TechNode reports that the company deleted all data objects in the affected Alibaba Cloud OSS bucket and deleted the bucket itself. Zhipu said the deletion was verified by the China Academy of Information and Communications Technology and NSFOCUS.
The controversy surfaced on September 18 after a developer found an encrypted file of about 313 MB in ZCode's local data directory. Reverse engineering reportedly indicated that it packaged an entire workspace, including source code, Git history, LFS caches, and global development configuration. In earlier versions, the upload feature was enabled by default and did not offer a clear disable option, according to the report.
ZCode 3.14.0, released September 19, removed the Repo Wiki entry and relevant repository-snapshot generation and upload paths. Zhipu later open-sourced ZCode; the Apache-2.0 codebase is now at version 3.14.3. The company says future uploads require user initiation, and says affected data was neither retained nor used for model training.
Paid users are to receive four weekly and four five-hour quota-reset cards, each valid for one month. Between September 28 and October 7, ZCode planned 100,000 free packages of 100 million tokens. The report does not independently establish what data left individual devices or independently verify deletion.