Zaqa Privacy Policy

We may collect the following categories of information:

• Account and contact information, such as name, business email, company, role, and communications with us.
• Service data that customers provide or process through the Services, including order, quote, document, ERP, email, attachment, and workflow data.
• Usage, device, and log information, such as pages visited, browser type, IP address, timestamps, diagnostic logs, and security events.
• Billing and commercial information needed to administer subscriptions, contracts, invoicing, and customer support.

We use information only for legitimate business purposes, including to:

• provide, operate, secure, monitor, support, and improve the website and Services;
• create and administer accounts, respond to requests, and communicate about the Services;
• process customer documents and data as instructed by the customer and permitted by the Terms or a separate agreement;
• maintain security, prevent abuse, troubleshoot issues, and comply with legal, contractual, and audit obligations;
• generate aggregated or de-identified usage information for analytics and service improvement.

We do not sell customer data. We do not use customer confidential data for model training unless expressly permitted by the applicable customer agreement or data processing terms.

Customers retain ownership of the information, data, and files they process through the Services. Zaqa processes customer data to provide, maintain, monitor, secure, and improve the Services, consistent with the Terms and any applicable customer agreement.

Customers are responsible for ensuring they have the necessary rights, notices, and consents to provide customer data to Zaqa. Zaqa protects customer data using administrative, technical, and organizational controls aligned with its security program.

We may share information with:

• service providers and subprocessors that help us host, secure, monitor, support, or operate the Services;
• professional advisors, auditors, and legal or compliance providers where needed;
• authorities or third parties when required by law, legal process, or to protect rights, security, or safety;
• a successor or affiliate in connection with a merger, financing, acquisition, reorganization, or sale of assets.

We require service providers that process confidential customer data to handle it under appropriate confidentiality, security, and data protection obligations.

Zaqa maintains a security program designed to protect information from unauthorized access, use, disclosure, alteration, and destruction. Controls may include access control, encryption in transit and at rest, least-privilege permissions, logging and monitoring, vulnerability management, vendor review, secure development practices, incident response, and employee security training.

No system can be guaranteed perfectly secure. If you believe information has been accessed or disclosed improperly, contact us promptly.

We retain information for as long as needed to provide the Services, comply with legal and contractual obligations, resolve disputes, enforce agreements, maintain security, and support audit requirements. Customer data is retained and deleted according to the applicable customer agreement, our data retention practices, or a verified deletion request, subject to legal holds or legitimate retention obligations.

Our website may use cookies, analytics tools, and similar technologies to understand website usage, improve performance, and support security. You can control cookies through your browser settings, but disabling cookies may affect site functionality.

Depending on your location and relationship with Zaqa, you may have rights to access, correct, delete, or restrict certain personal information. If we process personal information on behalf of a customer, we may direct requests to that customer. To submit a request, contact us at legal@zaqa.ai.

Zaqa is based in the United States, and information may be processed in the United States or other locations where we or our service providers operate. We take steps designed to protect information consistent with this Privacy Policy and applicable agreements.

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised "Last updated" date. Continued use of the website or Services after an update means the updated policy applies to future use.