Privacy Policy
Last updated: March 28, 2025
Nanozons AI ("we", "our", "us") operates the Nanozons AI omnichannel conversation platform. This Privacy Policy explains how we collect, use, disclose, and protect information when you use our platform and services.
1. Information We Collect
1.1 Account Information
When you create a Nanozons AI workspace, we collect:
- Business name and contact details
- Email address and login credentials
- Team member names and email addresses
- Billing information (processed by our payment provider)
1.2 Message Data
Nanozons AI processes messages sent and received through connected channels to provide our core service. This includes:
- Message content (text, subject lines)
- Sender and recipient identifiers (email addresses, phone numbers, Telegram chat IDs, WhatsApp IDs)
- Timestamps and delivery status
- Attachments and media files
1.3 Channel Integration Data
When you connect channels, we store:
- Email (Postmark): Server tokens, webhook payloads, sender signatures
- WhatsApp (Meta Cloud API): Business Account ID, phone number ID, access tokens, webhook payloads including message content and sender information
- Telegram (Bot API): Bot token, webhook payloads including message content and chat information
1.4 Usage Data
We automatically collect platform usage data including page views, feature usage, and performance metrics to improve our service.
1.5 Webhook Data
We store raw webhook payloads from all connected channel providers for audit, debugging, and compliance purposes.
2. How We Use Your Information
We use collected information to:
- Provide the core service: Route, display, and deliver messages across email, WhatsApp, and Telegram channels
- Enable AI features: Summarize conversations and draft reply suggestions (message content is processed by our AI subsystem; see Section 5)
- Resolve identities: Match contacts across channels so you see one conversation per customer
- Ensure delivery: Track message status, retry failed deliveries, and maintain audit trails
- Enforce compliance: Apply WhatsApp messaging window rules and consent requirements
- Improve the platform: Analyze usage patterns to enhance features and fix issues
- Communicate with you: Send service updates, security alerts, and support responses
3. How We Share Your Information
We share information only as necessary to provide our service:
| Recipient | Data Shared | Purpose |
|---|
| Postmark (email provider) | Outbound email content, recipient addresses | Email delivery |
| Meta / WhatsApp Cloud API | Outbound message content, recipient phone numbers | WhatsApp message delivery |
| Telegram Bot API | Outbound message content, chat IDs | Telegram message delivery |
| AI model providers | Conversation content (for summarization and drafting) | AI-assisted features |
| Cloud infrastructure (Microsoft Azure) | All platform data (encrypted at rest and in transit) | Hosting and data storage |
We do not sell your data. We do not share your data with advertisers or data brokers.
4. WhatsApp & Meta Platform Data
Nanozons AI integrates with the WhatsApp Business Platform via Meta's official Cloud API. Regarding data received from Meta:
- We only access WhatsApp data necessary to provide our messaging service
- We do not use WhatsApp data for advertising purposes
- We do not share WhatsApp data with third parties except as required to deliver messages or as described in this policy
- We comply with Meta's Platform Terms and WhatsApp Business Policy
- We enforce WhatsApp's 24-hour messaging window and consent requirements
- Users can request deletion of their WhatsApp conversation data at any time (see Section 8)
5. AI Data Processing
Nanozons AI uses AI to assist with conversation summarization and reply drafting:
- Conversation content is sent to our AI subsystem only when you explicitly request a summary or draft reply
- AI processing is used solely to generate summaries and draft replies — not for model training
- All AI-generated content requires human review and approval before being sent
- You can use Nanozons AI without the AI features
6. Data Retention
- Message data: Retained for the lifetime of your workspace, or until you request deletion
- Raw webhook payloads: Retained for 90 days for audit and debugging purposes
- Account data: Retained until you close your workspace, then deleted within 30 days
- Usage analytics: Aggregated data retained indefinitely; identifiable data deleted after 12 months
7. Data Security
We protect your data with:
- Encryption in transit (TLS 1.2+) and at rest (AES-256)
- Webhook signature validation for all inbound channel data (HMAC-SHA256 for WhatsApp, token validation for Postmark and Telegram)
- Idempotent message processing to prevent duplicates
- Role-based access controls
- Infrastructure hosted on Microsoft Azure with SOC 2 compliance
8. Your Rights
You have the right to:
- Access: Request a copy of your data
- Correction: Update inaccurate information
- Deletion: Request deletion of your data and workspace
- Export: Receive your data in a portable format
- Restrict processing: Limit how we use your data
- Withdraw consent: Disconnect channels or close your workspace at any time
To exercise these rights, contact us at contact@nanozons.ai.
9. International Data Transfers
Your data may be processed in regions where our cloud infrastructure operates. We ensure appropriate safeguards are in place for any cross-border data transfers in compliance with applicable data protection laws.
10. Children's Privacy
Nanozons AI is a business-to-business platform and is not intended for use by individuals under the age of 18. We do not knowingly collect data from children.
11. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of material changes via email or through the platform. Continued use of Nanozons AI after changes constitutes acceptance of the updated policy.
12. Contact Us
If you have questions about this Privacy Policy or our data practices: