This Privacy Policy describes how Zestia ("Zestia", "we", "us", or "our") collects, uses, and shares information when you use our website, applications, and services (collectively, the "Services").
1. Information We Collect
Information you provide
When you create an account, set up a restaurant, or contact us, we collect information such as your name, email address, phone number, business name, and business address. When you use the Services, we collect order data, menu content, customer records, payment information, and communications sent through the platform.
Information collected automatically
When you access the Services, we automatically collect device information (type, OS, browser), IP address, usage data (pages visited, features used, timestamps), and performance data (errors, load times). We use cookies and similar technologies to maintain sessions and improve the Services.
Information from third parties
If you connect third-party channels (WhatsApp, Facebook, Instagram), we receive messages and profile information from those platforms in accordance with their APIs and your permissions.
2. How We Use Your Information
We use the information we collect to:
Provide, maintain, and improve the Services; process orders and payments; send transactional communications (receipts, order updates, account notifications); respond to support requests; detect and prevent fraud or abuse; comply with legal obligations; and generate aggregated, anonymized analytics to improve the product.
3. How We Share Your Information
We do not sell your personal information. We share information only in these cases:
With service providers who help us operate the Services (hosting, payment processing, email delivery, analytics) under contracts that require them to protect your data; with third-party platforms you choose to connect (Meta, WhatsApp) to deliver messages on your behalf; when required by law, subpoena, or government request; and in connection with a merger, acquisition, or sale of assets, with notice to you.
4. Data Retention
We retain your data for as long as your account is active or as needed to provide the Services. When you delete your account, we remove your personal data within 30 days, except where retention is required by law (e.g., tax records, audit logs). Aggregated, anonymized data may be retained indefinitely.
5. Data Security
We use industry-standard security measures including encryption in transit (TLS), encryption at rest, access controls, and regular security audits. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
6. Your Rights
Depending on your location, you may have the right to access, correct, delete, or export your personal data; object to or restrict certain processing; and withdraw consent where processing is based on consent. To exercise these rights, contact us at [email protected].
7. International Transfers
Your data may be processed in countries other than your own. We ensure appropriate safeguards are in place, including standard contractual clauses where required.
8. Cookies
We use essential cookies for authentication and session management. We use analytics cookies to understand how the Services are used. You can control cookie preferences through your browser settings.
9. Children's Privacy
The Services are not directed to individuals under 16. We do not knowingly collect personal information from children. If we learn we have collected data from a child, we will delete it promptly.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Services. Your continued use after changes constitutes acceptance.
11. Contact Us
If you have questions about this Privacy Policy or your data, contact us at [email protected].