Privacy Policy

1. What we collect

• Account info: name, email, and login credentials for you and members you add.
• Beta access request info: name, work email, company, use case, WhatsApp mobile number, and WhatsApp Business confirmation when you request access.
• WhatsApp data you connect: messages, contacts, and conversation metadata for the numbers you link, so the Service can display and organize them and send the replies you press Send on inside the 24-hour customer window.
• Sales data you create: pipeline stages, assignments, follow-ups, notes, labels.
• Usage data: basic logs and analytics events needed to run, secure, and improve the Service.

2. How we use it

To provide the Service — show your conversations, organize leads, surface follow-ups, enable team visibility within your organization, and keep the Service secure. We do not sell your data.

3. Legal basis and customer role

For account and service data, we rely on contract, legitimate interests, consent where required, and legal obligations. For WhatsApp conversations and contacts you connect, you are generally the controller and Zenkoo acts as your processor. You are responsible for having a lawful basis, notices, and consents required for your contacts and team.

4. Team visibility

Within your organization, owners and managers can view conversations on connected company numbers and the work of assigned salespeople. Salespeople see only the account(s) assigned to them. You are responsible for informing your team and obtaining any consent required where you operate.

5. Storage & security

Data is stored on our servers and protected with reasonable technical and organizational measures, including encryption in transit and access controls. No method of storage is 100% secure.

6. Sharing

We share data only with service providers needed to run Zenkoo, as required by law, or with your direction. We do not sell personal data. Our current subprocessors are listed at /subprocessors.

7. Analytics & cookies

We use essential cookies for sign-in and security. NoClutterCRM manages optional website analytics and advertising measurement. Enabled services are listed in its privacy controls and load only after you accept their respective categories. These tools may use cookies or similar identifiers and receive usage events such as page views, feature clicks, request-access conversions, device/browser details, and session diagnostics. We do not intentionally send message text, contact details, phone numbers, emails, notes, or WhatsApp identifiers to these analytics tools. When optional services are enabled, you can change your choices through the NoClutterCRM privacy controls.

8. Retention & deletion

We keep beta access requests only while evaluating onboarding and contacting applicants, then delete them when they are no longer needed, subject to legal, security, and operational requirements. We keep account data while your account is active. Default retention settings keep message records for up to 365 days and media for up to 30 days unless configured differently. You can disconnect a number or delete an account, which removes its associated stored data subject to backup, security, legal, and operational limits. See /data-requests for the request workflow.

9. International transfers

Zenkoo production infrastructure is currently hosted in Germany. Some services, such as optional analytics or authentication providers, may involve international transfers. Where GDPR requires safeguards for transfers outside the EEA, Zenkoo should rely on appropriate mechanisms such as adequacy decisions or Standard Contractual Clauses.

10. Your rights

Depending on your location, you may have rights to access, correct, export, delete, restrict, or object to processing of your personal data, and to withdraw consent where processing is based on consent. Contact us or use the workflow at /data-requests to exercise them.

11. Contact

For privacy questions or requests, email support@zenkoo.app.