Privacy Policy

Ziris ("Ziris", "we", "us") provides an AI assistant that helps businesses answer customers and book appointments on WhatsApp, Messenger and Instagram. This policy explains what personal data we handle and how. For the account information of the businesses that sign up, we act as a data controller. For the messages and contacts a business exchanges with its own customers, we act as a data processoron that business's behalf.

• Account & organization data: name, email, business name, and role, provided when you sign up (including via Google sign-in).
• Channel connections: the identifiers and access tokens for the WhatsApp, Messenger or Instagram accounts you connect, used solely to send and receive your messages.
• Conversations & contacts: the messages, media and customer contact details (such as name and phone number) that flow through your connected channels, processed on your behalf.
• Billing data: your plan and payment status. Card and bank details are handled by our payment provider — we do not store them.
• Technical data: logs, device and browser information, and push-notification tokens for devices you opt in from.

• To operate the service — delivering, answering and routing messages.
• To generate assistant replies and appointment bookings using AI.
• To send you product notifications you have enabled.
• To process billing and manage your subscription.
• To provide support, maintain security, and prevent abuse.

To generate replies, relevant conversation content is sent to our AI provider to produce a response. Providers process this data under their own terms and do not use your content to train foundation models where such controls are available to us. You can turn the assistant off at any time, per conversation or entirely.

We share data only with the providers needed to run Ziris, under appropriate agreements:

• Meta Platforms — to deliver and receive WhatsApp, Messenger and Instagram messages.
• Supabase — application hosting, database and storage.
• Our AI provider — to generate assistant replies.
• Resend — to send account and notification emails.
• Safepay — to process subscription payments.

We do not sell your personal data.

Our infrastructure may store and process data in data centres outside your country (for example, Supabase in Singapore). Where required, we rely on appropriate safeguards for these transfers.

We keep account and conversation data for as long as your organization is active, and for a reasonable period afterwards to meet legal, accounting and security obligations. You can ask us to delete your data as described below; deleting an organization removes its associated records.

Access to data is isolated per organization and restricted by role. Channel access tokens are stored server-side and never exposed to the browser. We use encryption in transit and follow industry-standard practices, though no method of transmission or storage is completely secure.

Depending on your location, you may have rights to access, correct, export or delete your personal data, and to object to or restrict certain processing. If a business used Ziris to message you as a customer, please contact that business first, as they control that conversation. To exercise your rights with us, contact us at privacy@ziris.ai.

We use only the cookies necessary to keep you signed in and to remember your preferences (such as light or dark theme). We do not use advertising cookies.

We may update this policy from time to time. When we make material changes, we will update the date above and, where appropriate, notify you.

Questions about this policy or your data? Email us at privacy@ziris.ai.