Privacy Policy — D-Zero AI

1. Overview

Dailzero Technologies ("D-Zero AI," "we," "us," or "our") operates dailzero.com and related services. This Privacy Policy describes how we handle personal data of:

Business users — companies and individuals who register for and use the D-Zero AI platform
End users — customers of our business users who interact with AI agents via WhatsApp

By using our Service, you consent to the collection and use of information as described in this policy. If you are a business user deploying our Service to serve your own customers, you are responsible for ensuring your customers are informed about data practices as described in Section 3.

Our Service integrates with the WhatsApp Business Platform, operated by Meta Platforms, Inc. ("Meta"). Data transmitted through WhatsApp is also subject to Meta's Privacy Policy and WhatsApp Business Terms.

2. Data We Collect

We collect the following categories of personal data:

2.1 Business User Data

Account Information: Name, email address, phone number, business name, and password (hashed) provided during registration
Business Information: Business description, products/services, FAQs, operating hours, contact details, and response guidelines you submit to configure your AI agent
Usage Data: Pages visited, features used, login times, IP address, browser type, and device information
Payment Information: Billing records and transaction history (payment card details are processed by our payment partner — we do not store raw card data)
Communications: Messages you send to us via the contact form or email

2.2 End User Data (Your Customers via WhatsApp)

When your customers interact with your AI agent on WhatsApp, the following data is processed on your behalf:

WhatsApp Phone Number: The sender's WhatsApp-registered phone number (used as a user identifier)
Conversation Transcripts: The text content of messages exchanged between your customers and the AI agent
Message Metadata: Timestamps, message delivery status, conversation duration, and message counts
Media Content: Audio messages, images, videos, or documents shared in conversations (where applicable)
Conversation Summaries: AI-generated summaries of conversations processed via OpenAI's API

This end-user data is collected and processed by us solely to provide the Service to our business users and is handled as described in Section 3 and Section 7 below.

3. WhatsApp & Meta Data Handling

Our Service is built on the WhatsApp Business Platform API, a service provided by Meta Platforms, Inc. This section specifically addresses how data flows through Meta's infrastructure and our obligations in connection with it.

3.1 How WhatsApp Data Flows

When an end user sends a WhatsApp message to a business using D-Zero AI:

The message is transmitted through Meta's WhatsApp servers in accordance with Meta's Privacy Policy
Meta delivers the message to our platform via the WhatsApp Business API (via ElevenLabs Conversational AI)
Our AI processes the message and generates a response
The response is sent back through Meta's WhatsApp infrastructure to the end user
Conversation metadata (timestamps, status, duration) is made available to us via the WhatsApp Business API for analytics and monitoring purposes

3.2 Meta's Independent Data Processing

Meta independently processes data transmitted through WhatsApp under its own Privacy Policy. D-Zero AI does not control Meta's data practices. Meta may collect, process, and use data in accordance with its own policies, which may include:

Storing message metadata for delivery, security, and anti-abuse purposes
Using account information for business verification
Enforcing WhatsApp's Terms of Service and policies

We encourage you to review Meta's Privacy Policy to understand how they handle data on their platform.

3.3 Business User Obligations for End-User Privacy

If you are a business user deploying our Service to interact with your customers on WhatsApp, you are the data controller for your customers' personal data. You must:

Maintain your own publicly accessible Privacy Policy that discloses your use of WhatsApp and AI-powered messaging
Inform your customers that they are communicating with an AI agent before or during their first interaction
Obtain appropriate consent from your customers for WhatsApp communications as required by WhatsApp's Business Messaging Policy and applicable law
Provide your customers with a clear means to opt out of communications and honour all opt-out requests promptly
Not use WhatsApp conversation data for purposes beyond providing your customer service, including advertising, re-targeting, or selling to third parties
Comply with Meta's WhatsApp Business Messaging Policy with respect to your customers

3.4 No Data Sale to Meta or Third-Party Advertisers

We do not sell, share, or transfer WhatsApp conversation data or end-user personal data to Meta, Facebook, or any third-party advertising network for advertising or marketing purposes. Data processed through the WhatsApp Business API is used solely to operate the Service.

4. How We Use Your Data

We use your personal data for the following purposes:

To create and manage your account
To configure and deploy your AI customer service agent on the WhatsApp Business Platform
To generate AI-enhanced response guidelines using OpenAI's API
To process and respond to WhatsApp messages on your behalf through ElevenLabs Conversational AI
To provide conversation analytics and monitoring via the WhatsApp Business API
To generate conversation summaries using AI
To send transactional emails (account updates, approval notifications)
To process subscription payments and send invoices
To provide customer support
To analyse usage patterns and improve our Service
To detect and prevent fraud, abuse, and violations of Meta's platform policies
To comply with our legal obligations and Meta's platform requirements

We do not use conversation data or end-user personal data for advertising, marketing profiling, or any purpose beyond operating the Service. We do not sell your data or your customers' data to any third party.

5. Legal Basis for Processing

Under the NDPR and applicable law, we process your personal data on the following legal bases:

Contract performance: Processing necessary to provide the Service you requested, including facilitating WhatsApp-based AI interactions on your behalf
Legitimate interests: Improving the Service, detecting fraud, ensuring platform security, and complying with Meta's platform policies
Consent: Where you have explicitly given consent (e.g., marketing communications). Business users are responsible for maintaining valid consent from their end users for WhatsApp messaging
Legal obligation: Where processing is required by applicable Nigerian law or by Meta's platform policies

6. Data Sharing

We do not sell your personal data. We share data with trusted third parties only as necessary to operate the Service:

Meta / WhatsApp: Messages and conversation data are transmitted through Meta's WhatsApp Business Platform infrastructure as required to deliver the Service. See Section 7 for full details
ElevenLabs: Conversation processing and AI voice/chat agent infrastructure — conversation data is processed on their platform to generate AI responses
OpenAI: AI language model used to generate response guidelines and conversation summaries — data is processed under OpenAI's API data usage policies
Neon / PostgreSQL: Secure cloud database hosting for account and configuration data
Vercel: Application hosting and edge delivery
Resend: Transactional email delivery

All third-party processors are bound by data processing agreements and must handle your data in accordance with applicable privacy laws.

We may disclose personal data if required to do so by law, court order, or in response to a lawful request from a government or regulatory authority, including requests from Meta to enforce its platform policies.

7. Data Shared with Meta

Because our Service uses the WhatsApp Business Platform API, certain data is necessarily shared with Meta as part of normal platform operation:

7.1 What We Share with Meta

Business account information: Business name, phone number, and verification details required to operate a WhatsApp Business Account
Message content: Messages sent and received through WhatsApp are transmitted via Meta's servers. End-to-end encryption applies in standard WhatsApp; Business API messages are not end-to-end encrypted between business and Meta
Message metadata: Delivery status, timestamps, and conversation identifiers necessary for message delivery
Message templates: Template messages submitted for Meta's review and approval

7.2 What We Do Not Share with Meta for Advertising

We do not share your business configuration data, agent settings, or subscription information with Meta for advertising purposes
We do not provide Meta with data derived from WhatsApp conversations for ad targeting
We do not connect WhatsApp conversation data to Meta's advertising products (Facebook Ads, Instagram Ads, etc.)

7.3 Meta's Independent Rights

Meta has independent rights to data transmitted through the WhatsApp Business Platform as described in their own policies. D-Zero AI does not control Meta's data practices. For details on how Meta uses data, please review:

8. Data Retention

We retain your personal data for as long as your account is active and as needed to provide the Service. Specifically:

Account data is retained for the duration of your subscription plus 90 days after termination
Conversation transcripts and metadata are retained for up to 12 months, after which they are deleted or anonymised
Payment records are retained for 7 years in compliance with Nigerian financial regulations
Contact form submissions are retained for 2 years

Retention of data held by Meta (e.g., WhatsApp message metadata) is governed by Meta's own data retention policies, which are independent of our retention schedules.

You may request deletion of your data at any time by contacting support@dailzero.com.

9. Security

We implement industry-standard security measures to protect your personal data, including:

Data in transit encrypted using TLS 1.3
Passwords hashed using bcrypt with 12 salt rounds
Role-based access control limiting data access to authorised personnel
Regular security reviews and monitoring
Secure API key management for all third-party integrations including Meta's WhatsApp Business API

While we take appropriate precautions, no internet transmission is 100% secure. Please refer to our Security page for more details. Security of data within Meta's infrastructure is governed by Meta's own security practices.

10. Your Rights

Under the NDPR, you have the following rights regarding your personal data:

Right of access: Request a copy of your personal data we hold
Right to rectification: Request correction of inaccurate or incomplete data
Right to erasure: Request deletion of your personal data ("right to be forgotten")
Right to restriction: Request that we restrict processing of your data
Right to data portability: Receive your data in a structured, machine-readable format
Right to object: Object to processing based on legitimate interests
Right to withdraw consent: Withdraw consent at any time where processing is consent-based

To exercise any of these rights, contact us at support@dailzero.com. We will respond within 30 days.

For rights relating to data held by Meta (such as your WhatsApp account data), you must contact Meta directly through their privacy request portal.

10.1 End-User Rights (Your Customers)

If you are an end user (a customer who interacted with a business's AI agent on WhatsApp), your data is primarily controlled by the business you interacted with. To exercise your data rights, please contact that business directly. You may also contact us at support@dailzero.com and we will assist in directing your request appropriately.

11. Cookies

We use essential cookies to operate our Service, including session management cookies for authentication (NextAuth). We do not use advertising or third-party tracking cookies, and we do not use Meta Pixel or any Meta advertising cookies on our platform.

You can control cookie settings through your browser, but disabling essential cookies may prevent the Service from functioning correctly.

12. Children's Privacy

Our Service is not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data through our platform or through WhatsApp interactions with a business using our Service, please contact us and we will promptly delete it.

Business users must not deploy our Service to interact with users known to be under 13 years of age, in accordance with WhatsApp's minimum age requirements.

13. International Data Transfers

Some of our third-party service providers (such as Vercel, ElevenLabs, and OpenAI) may process data outside Nigeria. Where data is transferred internationally, we ensure appropriate safeguards are in place, including contractual data processing agreements that meet the NDPR's cross-border transfer requirements.

Data transmitted through the WhatsApp Business Platform is processed by Meta globally in accordance with their own data transfer mechanisms. Meta maintains data centres in multiple countries. By using our Service, you acknowledge that WhatsApp conversation data may be processed in countries outside Nigeria, including the United States, in accordance with Meta's Privacy Policy.

14. Changes to This Policy

We may update this Privacy Policy from time to time, including when required by changes to Meta's WhatsApp Business Platform policies. We will notify you of material changes via email or a prominent notice on our website at least 14 days before the changes take effect. The "Last updated" date at the top of this page reflects the most recent revision.

15. Contact Us

For privacy-related questions, requests, or complaints, please contact our Data Protection Officer:

Email: support@dailzero.com
Website: dailzero.com

You also have the right to lodge a complaint with the National Information Technology Development Agency (NITDA), which supervises NDPR compliance in Nigeria.

For complaints related to Meta's data practices, please contact Meta directly via their privacy request portal or their Data Protection Officer at privacy@whatsapp.com.