1. Who we are
ZiReach is operated by ZiReach Pvt Ltd ("ZiReach", "we"), Office no. 421, Sky Heights, Nr. Sagar International Hotel, Bhanu Sagar Talkies, Bhanunagar, Bail Bazar, Kalyan (West), Thane, Maharashtra 421301, India. This policy covers zireach.com, its forms and the Ask ZI assistant, and the ZiReach platform.
Questions or requests: grievance@zireach.com.
2. Our two roles
For people who visit our website, submit our forms or hold a ZiReach account, we decide how personal data is used. Under India's Digital Personal Data Protection Act, 2023 (DPDP Act) we are the Data Fiduciary (the "controller" under laws such as the GDPR).
For personal data that a business brings into ZiReach — for example its customers' messages, contact details and call recordings — the business is the Data Fiduciary and we process that data only on its instructions, as its Data Processor. If you are a customer of a business that uses ZiReach, please contact that business first; we will help them respond.
3. What we collect
- Details you give us in forms: name, email, phone number, business name, website or social handle, industry, team size, city and country, what you want done, and your consent choices. Pilot and demo forms also ask for your role, monthly enquiry volume, the channels and tools you use, and any message you write.
- Messages you send to Ask ZI, our website assistant.
- Technical data: a pseudonymised form of your IP address (a keyed hash, used only to stop abuse — we don't store the IP itself with your submission), your browser's user-agent, the page you submitted from and campaign tags in the link (such as utm_source).
- On the platform: account details, settings, and the business data you choose to connect.
We don't use advertising or cross-site tracking cookies. The site stores your light/dark theme choice in your browser's local storage.
4. How we use it, and why
- To reply to your request, prepare your Business X-Ray, assess your pilot application or arrange a demo — on the basis of your consent.
- To send product updates you subscribed to — on the basis of your consent, which you can withdraw at any time with the unsubscribe link in any update email or by writing to us.
- To run the ZiReach platform for you under our terms.
- To keep our services secure and prevent abuse, and to meet legal obligations — as permitted by law.
We never sell personal data and never use it for third-party advertising.
5. AI and your data
ZiReach does not store Ask ZI conversations. Today Ask ZI answers from our own FAQ, so your messages are not sent to any AI model provider. If we switch on an AI model, only your questions will be sent to the provider to generate the reply, with zero data retention requested and on terms that do not allow training on them — and we will update this policy before we do.
Customer data in the ZiReach platform is never used to train shared AI models. Prompts and outputs related to your workspace are kept in your audit log so you can see what ZI did.
Please don't share sensitive personal data (such as health or financial details) in Ask ZI.
6. Who we share it with
Only with service providers that help us run ZiReach — hosting and content delivery, database and storage, email delivery, AI model providers, messaging and telephony carriers, payment processors and, if enabled, error monitoring — under contracts that require them to protect the data and use it only for our instructions. The categories and regions are listed on our subprocessors page; the named list is available to customers on request.
We may also disclose data to professional advisers under confidentiality, when required by law or a lawful order, or as part of a merger or acquisition with notice to you.
7. Where your data is processed
We are building ZiReach to keep Indian customers' platform data in India (Mumbai region). Some providers — for example AI model and email providers — may process data outside India. We transfer personal data outside India only as permitted under the DPDP Act and its rules, and, for people in the EU or UK, with the safeguards those laws require.
8. How long we keep it
- Form submissions (X-Ray, pilot, demo), including the copy emailed to our team: up to 24 months after our last contact with you, unless you ask us to delete them sooner or you become a customer.
- Newsletter: until you unsubscribe.
- Account and platform data: for as long as your account is active, then deleted or returned as described in our terms, except records we must keep by law (for example invoices and tax records).
9. Your rights
You can ask us for a summary of your personal data and how we use it, to correct, complete or update it, to erase it, and to nominate someone to exercise your rights if you die or become incapacitated. You can withdraw consent at any time, as easily as you gave it; this doesn't affect what we did before you withdrew.
If you are in the EU or UK you also have rights of access, rectification, erasure, restriction, portability and objection, and you can complain to your local data protection authority.
To exercise any right, write to grievance@zireach.com from the email address you used with us. We aim to respond within 7 days and always within the time the law requires. You can also ask for this notice in English or in any language listed in the Eighth Schedule to the Constitution of India.
10. Children
ZiReach is for businesses and people aged 18 or over. We don't knowingly collect personal data from children. If you believe a child has given us data, contact us and we will delete it.
11. Security
Data is encrypted in transit (TLS). Access to personal data is limited to people who need it, and actions are logged. No system is perfectly secure; if a personal data breach affects you, we will notify you and the authorities as the law requires.
12. Google user data
If you connect Google services (for example Google Sheets through the Google Picker, Google Calendar or Gmail) to ZiReach, ZiReach's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
We use Google user data only to provide the features you turn on, don't use it for advertising, don't sell it, don't use it to train generalised AI models, and don't allow people to read it unless you ask us to, it's needed for security, or the law requires it.
13. WhatsApp and Meta
If you connect a WhatsApp Business account, ZiReach processes messages, contacts and delivery data to provide the service you configure. You can disconnect at any time; how to request deletion is explained on our data deletion page.
14. Grievance officer
Rasik Fakih, Grievance Officer, ZiReach Pvt Ltd, Office no. 421, Sky Heights, Nr. Sagar International Hotel, Bhanu Sagar Talkies, Bhanunagar, Bail Bazar, Kalyan (West), Thane, Maharashtra 421301, India. Email: grievance@zireach.com. If you're not satisfied with our response, you may approach the Data Protection Board of India.
15. Changes to this policy
We'll post any changes here with a new date. If a change is significant, we'll tell you by email or in the product before it takes effect.