Effective date: 21 June 2026 · Governed by the laws of Kenya
At zenai, we take your privacy seriously. This policy explains how we collect, use, and protect your data when you use our AI customer operations platform. It covers both business operators who sign up to zenai and their end-customers who interact with zenai-powered workflows.
zenai ("we", "us", or "our") operates zenai.pro and related services. This Privacy Policy describes how we collect, use, disclose, and safeguard information when you use our AI customer operations platform. By using zenai, you consent to the practices described in this policy.
We collect: (a) Account information — business name, owner name, email address, role, and WhatsApp Business phone number you provide at registration; (b) WhatsApp message data — message content and metadata received via the Meta WhatsApp Business API, processed to generate AI responses and stored as conversation history for the dashboard; (c) Business configuration — intent scripts, product catalog, booking settings, bot personality settings, uploaded images, and other content you create within the platform; (d) Billing information — M-Pesa phone numbers, payment references, subscription status, and transaction metadata processed via TUMA; (e) Technical and diagnostic data — IP address, browser/device data, error logs, and product analytics events collected when you use the website or dashboard.
We use collected information to: deliver and operate the zenai service; route customer messages through the AI pipeline and generate automated responses; display conversation history and analytics in your dashboard; process subscription payments; send transactional emails (account alerts, billing receipts, and service notifications); provide customer support; improve the platform through aggregated, anonymised analytics; and comply with applicable legal obligations. We do not sell your personal data or use it for advertising.
When an end-customer sends a message to a channel connected to zenai, that message is transmitted through the zenai pipeline. Messages may be processed by AI providers to generate or improve a response. Message content is stored in our database as part of the conversation record and is retained per the schedule in Section 6. You, as the business operator, are the data controller for your end-customers' messages; zenai acts as a data processor on your behalf.
zenai integrates with third-party processors including: Meta / WhatsApp for WhatsApp message delivery and embedded signup; AI providers for response generation and fallback; TUMA for M-Pesa subscription payments; Resend for transactional and lifecycle email; Cloudinary and Cloudflare R2 for uploaded media and file storage; Google OAuth and Google Calendar when you connect those integrations; Sentry for error monitoring; PostHog for product analytics; and Hetzner for cloud infrastructure. We do not sell personal data or use it for third-party advertising.
We retain account and configuration data while your account is active, plus up to 30 days after cancellation to allow reactivation unless you request deletion earlier. Conversation message records are retained for 90 days by default and then purged by our retention job; this period may be adjusted where a customer contract or legal obligation requires it. Uploaded product/avatar media is retained while the related account or record remains active. Billing records are retained for 7 years for tax, audit, and financial compliance. You can request deletion of eligible account data by emailing support@zenai.pro or using the account deletion flow.
You have the right to: (a) Access — request a copy of the personal data we hold about you; (b) Correction — request correction of inaccurate or incomplete data; (c) Deletion — request erasure of your personal data, subject to legal retention obligations; (d) Portability — receive your data in a structured, machine-readable format; (e) Objection — object to certain processing activities. To exercise any of these rights, email support@zenai.pro. We will respond within 30 days. End-customers of businesses using zenai should direct their requests to the relevant business, which is the data controller for those conversations.
zenai uses an essential HttpOnly session cookie for dashboard authentication, a non-sensitive cookie for routing state, and local storage for preferences and cookie-consent records. Legacy session storage may be used temporarily for older handoff links. If analytics is enabled, PostHog may store analytics identifiers to help us understand product usage. We do not use advertising cookies or sell analytics data. See our full Cookie Policy at zenai.pro/cookies.
We implement security measures including TLS for data in transit, hashed passwords and reset/invite tokens, role-based access controls, session revocation, rate limiting, webhook verification where supported, and operational monitoring. Access to production systems is limited to authorised personnel. No system is completely secure, so you should use a strong password, enable two-factor authentication where available, and notify us immediately of any suspected unauthorised access.
zenai integrates with the Meta WhatsApp Business API. We do not use Facebook Login or access Facebook user profile data. We do not receive or store Facebook social graph data. If you connected your Meta account during WhatsApp Business setup, you may request deletion of data related to our Meta app integration via zenai.pro/data-deletion.
zenai is operated from Kenya. Data may be transferred to and processed in the European Union (Hetzner infrastructure in Germany) and the United States (Groq AI and Cloudinary servers). These transfers are covered by appropriate data processing agreements with our sub-processors.
We may update this Privacy Policy from time to time. We will notify you of significant changes via email at least 14 days before they take effect. Continued use of zenai after the effective date constitutes acceptance of the updated policy.
This Privacy Policy is governed by the laws of Kenya, including the Data Protection Act, 2019. Any disputes arising under this policy shall be subject to the jurisdiction of the courts of Nairobi, Kenya.
For privacy-related questions, data requests, or complaints, contact our privacy team at: support@zenai.pro — zenai, Nairobi, Kenya.
© 2026 zenai · All rights reserved · Back to home