Privacy Policy

Zivonel ("Zivonel," "we," "us") provides a platform for building AI agents trained on your documents and website content, and deploying them through an embeddable chat widget, WhatsApp, and our own API. This policy explains what information we collect, why, and how it's used across zivonel.com, the Zivonel dashboard, and every channel a Zivonel agent is deployed on.

Zivonel customers ("you," the business using Zivonel) and the people who message a Zivonel-powered agent ("end users" — your customers, site visitors, or WhatsApp contacts) are both covered by this policy, in the sections relevant to each.

From you, as a Zivonel customer:

• Account details: name, email address, and authentication identity, handled via our authentication provider (Clerk).
• Billing information, processed through our payment provider (Paystack) — we do not store your card details ourselves.
• The documents, URLs, and Q&A pairs you upload to train an agent.
• If you connect WhatsApp: your WhatsApp Business Account ID, phone number ID, Meta Business ID, the Meta account ID of whoever completed the connection, and an access token used to send and receive messages on your behalf. The access token is stored encrypted (AES-256-GCM) and is never exposed to your browser after the initial connection.

From people who message an agent you've deployed (your end users):

• Message content and, for WhatsApp conversations, the sender's phone number — processed in order to generate a reply and shown to you in your dashboard as part of that conversation's history.
• Any contact details an end user voluntarily provides during a conversation (for example, through a lead-capture form or a booking flow you've configured).

Automatically, from anyone using our sites:

• Standard technical data — IP address, browser type, device information, and usage patterns, collected to operate and secure the service.

• To operate the service: authenticate you, run your agents, deliver and receive messages, and generate AI responses.
• To process payments and manage your subscription.
• To communicate with you about your account, changes to the service, or support requests.
• To maintain security, prevent abuse, and enforce rate limits.
• To comply with legal obligations, including requests we receive from Meta relating to your WhatsApp connection.

We do not use your uploaded documents or your end users' message content to train third-party foundation models.

We share data only as needed to provide the service, with the following categories of provider:

• Meta / WhatsApp Business Platform — to deliver and receive WhatsApp messages on your behalf, once you've connected a number.
• AI model providers (OpenAI, Google, Groq) — to generate agent responses. Message content and relevant document context are sent to whichever provider your agent is configured to use.
• Pinecone — to store vector embeddings of your uploaded documents, enabling retrieval.
• Clerk — for authentication.
• Paystack — for payment processing.
• Infrastructure providers (our database and hosting providers) — to store and run the service.

We do not sell personal data.

We retain account and conversation data for as long as your account is active, plus a limited period afterward to allow recovery and meet legal obligations. If you disconnect WhatsApp, your access token and connection details are deactivated immediately and deleted according to our standard retention schedule.

You can request access to, correction of, or deletion of your data at any time.

• If you connected WhatsApp, revoking Zivonel's access directly from your Facebook account settings, or disconnecting from within the Zivonel dashboard, deactivates that connection and its stored credentials automatically.
• For any other deletion or access request, contact us at [email protected].

Access tokens and other credentials are encrypted at rest. We use rate limiting, request authentication, and webhook signature verification to protect the service from abuse. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security.

Zivonel is not directed at children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, contact us and we will delete it.

Zivonel is based in Ghana. By using the service, you consent to your information being processed in Ghana and by the third-party providers listed above, which may be located in other countries.

We may update this policy from time to time. If we make material changes, we'll notify you by email or through the dashboard before they take effect.

Questions about this policy or how your data is handled: [email protected].