Zakaa Artificial (“Zakaa”, “we”, “our”, or “us”) respects your privacy and is committed to protecting personal and business data. This Privacy Policy explains how we collect, use, store, and protect information when you use Zakaa’s website, platform, and AI-powered services.
This Policy applies to:
- Business clients subscribing to Zakaa services
- Authorized users (employees, branch staff) acting on behalf of business clients
- End-customers who interact with businesses through Zakaa-powered channels (e.g. WhatsApp, Telegram, or public ordering pages)
- Visitors to Zakaa’s website
This Policy operates alongside any signed Client Service Agreement, which governs service-specific terms. Where a business uses Zakaa to serve its customers, that business is typically the data controller for end-customer data; Zakaa acts as a data processor on the business’s instructions.
1. Information We Collect
Zakaa may collect the following categories of information:
a. Business and account information
- Business name, type, and description
- Business address and location coordinates (for delivery and operations)
- Contact details (email, phone numbers)
- Account credentials (passwords are stored in hashed form)
- Subscription and billing-related information as agreed in your plan
- Contract and onboarding documents where applicable
b. User and employee information
- Names, emails, and roles for dashboard and employee accounts
- Activity within the platform (orders managed, settings changed, etc.)
c. End-customer and interaction data
- Messages sent to Zakaa-powered bots (WhatsApp, Telegram, and similar channels)
- Phone numbers and messaging identifiers (including Telegram user IDs where used)
- Order, reservation, and appointment details
- Delivery addresses and location information provided during ordering
- Customer profile fields your business chooses to store (e.g. notes, area, date of birth, gender, or industry-specific fields)
- Metadata related to conversations (timestamps, channels, message status)
d. Technical and integration data
- Encrypted tokens for WhatsApp and related messaging integrations
- Google Calendar connection data when a business enables calendar sync (OAuth tokens and calendar event data needed to provide the feature)
- Item images and other content uploaded by businesses to the platform
- Authentication tokens stored in your browser’s local storage when you use the dashboard (session tokens)
- Server logs, IP addresses, and device/browser information for security and reliability
e. Analytics and derived data
- Aggregated usage metrics and performance insights
- System-generated analytics and reports
Analytics and derived data created by Zakaa systems are owned by Zakaa as described in client agreements, separate from raw client-provided data.
2. How We Use Information
Zakaa uses collected information to:
- Provide and operate AI bot services, dashboards, and related features
- Process orders, reservations, appointments, and payments recorded in the platform
- Send and receive messages on behalf of businesses through connected channels
- Sync calendar events when Google Calendar integration is enabled
- Maintain system reliability, security, and performance
- Improve product functionality and user experience
- Provide customer support
- Generate anonymized or aggregated analytics and insights
- Fulfill contractual and legal obligations
Zakaa does not sell personal data.
3. AI and automated processing
Zakaa uses artificial intelligence to interpret customer messages and assist with operational tasks. Customer message content may be processed by third-party AI providers (such as OpenAI) solely to generate responses and perform functions requested by your business. Businesses remain responsible for reviewing automated outputs where human oversight is required.
4. Data Ownership and Roles
- Client-owned data: Data provided by clients or generated by end-customer interactions through the client’s use of Zakaa generally remains the property of the client, subject to the Client Service Agreement.
- Zakaa-owned data: Analytics, insights, reports, system logic, and derived data generated by Zakaa systems are owned by Zakaa.
Zakaa acts as a service provider and data processor for client data and processes such data only to deliver agreed services and as instructed by the client, except where Zakaa must process data to comply with law or protect security.
5. Data Sharing and Subprocessors
Zakaa does not share identifiable client or customer data with third parties except:
- With infrastructure and service providers necessary to operate the platform, including:
- Amazon Web Services (AWS) — cloud hosting, databases, and file storage
- OpenAI — AI processing of message content to power chatbot features
- WhatsApp providers (e.g. Meta WhatsApp Business API, Gupshup, or similar) — message delivery
- Telegram — bot messaging where enabled
- Google — Calendar API when a business connects Google Calendar
- Where legally required (e.g. court order, regulatory request)
- With client consent or at the client’s direction
All service providers used by Zakaa are required to maintain appropriate security standards. Their use of data is governed by their own policies and our agreements with them.
6. Data Security
Zakaa implements reasonable technical and organizational measures to protect data, including:
- Access controls and role-based permissions
- Encryption of sensitive credentials (e.g. messaging API tokens)
- Secure cloud infrastructure
- Limited internal access on a need-to-know basis
- Monitoring and incident response practices
However, no system is 100% secure. Zakaa does not guarantee absolute security.
7. Data Retention
- Client and operational data is retained while the service is active and as needed to provide features and support.
- When an account is deactivated, data may be retained for a period unless and until deleted by an administrator or pursuant to an agreed retention or purge policy.
- Anonymized and aggregated data may be retained for product improvement and analytics.
- Upon termination of services, client data handling follows the applicable service agreement and deletion requests where applicable.
8. Your Rights and Requests
Depending on applicable law, you may have the right to request access, correction, deletion, or restriction of personal data we process about you.
- Business users: Contact us at info@zakaa-artificial.com.
- End-customers: Contact the business you interacted with first; they control most customer data. You may also contact Zakaa if you need assistance routing your request.
We will respond to legitimate requests within a reasonable timeframe.
9. Security Incidents
If we become aware of a personal data breach that poses a significant risk, we will take appropriate steps to investigate, mitigate harm, and notify affected clients or users as required by applicable law and contracts.
10. Children’s Privacy
Zakaa services are not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe we have collected such data, contact us and we will take appropriate steps to delete it.
11. Client Responsibilities
Clients are responsible for:
- Ensuring lawful collection and use of their end-customers’ data
- Providing accurate business information
- Informing customers about the use of AI systems and messaging channels where required by law
- Complying with WhatsApp, Telegram, and other platform policies
Zakaa is not responsible for client misuse of data or unlawful data collection practices by clients.
12. Browser Storage and Cookies
The Zakaa business dashboard stores authentication tokens in your browser’s local storage to keep you signed in. We do not use third-party advertising cookies on the dashboard. Our public website may use basic analytics or performance tools; these are not intended to collect sensitive personal data.
13. International Data Transfers
Zakaa may process data in multiple jurisdictions depending on infrastructure and service providers (including regions where AWS, OpenAI, or messaging providers operate). By using Zakaa services, you acknowledge that data may be processed outside your country of operation, subject to appropriate safeguards where required.
14. Changes to This Policy
Zakaa may update this Privacy Policy from time to time. Material changes will be reflected by updating the “Last updated” date. Continued use of Zakaa services after changes constitutes acceptance of the updated policy. We encourage you to review this page periodically.
15. Contact
Zakaa Artificial
Privacy inquiries: info@zakaa-artificial.com
See also our Terms & Conditions.