Privacy Policy

Last updated: 11/11/2025

1. Information We Collect

We collect information that you provide directly to us, including:

• Personal information (name, email address, phone number, company information)
• Account credentials and authentication data
• Conversation data and interactions with AI agents (for training and improvement purposes, with your consent)
• Payment and billing information
• Usage data and analytics (page views, feature usage, performance metrics)
• Technical data (IP address, browser type, device information, cookies)

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our AI implementation services
• Train and optimize AI models for better performance
• Process payments and manage your account
• Communicate with you about services, updates, and support
• Monitor and analyze trends, usage, and activities
• Detect, prevent, and address fraud, security issues, and technical problems
• Comply with legal obligations and enforce our terms

3. Data Security

We implement comprehensive security measures to protect your data:

• End-to-end encryption for data in transit (TLS 1.3)
• AES-256 encryption for data at rest
• Regular security audits and penetration testing
• Role-based access controls and multi-factor authentication
• SOC 2 Type II compliant data centers
• Regular backups and disaster recovery procedures
• Employee security training and background checks

4. Data Sharing and Disclosure

We do not sell your personal information. We may share your information with:

• Service providers who assist us in operating our platform (cloud hosting, payment processing)
• AI model providers (OpenAI, ElevenLabs, Anthropic) as necessary to provide services
• Professional advisors (lawyers, accountants) under confidentiality obligations
• Law enforcement or regulatory authorities when required by law
• Third parties with your explicit consent

5. GDPR Compliance (European Users)

For users in the European Economic Area, we comply with GDPR requirements. You have the right to:

• Access your personal data and receive a copy
• Correct inaccurate or incomplete data
• Request deletion of your data (right to be forgotten)
• Object to or restrict processing of your data
• Data portability (receive your data in a structured format)
• Withdraw consent at any time
• Lodge a complaint with your local data protection authority

Contact us at privacy@zengato.com to exercise these rights.

6. CCPA Compliance (California Users)

For California residents, we comply with the California Consumer Privacy Act. You have the right to:

• Know what personal information we collect, use, and share
• Request deletion of your personal information
• Opt-out of the sale of personal information (we do not sell your data)
• Non-discrimination for exercising your privacy rights

7. HIPAA Compliance (Healthcare Clients)

For healthcare clients handling protected health information (PHI), we maintain HIPAA compliance. We sign Business Associate Agreements (BAAs) and implement appropriate administrative, physical, and technical safeguards. PHI is encrypted, access-controlled, and audit-logged. We conduct regular risk assessments and maintain incident response procedures.

8. International Data Transfers

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission, to protect your data during international transfers.

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to:

• Remember your preferences and settings
• Analyze site traffic and usage patterns
• Improve user experience and site performance
• Provide personalized content and recommendations

You can control cookie settings through your browser preferences. Note that disabling cookies may affect site functionality.

10. Data Retention

We retain your information for as long as necessary to provide our services and comply with legal obligations. Account data is retained during your subscription and for 90 days after termination. Conversation logs may be retained for up to 2 years for quality assurance and model training (with your consent). Financial records are retained for 7 years as required by law. You may request deletion of your data at any time, subject to legal retention requirements.

11. Children's Privacy

Our services are not directed to children under 16. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

12. Third-Party Services

Our services integrate with third-party AI providers (OpenAI, ElevenLabs, Anthropic, n8n). These providers have their own privacy policies governing their use of your data. We recommend reviewing their policies. We select partners who maintain high privacy and security standards.

13. Your Privacy Choices

You can:

• Update your account information at any time
• Opt-out of marketing communications (unsubscribe links in emails)
• Disable cookies through browser settings
• Request data deletion or export
• Opt-out of conversation data being used for model training

14. Data Breach Notification

In the event of a data breach that affects your personal information, we will notify you within 72 hours of becoming aware of the breach, as required by applicable law. We will provide details about the breach, affected data, and steps we're taking to address it.

15. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the new Privacy Policy on this page, updating the "Last updated" date, and sending you an email notification. Your continued use of our services after such changes constitutes acceptance of the updated policy.

16. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your privacy rights, or have concerns about how we handle your data, please contact us at:

• Email: privacy@zengato.com
• Data Protection Officer: dpo@zengato.com
• Response time: Within 2 business days