Draft — the legal text is pending approval.
Privacy policy
How Zana uses the data of the businesses that use it and of the customers who message them on connected channels.
Updated 2026-10-04
Who we are
Zana is a platform that helps businesses answer customers, sell products and book appointments on Instagram, Messenger, WhatsApp, TikTok and their own website.
For business account data we are the data controller. For a business’s messages and customer data we act on behalf of that business, as a processor.
What data we process
Account data: name, email and business details such as name, language, currency and time zone.
Data from connected channels: account and page identifiers, messages customers send to the business, display names and attachments, and access tokens, which are stored encrypted.
Technical data: limited security and operations logs, without passwords, tokens, addresses or message content.
Why we use it
To provide the service: showing messages to the business, assistant replies, the catalog, orders and bookings.
For security, abuse prevention and legal obligations. We do not sell data and we do not use customer messages for advertising.
Who we share it with
Providers that help us operate (hosting, email, AI models), only as far as needed and under confidentiality obligations.
Connected platforms (Meta, TikTok) only to send the replies the business, or the assistant on its behalf, sends.
How long we keep it
You can request account deletion in the app (Settings › Delete account); we process requests within 30 days, as described on the Data deletion page.
Other retention periods, backup removal and legal exceptions still require owner approval before publication.
Your rights
You can request access, correction, deletion or restriction of processing, and complain to the relevant data protection authority.
A business’s customers can contact that business or us; we will forward the request to the business.