ai apologized after developers found its ZCode code-generation tool quietly packaged and uploaded complete user workspaces, including entire project histories, to Alibaba Cloud without asking permission. A researcher noticed the tool sending data to remote servers.

Confirmed

Global impact / market context

Developers trust coding tools with valuable source code and project history. Secret uploads to remote servers could expose trade secrets, weaken customer trust, and push firms to restrict or replace AI coding tools, hurting the provider's revenue.

Analyst inference

For AI companies, data handling rules affect adoption and reputation. If developers fear hidden uploads, they may avoid cloud-based coding assistants, shift to rivals promising privacy, or face pressure from employers and regulators to prove compliance.

Analyst inference

What to watch

1. Z.ai has apologized for ZCode uploading full user workspaces to Alibaba Cloud without permission from developers using the tool. Confirmed
2. Watch whether Z.ai changes ZCode defaults to ask before uploading data and publishes clear data handling details for users. Proposed
3. Watch whether developers abandon ZCode, pushing rival coding tools to win users by promising no hidden uploads of project data. Analyst inference

Affected assets

• AI — Any Inu

Evidence

• en.cryptonomist.ch