Privacy Policy
We take your privacy seriously. This policy explains what data we collect, how we use it, and how we protect it.
Information We Collect
Information You Provide
When you create an account, we collect your name, email address, company name, phone number, and billing information. When you contact our support team, we collect the content of your messages and any attachments you share.
Information We Collect Automatically
When you use Zappilo, we automatically collect usage data including pages visited, features used, time spent, IP address, browser type, device type, and referring URLs. This helps us understand how the platform is used and where we can improve.
WhatsApp & Messaging Data
Zappilo processes messages sent through connected WhatsApp Business accounts and other communication channels on your behalf. This data is processed to provide the service and is governed by the data processing agreement between Zappilo and your organisation.
CRM & Contact Data
Customer contact information, conversation history, notes, tags, and pipeline data you store in Zappilo's CRM is your data. We process it only as instructed by you to provide the service.
How We Use Your Information
Providing the Service
We use your information to operate, maintain, and improve the Zappilo platform — including delivering AI-powered features, automations, shared inbox, CRM functionality, and integrations.
Communications
We may send you service-related emails such as account confirmations, product updates, security alerts, and billing notices. You may also receive marketing communications if you have opted in — you can opt out at any time.
Analytics & Improvement
We analyse aggregated, anonymised usage data to understand product performance, prioritise features, and improve the platform experience. We do not sell personal data.
Legal & Safety
We may use your information to comply with applicable laws, enforce our terms, prevent fraud, and protect the rights and safety of our users and the public.
Data Retention
Retention Period
We retain your personal information for as long as your account is active or as needed to provide the service. If you close your account, we will retain data for 90 days to allow for account recovery, then delete it in accordance with our data deletion schedule.
Your Data
CRM contacts, conversation history, and customer data you store in Zappilo are retained for the duration of your subscription. Upon account termination, you may request an export of your data within 30 days before deletion occurs.
Your Rights
Access & Portability
You have the right to request a copy of the personal data we hold about you. You may also request your data in a portable format.
Correction
You have the right to correct inaccurate or incomplete personal information. You can update most information directly in your account settings.
Deletion
You may request deletion of your personal data at any time. We will delete your data subject to any legal obligations we have to retain certain records.
Objection & Restriction
You have the right to object to or restrict certain types of processing, including marketing communications. You can manage communication preferences in your account or by contacting us.
GDPR & Regional Rights
If you are located in the European Economic Area, United Kingdom, or other regions with applicable data protection laws, you have additional rights under those frameworks. Contact us at privacy@zappilo.com to exercise your rights.
Security
Our Commitment
We implement industry-standard technical and organisational measures to protect your data — including encryption in transit and at rest, access controls, audit logging, and regular security assessments.
Incident Response
In the event of a data breach that affects your rights and freedoms, we will notify you and relevant authorities as required by applicable law, typically within 72 hours of becoming aware of the breach.
International Transfers
Cross-Border Data Transfers
Zappilo operates globally. Your data may be transferred to and processed in countries other than your own, including countries that may not have the same data protection laws as your country. We take appropriate safeguards to ensure your data remains protected, including Standard Contractual Clauses where required.
Children's Privacy
Age Restriction
Zappilo is not intended for use by individuals under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.
Changes To This Policy
Updates
We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a prominent notice on our platform before the changes take effect. Your continued use of Zappilo after changes become effective constitutes acceptance of the updated policy.
Contact Us
Data Controller
Zappilo, Inc. is the data controller for personal information processed through our platform. If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at privacy@zappilo.com.