Privacy Policy

1. Introduction

Zapiflow (operated by Zero7 Communications India, “we,” “us,” or “our”) is committed to safeguarding your privacy and securing your personal information. This Privacy Policy explains how we collect, use, store, and protect data when you use our omnichannel messaging platform, Meta WhatsApp Business API services, AI Voice agents, and developer APIs (“Services”).

2. Account Access & Role Management

Zapiflow operates a secure, role-based platform. Your account can only be accessed by you, the primary account holder, and by users to whom you assign specific role permissions (such as account managers or support inbox agents). You maintain full control over the access levels granted to your team members. Protecting your credentials and managing sub-user roles is your responsibility.

3. Information We Collect

• Personal & Account Details: Name, business name, phone number, email address, and billing information provided during registration.
• Platform Usage & Log Data: Message logs, campaign statistics, API requests, and activity reports generated during service usage to optimize infrastructure performance, security, and delivery rates.
• Compliance Information: Minimal details required to satisfy Meta Business verification and legal obligations under applicable laws.

4. Use of Your Data

We use collected data solely to:

• Provide, maintain, and optimize our WhatsApp Business API, AI Voice, RCS, and omnichannel services.
• Verify account ownership, prevent unauthorized access, and enforce security.
• Communicate critical platform updates, system notifications, and customer support responses.
• Satisfy legal, regulatory, and Meta Business compliance mandates.

5. Data Sharing & Confidentiality

Your business and personal data is accessed internally under strict confidentiality controls. We do not sell, trade, rent, or lease your personal data to third parties for marketing purposes. Data is shared only with underlying infrastructure partners (such as Meta for WhatsApp Business API routing) as required to deliver our core services or when mandated by law.

6. Data Security

We implement industry-standard encryption protocols (TLS/SSL), secure database architecture, and strict access controls to safeguard your data. While we enforce rigorous security controls, no internet transmission is 100% immune to cyber threats. Users are strongly advised to enforce multi-factor authentication and maintain strong passwords.

7. Data Retention & Dormant Accounts

Accounts without an active paid plan or active usage for three (3) consecutive months are marked dormant. Dormant accounts are subject to automated data deletion policies in compliance with data privacy regulations and storage management standards.

8. Your Responsibilities

• Maintain the secrecy and security of your account login credentials.
• Assign sub-user agent permissions responsibly within your team.
• Notify Zapiflow support immediately of any unauthorized account access or security breaches.

9. Policy Updates

We may revise this Privacy Policy from time to time. Significant changes will be communicated via our website or console notification. Continued use of our Services following an update signifies acceptance of the revised policy.