Privacy Policy
How ZoriChat handles merchant workspace data, Meta messaging webhooks, AI conversation processing, and customer privacy rights.
1. Information We Collect (Meta Channels, Google OAuth & Storefront)
When you create a ZoriChat workspace or connect messaging channels, we collect only the information required to operate your omnichannel inbox and order automation:
- Account & Google OAuth Data: Your name, email address, and profile avatar when signing in via Google OAuth or magic link.
- Facebook Messenger & Instagram DM Data: Page/Account IDs, encrypted page access tokens, customer sender IDs (PSID/IGSID), profile names, inbound/outbound text messages, story replies, comment-to-DM events, and media attachments.
- WhatsApp Business Cloud API Data: WhatsApp Business Account (WABA) ID, Phone Number ID, customer phone numbers, message text, audio notes, images, and delivery/read status events.
- Order & Contact CRM Records: Customer full names, normalized phone numbers (`+880...`), delivery addresses, and order line items extracted during conversations or entered by workspace operators.
2. How Conversations Are Processed by AI & Sub-Processors
When a workspace enables Zori AI (`BOT_ACTIVE`), recent messages in an active conversation, your workspace product catalog, and knowledge documents are sent to our configured AI inference provider to generate context-aware replies, transcribe voice notes, and extract order details.
- No Cross-Tenant Model Training: Customer conversations and workspace catalogs are isolated per workspace and are never shared with other merchants or used to train public foundation models.
- Infrastructure Sub-Processors: Database and media storage are hosted on Supabase (PostgreSQL + private Storage buckets); transactional emails are delivered through Resend; AI inference runs through our enterprise API gateway.
3. Data Storage, Token Encryption & Retention
All connected channel access tokens are encrypted at rest using AES-256-GCM (`server/crypto/`) with unique per-record initialization vectors. Database queries enforce strict `workspaceId` tenant isolation.
Raw webhook event logs are automatically pruned on a scheduled basis, and conversation history is retained for the life of your active workspace unless deleted earlier by a workspace owner or via a user data deletion request.
4. User Rights & Data Deletion Instructions
Both workspace owners and end-customers who messaged a connected Facebook Page, Instagram account, WhatsApp number, or website widget have the right to request access, correction, or complete deletion of their personal data.
For step-by-step instructions on removing channel connections, deleting contact records in-app, or submitting a formal Meta Data Deletion callback/email request, please visit our dedicated Data Deletion Instructions page (/data-deletion).
5. Privacy Contact Information
For privacy inquiries, data protection requests, or compliance questions, contact our Data Protection team at privacy@zorichat.com.