Privacy

This policy explains how Zeppli collects, uses and shares information when you use our website, when you build a demonstration assistant, and when your customers message a WhatsApp assistant built with Zeppli.

What we collect from you

What you type in. When you build a demonstration assistant we collect your name, business name, WhatsApp number, email and website address, and anything you write in the box for what your website does not say. If you become a customer, we keep the same details to run your account. The form is received by Netlify, which hosts our servers for it, and what you send is stored in a database run by Supabase.

With that form we also send the query part of the web address you arrived on, so we can tell which advertisement or page sent you. Apart from the measurement tags described under Cookies and measurement below, nothing is collected from you by simply reading a page here.

The WhatsApp assistant

When you set up a Zeppli assistant on your own WhatsApp Business number, the messages your customers send to that number, and the replies the assistant writes back, pass through our systems so the assistant can work. Those conversations are not ours. They belong to you and to your customer, and we process them only to run the service you asked for. Our terms set out that split in full: for your customers' messages, you are the data fiduciary and we are the processor.

What passes through the assistant

• Your customer's WhatsApp number and profile name, given to us by WhatsApp when they message the assistant.
• The content of their messages and the assistant's replies, kept as conversation history so the assistant can follow the thread and recognise them if they return.
• A voice note your customer sends, and a spoken reply where the assistant answers by voice.
• Any enquiry detail your customer chooses to share, such as their name, email or what they are looking for.

Who we share it with

To run the assistant, message content is shared with the processors named below, and with no one else:

• Meta the WhatsApp Business Platform, which delivers the messages between the assistant and your customer.
• Anthropic provides the model that writes the assistant's replies. Anthropic's commercial terms state that they do not train models on data sent through their API.
• Sarvam AI an Indian speech provider, which turns a voice note your customer sends into text so the assistant can read it, and turns a reply into speech when the assistant answers by voice. It sees message content only when a voice note is sent or a spoken reply is made.
• Railway is where the assistant and the rest of the service run.
• Supabase runs the database behind your account and the dashboard where you read your conversations, so a conversation passes through it whenever you open one.
• Resend sends email notifications, for example when a conversation needs a person to step in.

We do not sell this data, use it for advertising, or share it with any other business.

How long we keep it, and how to delete it

We keep WhatsApp conversation history for up to 24 months from the last message in that conversation, then delete it.

A customer can ask for their conversation to be deleted sooner by messaging the assistant and asking for deletion, or by emailing support@paizah.com with the WhatsApp number used. If you are the Zeppli account holder, you can ask for the same by emailing support@paizah.com from the address on your account, naming the conversation to delete, and we will carry it out. We confirm deletion within 30 days, and once a conversation is deleted we cannot recover it.

Cookies and measurement

When they are switched on, this website uses three measurement tags:

• Google Analytics 4, from Google, which counts visits and the pages read.
• The Google Ads tag, from Google, which tells us when a visit that began with one of our Google adverts goes on to request a demonstration.
• The Meta Pixel, from Meta, which does the same for our adverts on Facebook and Instagram.

These tags set cookies in your browser, and what they measure is sent to Google and to Meta, who are the recipients of this website's measurement data. The tags run on this website only. They never see the messages that pass through a Zeppli assistant, which is why Google is not in the list of processors above and Meta is there only for WhatsApp.

What the tags send: that a page was viewed; that a demonstration was requested, with a random reference number so that one request is not counted twice; and the click identifier an advert adds to the web address when you arrive from one (gclid, gbraid or wbraid from Google, fbclid from Meta). Like any request your browser makes, each one also carries your IP address and your browser's type and language. No name, email address or phone number is ever given to any tag, including what you type into the demo form.

If you are in the European Economic Area, the United Kingdom or Switzerland, we ask before any of these tags may set a cookie, and you can decline. We tell where you are from your device's time zone, read on your device, and Google applies its own check by location as well. Until you choose, and if you decline, no Google or Meta cookie is set and the Meta Pixel is not loaded at all. Google's tags still load, and may send a signal that a page was viewed or a demonstration requested, without setting or reading any cookie.

Visitors elsewhere are not asked, and the tags run when a page loads. Anyone, anywhere, can change their choice at any time with Cookie settings at the foot of every page. Declining also removes the cookies these tags have set under this website's address. Your choice is kept in your browser's local storage, and clearing your browser data clears it.

The other scripts that run here are all ours. The one in the page head decides which price list to show you: it reads your device's own time zone to pick a currency, and a currency preference held in your browser's local storage if there is one. A second small script reads your browser's language setting to offer this site in that language, and remembers the language you choose, or that you declined, in the same local storage. A third keeps the query part of the web address you first arrived on in this browser tab's session storage, so that it still goes with the demo form if you fill it in on another page; it is gone when you close the tab. None of these sends anything to us or to anyone else, and clearing your browser data clears them. The last is the demo builder itself, which sends us what you type when you press the button and nothing before that.

If we add any other tag or cookie, this page changes before the script does, and it will say what was added and what it collects.

Security

We take reasonable measures to protect the information described on this page, though no method of transmission over the internet is completely secure.

These pages describe Zeppli as it works today, without a self-serve console. Cancellation and account requests go through support@paizah.com until the console exists. When it does, some of this will move there, and we will tell current customers before it does.