Security and your data

A short version of how we protect your business and your customers. The privacy policy is the full, binding text.

Encryption

Encrypted in transit (TLS) and at rest. Privacy policy, Section 9

Sign-in and access

Sign-in through Clerk with multi-factor authentication available; owners and team members have separate roles; the chat widget only runs on the websites you approve. Privacy policy, Section 9

No AI training on your data

Your business information and your customers’ conversations are not used to train AI models. Privacy policy, Section 3

We process it for you

For your customers’ information we act as your processor: we use it only to run your assistant, on your instructions, and one business’s data is never visible to another. Privacy policy, Section 4

Deletion

Ask for deletion at any time. When an account is closed, its data is deleted or anonymized within 30 days, except records the law requires us to keep. Privacy policy, Sections 10 and 11

PIPEDA

Zalena is a brand of Datalya Inc., an Ontario company. We handle personal information under Canada’s PIPEDA, with a Privacy Officer, access and correction within 30 days, and breach reporting to the Privacy Commissioner. Privacy policy, Canadian residents

Who else handles it

The service providers we use, such as hosting, AI models, telephony and payments, are listed in our privacy policy. Privacy policy, Section 6

Need data residency details or a data processing agreement for your business? Write to privacy@zalena.ai.