Privacy Policy

Last updated: June 9, 2026

This Privacy Policy explains how Zapito (“Zapito”, “we”, “us”) collects, uses and protects information when you use our website and the Zapito platform — a service that lets businesses build and deploy AI chat agents on messaging channels such as WhatsApp.

1. Information we collect

Account information

When you create an account we collect your name, email address and workspace details. Authentication is handled by our identity provider; we do not store your password.

Bot configuration and knowledge content

We store the workflows, prompts, knowledge-base sources and channel settings you create so your agents can run. This content belongs to you.

End-user conversations

When your customers message your connected channels, we process and store those conversations on your behalf so your agent can reply, escalate to your team and produce the analytics shown in your dashboard. You are the controller of this data; we process it under your instructions.

API keys and credentials

Channel credentials and bring-your-own model API keys are encrypted at rest, used only to operate your agents, and never shared or used for any other purpose.

Usage data

We collect standard technical logs (IP address, browser type, pages viewed) to keep the service secure and improve it.

2. How we use information

• To provide, operate and improve the Zapito platform.
• To route messages between your customers, AI model providers and your team.
• To show you usage, billing and analytics for your own workspace.
• To communicate with you about your account, security and product updates.

We do not sell personal data, and we do not use your bots’ conversations to train our own or third parties’ AI models.

3. Third-party services

Operating your agents involves sharing data with services you choose to connect: messaging platforms (e.g. Meta’s WhatsApp Business Platform, Telegram), AI model providers (e.g. Anthropic, OpenAI, Google — or any provider whose key you bring), our hosting and infrastructure providers, and our payment processor. Each processes data under its own terms; we only share what is needed to deliver the service.

4. Data retention and deletion

We retain your data while your account is active. You can delete bots, knowledge sources and conversation transcripts at any time from the dashboard, and you can request full account deletion by contacting us — we will delete your data within 30 days, except where we are legally required to keep it.

5. Security

Data is encrypted in transit and at rest. Access to production systems is limited to authorised personnel. No method of transmission or storage is 100% secure, but we work to protect your information using industry-standard measures.

6. Your rights

Depending on your location, you may have rights to access, correct, export or delete your personal data, and to object to or restrict certain processing. Contact us to exercise any of these rights.

7. Children

Zapito is a business tool and is not directed at children under 16.

8. Changes

We will post any changes to this policy on this page and update the date above. Material changes will be communicated by email or in-product notice.

9. Contact

Questions or requests: privacy@zapito.ai