WhatsJet by Zanii AI

Privacy Policy

Last updated: 10 October 2026

This Privacy Policy explains how Zanii AI ("we", "us") handles personal data in WhatsJet by Zanii AI (the "Service"). Contact us at [email protected] with any question about it.

1. Two roles

  • Account data (businesses that sign up and their team members): we decide how it is used and are responsible for it.
  • Customer Data (the contacts, messages and files a business manages in the Service): we process it on behalf of that business, which is responsible for it. If you are messaging a business that uses the Service, contact that business about your data; we will help it respond.

2. What we collect

  • Account details: name, username, email, mobile number, business name, password (stored only as a secure hash), two-factor settings, and linked sign-in accounts such as Zanii ID.
  • Billing: plan, invoices and payment status. Card and wallet details are collected and stored by Stripe or PayPal, not by us.
  • Customer Data: contact details, custom fields, groups, labels, WhatsApp messages and media, campaign and delivery data, and notes.
  • Integration credentials: WhatsApp, AI provider and payment keys you connect. These are encrypted at rest and never shown back in full.
  • Technical data: IP address, browser and device information, sign-in history and activity logs used for security, troubleshooting and fraud prevention.
  • Messages to us: what you send through the contact form or by email.

3. How we use it

  • to provide the Service: sending and receiving WhatsApp messages, running campaigns, bots and AI replies, and keeping the inbox in sync;
  • to manage accounts, subscriptions, invoices and support requests;
  • to keep the Service secure, detect abuse and enforce our terms;
  • to send service emails such as account activation, password resets and billing notices;
  • to meet legal and accounting obligations.

We do not sell personal data, and we do not use Customer Data to advertise to the people in it.

4. Who we share it with

We share data only with providers that help run the Service, under their own security and privacy terms:

  • Meta (WhatsApp Business Platform) to deliver and receive WhatsApp messages;
  • Stripe and PayPal to process payments;
  • AI providers the business enables, such as OpenAI or its own Flowise server, which receive the conversation text needed to draft a reply;
  • Zanii ID when you choose to sign in with it, and the Zanii ledger when action receipts are enabled; the ledger receives only a fingerprint of each action, never message content;
  • Cloudflare for content delivery, network security and site analytics, and our hosting and email providers.

We may also disclose data when the law requires it or to protect the rights and safety of our users and the Service.

5. Cookies

The Service uses essential cookies to keep you signed in and to protect forms against cross-site request forgery. These are required for the Service to work. Our network provider may set its own security cookies and collect privacy-friendly visit statistics.

6. International transfers

Our providers may process data in other countries. Where this happens we rely on their contractual and technical safeguards for the transfer.

7. Retention

We keep account data while the account is active and for as long as needed afterwards for legal, accounting and security purposes. Customer Data is kept until the business deletes it or closes its account, after which it is deleted within a reasonable period. Backups are overwritten on a rolling basis.

8. Security

We protect data with encrypted connections (TLS), encryption of stored credentials, access controls, two-factor authentication and activity logging. No system is completely secure; tell us at [email protected] if you believe your account has been compromised.

9. Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal data, and to object to or restrict certain processing. Email [email protected] and we will respond within the time the law allows. For Customer Data, we will pass your request to the business responsible for it.

10. Children

The Service is intended for businesses and is not directed at children. We do not knowingly collect children's data for our own purposes.

11. Changes

We may update this policy. The date at the top shows the latest version, and we will notify account administrators of material changes.