Privacy Policy

01Information we collect

We collect information you provide when you create an account, configure your workspace, and run the product, such as your name, business name, email, phone number, menu content, and billing details.

When your customers chat with your assistant (on your website or WhatsApp), we process the messages, contact details they share, and order or booking information needed to fulfil the conversation.

• Account & billing data, name, email, business details, subscription status.
• Workspace content, menus, FAQs, settings, and team members you add.
• Conversation data, customer messages, captured leads, and orders.
• Technical data, IP address, device/browser info, and usage logs.

02How we use information

We use data to provide and improve the service: powering the AI assistant, capturing and routing orders, sending notifications you enable, processing payments, and keeping the platform secure.

We do not sell your data or your customers' data. We do not use your conversation content to train third-party foundation models.

03Analytics, cookies & local storage

On ZiaPilot's first-party website and application, optional Google Analytics measurement loads only after you select Allow analytics. It records sanitized page paths, campaign labels, and product actions such as a completed signup or demo request. We do not send values entered into forms, restaurant names, email addresses, phone numbers, customer messages, or payment session identifiers to marketing analytics.

We store your analytics choice in your browser so it is remembered. You can reopen Privacy choices in the website footer at any time. Selecting Only necessary stops optional analytics; storage needed for authentication, security, saved product state, and requested workflows remains active.

White-label restaurant storefronts do not load ZiaPilot's Google marketing analytics. They may use a short-lived, pseudonymous browser journey identifier to connect menu, cart, and checkout steps so the restaurant can understand whether its ordering experience works. This journey telemetry does not include form contents or contact details.

04AI processing

Customer messages are sent to our AI providers solely to generate a reply for that conversation. We send the minimum context required and do not permit providers to retain your content for their own model training.

05Sharing & sub-processors

We share data only with vendors that help us run the service, for example cloud hosting, AI model providers, payment processing (Stripe), email/SMS delivery, and WhatsApp messaging. Each is bound by contract to protect your data.

We may disclose information if required by law or to protect the rights, safety, and security of our users and platform.

06Data retention

We keep account and workspace data for as long as your account is active. You can delete conversations and customer records from your dashboard, and we delete or anonymise data after account closure, subject to legal retention requirements.

07Your rights

Depending on your region, you may have the right to access, correct, export, or delete your personal data. Restaurant owners act as the controller for their customers' data; we process it on their behalf.

To make a request, contact us at [email protected].

08Security

We protect data with encryption in transit, tenant isolation, scoped access controls, and audit logging. See our Security page for more detail.

09Contact

Questions about privacy? Email [email protected] and we'll respond promptly.