Privacy Policy

Last updated: March 3, 2026

1. Data Controller

ZeniwApp is a solution published by Zenidata Technologies Inc, a corporation incorporated under the laws of Quebec, Canada.
Registered office: 1417 rue Emond, Québec, QC G3K 1R5, Canada
Person responsible for the protection of personal information: Bruno Soufo
Website: zenidata.ai.

For any questions regarding the protection of your personal data, or to exercise your rights, please contact our Privacy Officer at: privacy@zeniwapp.com.

2. Data Collected

We collect the following categories of personal data:

• Contact data: name, email address, phone number, company name (when registering or via the contact form)
• Usage data: pages visited, site interactions, session data (via functional cookies)
• WhatsApp Business data: when ZeniwApp is used to manage WhatsApp communications on behalf of business clients, we process:
  • Phone numbers of WhatsApp contacts
  • Message content (text, media files shared in conversations)
  • Message metadata (timestamps, delivery status, read receipts)
  • WhatsApp profile names associated with contacts
• Technical data: IP address, browser type, operating system (collected automatically when visiting the site)
• Payment and billing data: billing name, address, last four digits of payment card (processed by our payment provider; we do not store full card details)

3. Purposes of Processing WhatsApp Business Data

ZeniwApp uses Meta’s WhatsApp Business API. WhatsApp data collected through the platform is processed exclusively for the following purposes:

1. Delivering automated messaging services on behalf of our business clients
2. Providing chatbot and AI assistant functionality within client WhatsApp accounts
3. Conversation analytics and reporting made available to business clients through the ZeniwApp platform
4. Service improvement, troubleshooting, and ensuring reliability of the platform

WhatsApp data is not used for advertising, profiling, or shared with any third party for marketing purposes. ZeniwApp complies with the WhatsApp Business Policy, the WhatsApp Privacy Policy, and the Meta Platform Terms.

4. Legal Bases for Processing

• Performance of a contract: processing your data to provide the ZeniwApp service you have subscribed to
• Consent: for marketing communications and non-essential cookies
• Legitimate interest: service improvement, security, fraud prevention
• Legal obligation: retention of billing and financial records as required by applicable law

5. Data Retention Periods

• Account data: retained for the duration of the subscription + 3 years after termination
• WhatsApp conversation data: retained 12 months by default; configurable per client subscription plan; deleted upon client account termination or upon verified deletion request
• Contact form data: retained 2 years after last contact
• Technical and security logs: retained 1 year
• Billing data: retained 6 years in compliance with Canada Revenue Agency (CRA) requirements for financial records

6. Third-Party Sharing

Your data may be shared with the following categories of recipients:

• Meta Platforms (WhatsApp): message transmission occurs through Meta’s infrastructure per the WhatsApp Business Terms of Service and Meta’s Privacy Policy
• Hosting provider: Elestio / Hetzner infrastructure; servers may be located outside Canada; transfers are protected by contractual safeguards (Data Processing Agreements)
• AI service providers: third-party AI providers used to power chatbot functionality, each bound by a Data Processing Agreement (DPA)
• Payment processors: for subscription billing, under their own privacy policies and DPAs
• Analytics tools: placed only after your explicit consent via the cookie banner

We never sell your personal data to third parties.

7. Data Deletion

You can request deletion of your personal data at any time by contacting us at privacy@zeniwapp.com. Business clients may also delete conversation data directly through the ZeniwApp platform dashboard. ZeniwApp honors Meta’s data deletion callbacks as required under the Meta Platform Terms.

We will process deletion requests within 30 days, subject to retention obligations required by applicable law.

8. Your Rights under Quebec’s Law 25

Quebec’s Act to Modernize Legislative Provisions Respecting the Protection of Personal Information (“Law 25”) grants you the following rights with respect to your personal information held by Zenidata Technologies Inc:

• Right of access (s. 27): obtain a copy of the personal information we hold about you
• Right to rectification (s. 28): have inaccurate, incomplete, or ambiguous information corrected
• Right to de-indexation / right to be forgotten (s. 28.1): request that information collected when you were a minor, or that is used contrary to law, be de-indexed or re-disseminated
• Right to data portability (s. 27, in force September 2024): receive your information in a structured, commonly used, technological format
• Right to withdraw consent (s. 34): withdraw your consent to collection and use at any time, subject to legal or contractual restrictions

The person responsible for the protection of personal information at Zenidata Technologies Inc is Bruno Soufo, reachable at: privacy@zeniwapp.com.

Privacy incident notification: If a confidentiality incident presents a risk of serious injury to an individual, Zenidata Technologies Inc will notify the Commission d’accès à l’information du Québec (CAI) and the affected individuals, as required by Law 25 (s. 3.5). For more information about the CAI: cai.gouv.qc.ca.

9. Your Rights under GDPR (International Users)

ZeniwApp serves clients internationally, including in countries that recognize or reference the General Data Protection Regulation (GDPR). If you are located in the European Union or a country that applies GDPR-equivalent protections, you have the following rights:

• Right of access (Art. 15): obtain a copy of the personal data we hold about you
• Right to rectification (Art. 16): correct inaccurate or incomplete data
• Right to erasure (Art. 17): request deletion of your data (“right to be forgotten”)
• Right to data portability (Art. 20): receive your data in a structured, machine-readable format
• Right to object (Art. 21): object to processing based on our legitimate interest
• Right to restriction (Art. 18): request temporary suspension of processing

To exercise these rights, contact us at: privacy@zeniwapp.com. We will respond within a maximum of 30 days.

If you are located in an EU member state, you also have the right to lodge a complaint with your local data protection supervisory authority.

10. International Data Transfers

Your data may be transferred outside Quebec and Canada for processing purposes (for example, to cloud infrastructure or AI service providers). Such transfers are protected by contractual safeguards, including Data Processing Agreements and, where applicable, standard contractual clauses or equivalent mechanisms recognized under Quebec law and international frameworks.

11. Cookies and Trackers

Our site uses cookies. We request your prior consent before placing any non-essential cookies (analytics).

• Strictly necessary cookies: user session, language preference, consent choice — exempt from consent requirement
• Analytics cookies: audience measurement — placed only after your explicit consent via the cookie banner

You can modify your consent at any time by clearing your browser data or by clicking “Manage cookies” (available in the footer).

12. Data Security

Zenidata Technologies Inc implements appropriate technical and organizational measures to protect your personal data, including:

• Encryption in transit (TLS) and at rest
• Role-based access controls limiting data access to authorized personnel
• Regular security reviews and monitoring

13. Children

ZeniwApp is not directed at individuals under the age of 16. We do not knowingly collect personal data from minors. If you believe a minor’s data has been collected, please contact us at privacy@zeniwapp.com and we will delete it promptly.

14. WhatsApp Business Data Processing — Detailed Disclosure

ZeniwApp uses Meta’s WhatsApp Business API to enable its business clients to automate their WhatsApp communications. In this context:

• ZeniwApp acts as a data processor for its business clients and as a data controller for its own platform operations
• Messages exchanged transit through Meta’s infrastructure and are subject to the Meta Privacy Policy
• End users interacting with ZeniwApp-powered chatbots are notified of automated messaging through the WhatsApp Business channel interface
• WhatsApp conversation data is NOT shared with any third party for advertising or marketing purposes
• ZeniwApp complies with Meta’s data deletion requirements, including honoring data deletion callbacks
• ZeniwApp operates in compliance with the WhatsApp Business Policy, the WhatsApp Privacy Policy, and the Meta Platform Terms

15. Changes to This Policy

We may update this privacy policy from time to time. In the event of a material change, we will notify you by email (if you hold a ZeniwApp account) or by a visible notice on this page. The “Last updated” date at the top of this page always reflects the current version.