Privacy Policy

Zindua ("we", "us") operates the transactional messaging platform available at zindua.run. For privacy inquiries: support@zindua.run.

Account data: email address, name, workspace and team membership, billing information (processed by our payment provider).

Authentication & security: OTP codes (hashed/stored temporarily), login timestamps, IP address, approximate location (country/city when available), browser and device information from User-Agent headers. We use this to send security emails and detect unusual sign-in activity.

Service usage: API requests, templates, projects, delivery logs (recipients, status, errors), WhatsApp connection metadata, and quota consumption.

Content you submit: email templates, message bodies, recipient addresses and phone numbers you send through our API, and connected provider credentials (stored encrypted).

Support: messages and attachments you send via in-app support chat.

We process personal data to:

• Provide, secure, and improve the service
• Authenticate you and send OTP / account-related emails
• Deliver messages you request through connected email and WhatsApp channels
• Enforce plans, quotas, and prevent abuse
• Send product emails you opt into (onboarding tips, quota notices, security alerts)
• Comply with legal obligations and respond to lawful requests

Legal bases (where GDPR applies) may include contract performance, legitimate interests (security, product improvement), and consent where required.

We share personal data only when necessary to operate the service, with trusted third parties bound by confidentiality and data-processing obligations. We do not publish a public list of vendors or internal systems (doing so would not improve transparency for you and could increase security risk).

Processing may involve, by category:

• Infrastructure: cloud hosting, databases, caching, queues, backups, and related operations
• Email: delivery of platform emails (OTP, security, billing) and, when you configure them, your own outbound mail providers
• Messaging: channels you connect (e.g. linked messaging accounts); content is routed through those networks under your configuration
• Payments: subscription and billing processors

We do not sell your personal data. A detailed subprocessor list is available on request for customers who need it for compliance (contact support@zindua.run).

We retain account and billing data while your account is active and for a reasonable period afterward for legal and backup purposes. Delivery logs are kept according to your plan and operational needs. OTP records expire shortly after use. You may request deletion of your account subject to legal retention requirements.

We use encryption in transit (TLS), encrypted storage for sensitive credentials, access controls, and rate limiting. No method of transmission over the Internet is 100% secure; you are responsible for protecting API keys and workspace access.

Data may be processed in countries where our providers operate. Where required, we rely on appropriate safeguards (standard contractual clauses or equivalent mechanisms).

Depending on your location, you may have rights to access, correct, delete, restrict, or port your personal data, and to object to certain processing. EU/UK users may lodge a complaint with a supervisory authority.

To exercise rights, email support@zindua.run. We will respond within applicable deadlines.

We use essential cookies for authentication (session). Analytics or marketing cookies, if added later, will be described in an updated policy or consent banner.

The service is not directed at children under 16. We do not knowingly collect data from children.

We may update this policy. The "Last updated" date will change. Significant changes may be notified by email or in the dashboard.

Privacy questions: support@zindua.run
Sales & upgrades: sales@zindua.run