Zeptor Inc. - Privacy Policy

Zeptor Inc. ("Zeptor," "we," "our," or "us") values your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, and safeguard information when you visit our website, use our software-as-a-service (SaaS) platform, or interact with our AI Companion ("Zara").

By using Zeptor's website or services, you agree to this Privacy Policy.

1. Scope

This Privacy Policy applies to:

• Zeptor's website (including any subdomains such as app.zeptor.ai)
• Zeptor's SaaS platform and related services provided to customers and their authorized users

Zeptor primarily serves customers in the Americas and Asia, but its services may also be accessible to users in other regions, including the EU and UK.

This policy does not apply to third-party websites or services that may link to or integrate with Zeptor.

2. Information We Collect

a. Information You Provide

We collect personal and business-related information you provide during account creation, onboarding, or customer interactions, such as:

• Name, email address, company name, department, and job role
• Business phone number and contact details
• Login credentials and authentication data
• Organization setup details, such as product lines, user roles, and process information
• Files and data uploaded during onboarding or system configuration

b. Information Collected Automatically

When you use Zeptor, we automatically collect certain technical and usage information, including:

• IP address, browser type, and operating system
• Login and activity logs
• Feature usage and system events
• Performance metrics and diagnostics
• Cookies and similar technologies for authentication, session management, and analytics

c. AI Interaction Data

Zeptor's built-in AI Companion, Zara, processes user-provided information during onboarding and configuration.

• This information is processed securely within Zeptor's own environment to automate setup and support.
• No user content or business data is shared with OpenAI or any external AI model provider.

3. How We Use Information

We use collected information to:

• Provide and maintain Zeptor services
• Facilitate onboarding, configuration, and AI-driven support
• Improve platform performance, reliability, and user experience
• Communicate important service updates or notices
• Enable analytics and usage insights for product improvement
• Ensure security, detect unauthorized access, and prevent misuse

We do not sell, rent, or trade personal information.

4. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Keep users signed in and manage sessions
• Understand how users interact with the platform
• Analyze usage trends to improve our services

Users may adjust cookie settings through their browser. Disabling essential cookies may affect functionality.

5. Data Storage and Retention

• Each customer's data is securely stored in their dedicated Azure SQL database instance located in the United States.
• Data is encrypted at rest and in transit.
• Upon termination of a customer account, data is retained for 30 days before permanent deletion, unless otherwise required by law or contract.

If Zeptor serves customers outside the U.S. (e.g., EU or UK), their data may be transferred and processed in the United States in accordance with standard contractual safeguards.

6. Information Sharing

We may share limited data only with trusted service providers who support our operations, such as:

• Stripe, our payment processor, which handles all payment transactions directly. Zeptor does not store or access full credit card information.

No other third parties have access to user or company data.

7. Security

We use industry-standard security measures to protect information, including:

• Data encryption (TLS/SSL and AES)
• Secure access controls and authentication
• Regular vulnerability assessments and monitoring

Despite our efforts, no online system is completely secure. Users are encouraged to maintain strong passwords and follow organizational IT policies.

8. User Rights

Users may request to:

• Access or correct their personal information
• Request deletion of personal data (subject to account ownership and retention policies)

Requests can be sent to info@zeptor.ai.

If you are located outside the United States, including in the EU or UK, Zeptor will take reasonable steps to ensure your personal data receives appropriate protection.

9. Children's Privacy

Zeptor's services are designed for business use and are not intended for individuals under the age of 16.

We do not knowingly collect personal data from minors. If you believe such data has been submitted, please contact us for removal.

10. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our services or applicable laws.

Updates will be posted on our website with a revised "Last Updated" date.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us at: