Privacy Policy

1. Data Controller vs. Data Processor Roles

Under global data privacy frameworks (including GDPR, UK GDPR, and CCPA/CPRA):

• Zendeet as Data Controller: We act as a Data Controller for account administration information (such as your billing contact, email, password hashes, and usage analytics).
• Zendeet as Data Processor: For all data you import or generate inside your workspace (such as customer contacts, deal records, conversation audio, SMS logs, and knowledge base uploads), you act as the Data Controller, and Zendeet processes such data exclusively upon your documented instructions.

2. Information We Collect

We collect information across four main categories to deliver high-availability autonomous revenue operations:

3. AI Processing & Zero Model Training Guarantee

We believe in absolute data sovereignty. When your AI agents process text, documents, or voice conversations:

• We route requests through zero-data-retention enterprise inference endpoints.
• Your knowledge base files, customer dialogues, and proprietary company facts are never stored by inference providers to train foundation models.
• Vector embeddings are partitioned by tenant UUIDs with strict multi-tenant access controls.

4. How We Use & Protect Your Information

We process your data strictly to provide, maintain, and optimize the Zendeet platform, specifically to:

• Execute autonomous voice calls, automated SMS follow-ups, and email nurture workflows.
• Synthesize real-time analytics on lead conversion rates, agent sentiment, and pipeline velocity.
• Detect, prevent, and mitigate fraudulent access, spamming, and telecommunication abuse.
• Comply with statutory tax, invoicing, and accounting obligations.

5. Enterprise Security Standards

Zendeet implements rigorous technical, organizational, and physical safeguards:

• Encryption at Rest & Transit: All data is encrypted at rest using AES-256 and in transit using TLS 1.3 with automated certificate rotation.
• Role-Based Access Control (RBAC): Granular permissions allow workspace owners to restrict member access to sensitive contacts, billing records, or API credentials.
• Automated Backups: Point-in-time database backups stored in geographically redundant secure vaults with 30-day snapshot retention.

6. Your Global Privacy Rights (GDPR, CCPA/CPRA)

Depending on your location, you possess comprehensive statutory rights over your personal data:

• Right to Access & Portability: Request a structured, machine-readable export of all your workspace data.
• Right to Rectification: Correct any inaccurate or incomplete personal records directly within the dashboard.
• Right to Erasure ("Right to Be Forgotten"): Request permanent purging of your account and all associated customer datasets.
• Right to Restrict or Object: Restrict certain processing activities or opt-out of marketing communications.

To exercise any of these rights, email our Data Protection Officer at privacy@zendeet.com. We respond to all verified inquiries within 14 business days.

7. Data Retention & Account Deletion

We retain your workspace data for as long as your subscription remains active. Upon subscription termination, your workspace enters a 30-day grace period during which you may export your data. Following this period, all tenant databases, vector embeddings, and audio recordings are permanently destroyed from our production servers.

8. Privacy Policy Updates & Inquiries

We may periodically update this Privacy Policy to reflect enhancements in our architecture or legislative modifications. We will notify active workspace administrators of any material changes via email or in-app notification.

For any questions, reach our privacy team at privacy@zendeet.com or mail us at: Zendeet Technologies Inc., Attn: Privacy Officer, 548 Market St, Suite 89201, San Francisco, CA 94104.