Privacy Policy

Welcome to Zendora's AI Automation Services. We are committed to protecting your personal information and your right to privacy. This Privacy Policy ("Policy") describes how Zendora Labs, Inc. ("Zendora", "we", "us", or "our") collects, uses, processes, and shares your personal data when you access or use our websites, applications, APIs, and AI-driven automated tools (collectively, the "Services").

By using the Services, you agree to the collection and use of information in accordance with this Privacy Policy. We continually evaluate our privacy practices to align with global standards set by leading technology platforms.

We collect information that identifies, relates to, describes, or is reasonably capable of being associated with you. The table below outlines the categories of data we collect:

We utilize the collected information for the following business and commercial purposes:

• Providing and maintaining the Services: To authenticate users, process transactions, and generate AI outputs based on your prompts.
• Operating connected accounts: To fetch analytics, posts, and insights from social platforms you have explicitly authorized (e.g., Meta/Instagram, TikTok) and surface them inside Zendora's tools.
• Improving and training AI models: We may use aggregated and de-identified AI Input Data to train, fine-tune, and improve the safety and accuracy of our machine learning models. Users on enterprise or paid tiers may be excluded from model training by default, and all users can opt-out via account settings.
• Personalization: To customize your experience, remember your preferences, and provide tailored content.
• Security and fraud prevention: To monitor for suspicious activity, enforce our Terms of Service, and protect against security incidents.

When you connect a third-party social account to Zendora, we request only the OAuth scopes required to deliver the feature you asked for — for example, instagram_business_basic and instagram_business_manage_insights for Instagram analytics.

• We store the OAuth access token encrypted at rest and use it solely to call platform APIs on your behalf.
• We do not sell, rent, or share Connected Platform Data with third parties for advertising or other unrelated purposes.
• We do not use Connected Platform Data to train generalized AI models. It is processed only to power features you actively use inside Zendora.
• You can disconnect any platform at any time from your account settings. On disconnect, Zendora revokes the access token and deletes associated platform identifiers and snapshots within 30 days.
• Our use and transfer of information received from connected platforms adheres to each platform's developer policies, including the Meta Platform Terms and the TikTok API Terms of Service.

We do not sell your personal data. We may share your information in the following limited circumstances:

• Service providers: We share data with third-party vendors who provide cloud hosting, payment processing, data analytics, and customer support services.
• Legal compliance: We may disclose information if required to do so by law, court order, or lawful requests by public authorities.
• Business transfers: In the event of a merger, acquisition, or asset sale, your personal data may be transferred as a business asset.

6.1 Security Measures

We implement industry-standard technical and organizational measures to protect your data, including encryption in transit (TLS) and encryption at rest (AES-256). However, no method of transmission over the internet or electronic storage is 100% secure.

6.2 Retention Periods

We retain your account information for as long as your account is active. AI Input Data used for model training is typically aggregated or pseudonymized and retained in accordance with our training lifecycle policies. Connected Platform Data is retained for as long as the corresponding account remains connected and is deleted within 30 days of disconnection. You may request deletion of your data at any time.

Depending on your location (such as the GDPR in Europe or the CCPA in California), you may have the following rights regarding your personal data:

• Right to access: Request a copy of the personal data we hold about you.
• Right to deletion: Request that we delete your personal data and account.
• Right to opt-out of AI training: Exercise your right to prevent your conversational data and inputs from being used to train our generalized AI models.
• Right to correction: Request that we correct any inaccurate or incomplete information.

To exercise any of these rights, reach us through our contact page.

We may update this Privacy Policy from time to time to reflect changes in our technology or legal requirements. We will notify you of any material changes by posting the new Policy on this page and updating the "Effective Date" at the top.

If you have any questions or concerns about this Privacy Policy or our data practices, please contact our Data Protection team by mail or through our privacy support channels.