Privacy Policy

1. Overview

zotx provides an AI messaging operations platform that helps businesses connect supported customer messaging channels, manage conversations, and configure automated replies.

This Privacy Policy explains how we collect, use, store, share, and delete information when you use zotx, connect Meta channels, or interact with our public website and dashboard.

2. Information We Collect

• Account information such as name, email address, login/session records, verification status, workspace membership, and administrative role.
• Workspace information such as workspace name, members, settings, AI model configuration, bot enablement status, channel-specific prompts, and knowledge-base files you upload.
• Connected-channel information from Messenger, Instagram, and WhatsApp, including page or business asset identifiers, page names, phone number IDs, access tokens required to operate approved API features, webhook events, sender identifiers, message text, timestamps, and delivery metadata.
• Conversation information such as incoming customer messages, AI-generated replies, human replies, handoff state, unread status, and operational notes needed to display and manage the inbox.
• Billing and usage information such as plan, credits, usage logs, payment transaction references, and administrative adjustments.
• Security and technical information such as IP address, user agent, audit logs, error logs, webhook signature checks, push-notification subscriptions, and device/session metadata.

3. How We Use Information

• To authenticate users, protect accounts, and provide workspace access controls.
• To connect, display, route, and respond to messages from supported channels in one inbox.
• To generate AI-assisted replies based on your workspace settings, connected channel instructions, and approved knowledge-base content.
• To let workspace members pause, resume, hand off, or customize automation by channel or conversation.
• To provide analytics, billing, credits, service health, notifications, support, fraud prevention, abuse monitoring, and security auditing.
• To comply with platform requirements, legal obligations, and deletion or privacy requests.

4. Meta Platform Data

When you connect Meta assets, zotx uses the permissions granted during the authorization flow only to provide the requested messaging, inbox, automation, and management features.

We do not sell Meta Platform data. We do not use customer message content for unrelated advertising. Access tokens and channel identifiers are used to operate the connected channel and are removed or invalidated in zotx when you disconnect the channel or when deletion is processed where applicable.

5. AI Providers and Service Providers

To generate replies, message text, prompts, and relevant workspace context may be sent to configured AI providers such as OpenRouter or other model providers used by the deployment.

We may also use infrastructure, database, email, push notification, analytics, and payment providers to operate the service. These providers process information only as needed to provide their services to zotx.

6. Sharing and Disclosure

• With workspace members according to their role and the workspace data they are allowed to access.
• With service providers that host, secure, deliver, analyze, or support the service.
• With Meta or other connected platforms when sending replies, receiving webhooks, validating permissions, or complying with platform requirements.
• When required by law, to protect rights and safety, investigate abuse, prevent fraud, or enforce our terms.

7. Retention

We keep information for as long as needed to provide the service, maintain security, resolve disputes, support billing and accounting, comply with legal obligations, and preserve audit integrity.

Connected-channel tokens are intended to remain stored only while the channel is active. Disconnecting a channel removes or invalidates the active token stored by zotx while historical operational records may remain unless a broader deletion request is verified and processed.

8. Your Choices and Deletion

• You can disconnect Messenger, Instagram, or WhatsApp channels from Dashboard > Channels.
• You can request account, workspace, channel, conversation, or knowledge-base deletion by contacting support@zotx.tech.
• Meta user data deletion callbacks are handled through our deletion endpoint and return a confirmation code and status page.
• More details are available on our Data Deletion page.

9. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect accounts, tokens, conversations, and operational data. These include session validation, role-based access controls, webhook signature verification, audit logging, and encrypted storage for sensitive channel tokens.

No online service can guarantee absolute security. Please use strong credentials, keep workspace access limited to trusted team members, and contact us promptly if you suspect unauthorized access.

10. International Processing

Depending on the deployment and service providers used, information may be processed in countries other than where you or your customers are located. We take reasonable steps to protect information according to this policy wherever it is processed.

11. Children

zotx is intended for business use and is not directed to children. If you believe a child provided personal information through the service, contact us so we can review and respond appropriately.

12. Changes and Contact

We may update this policy as the service, providers, or legal requirements change. The latest version will be posted on this page with an updated date.

Privacy and deletion requests can be sent to support@zotx.tech.