Privacy Policy

Depending on how you use the Services, we may collect:

• Account and workspace data: name, email address, phone number, authentication details, role, business name, industry, country, language, and workspace settings.
• Customer and transaction data: message content, contact identifiers, channel profiles, order details, products, delivery information, appointment details, service preferences, and support history submitted through a customer workspace.
• Integration data: channel identifiers, OAuth grants, webhook events, provider configuration, calendar or courier references, and metadata needed to connect third-party services. Secret credentials are intended to be encrypted and write-only where supported.
• Billing data: plan, billing country, payment status, transaction reference, invoices, and limited payment metadata. Hosted payment providers process full card, wallet, or bank credentials; we do not need to store those credentials.
• Usage and device data: IP address, browser and device type, operating system, timestamps, pages or features used, referring page, error logs, and security events.
• Communications: inquiries, survey responses, support messages, feedback, and records of our correspondence.

We receive information directly from you, from workspace owners and authorized users, automatically when the Services are used, and from connected providers such as messaging channels, identity providers, AI providers, payment processors, calendars, and couriers. We may also receive business contact information from public sources or referral partners where permitted by law.

We use personal information to:

• provide, configure, maintain, and improve the Services;
• route messages, generate authorized AI responses, create orders or bookings, and complete workflows requested by a workspace;
• authenticate users, enforce permissions, prevent abuse, and investigate security incidents;
• process subscriptions, validate payments, provide support, and send operational notices;
• understand product performance and develop features using aggregated or de-identified information where practical;
• comply with law and enforce our agreements; and
• send product news or marketing where permitted, with an option to opt out of marketing communications.

Where a legal basis is required, we rely on performance of a contract, our legitimate interests in operating and securing the Services, compliance with legal obligations, or consent. You may withdraw consent at any time, without affecting processing already performed. Some information is required to provide an account or requested feature; without it, that feature may not be available.

Workspaces may enable AI to classify messages, draft or send replies, retrieve workspace knowledge, and invoke approved commerce, booking, or support tools. Prompts can include conversation content and relevant workspace records. Depending on workspace configuration, this data may be sent to qzenchat’s configured AI provider or to a provider selected by the workspace using its own credentials.

AI output can be incomplete or inaccurate. Workspace owners are responsible for selecting appropriate settings, providing required notices, and using human review where decisions could materially affect a person. We do not use customer-controlled message content to train general-purpose AI models unless the relevant customer has expressly agreed to that use.

We may disclose information to:

• infrastructure, hosting, communications, support, security, analytics, and professional-service vendors working for us;
• providers enabled by a workspace, including messaging networks, AI model providers, payment processors, calendars, and couriers;
• other authorized members of the same workspace or a white-label deployment operator;
• authorities or other parties when reasonably necessary to comply with law, protect rights and safety, or address fraud and abuse;
• an acquirer, investor, or successor in connection with a financing, merger, reorganization, or sale, subject to appropriate safeguards.

We do not sell personal information for money. We also do not share personal information for cross-context behavioral advertising as those terms are defined by certain privacy laws.

qzenchat and its providers may process information in countries other than the country where it was collected. Privacy laws may differ in those locations. Where required, we use recognized transfer safeguards, such as contractual protections, and take the workspace’s selected provider and deployment region into account.

We retain information for as long as needed to provide the Services, meet contractual commitments, resolve disputes, maintain security, enforce agreements, and comply with legal obligations. Retention periods depend on the data type, workspace settings, provider capabilities, and legal requirements. Following deletion or account closure, information may remain for a limited period in backups, security logs, fraud-prevention records, or records we must retain by law. Workspace owners should configure retention suitable for their own customers and jurisdiction.

We use administrative, technical, and organizational measures designed to protect information, including access controls, workspace isolation, encryption in transit, credential protection, audit logging, and monitoring where appropriate. No service is completely secure, and we cannot guarantee that unauthorized access or loss will never occur. Users must protect their credentials and promptly report suspected account compromise.

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a portable copy of personal information, and to appeal a denied request or complain to a data protection authority. You may also opt out of marketing email by using its unsubscribe link.

To make a request about qzenchat-controlled information, contact us using the details below. We may verify your identity and authority. If your information was submitted to a qzenchat customer, contact that customer first; we will assist the customer as required by our agreement and applicable law. Authorized agents may submit requests where local law permits.

The Services are intended for businesses and are not directed to children under 16. We do not knowingly collect personal information directly from children for account creation. Customers that use the Services to process information about minors are responsible for having an appropriate legal basis, providing required notices, and enabling suitable safeguards.

We may update this policy as the Services or legal requirements change. We will post the revised policy here, change the effective date, and provide additional notice when required. Material changes apply prospectively unless law permits otherwise.

Questions, privacy requests, and complaints may be sent to hello@qzenchat.com or through our contact page. Please write “Privacy” in the subject line. qzenchat is operated by Quanteron; the applicable contracting entity and business address are also identified in your order form or service agreement.