Privacy Policy
Last updated: July 16, 2026
Quick Summary
- • We only collect data necessary to provide our services
- • Your customer conversations are processed by AI to generate responses
- • We do not sell your data to third parties
- • If you connect Google Calendar, we only use that data to power appointment booking, and never sell it, use it for advertising, or train AI models on it
- • If you connect Shopify, we use read-only access to your store (orders, products, inventory, customers) only to answer customer questions and import your catalogue — we never write to your store, sell that data, or train AI models on it
- • You can request deletion of your data at any time
- • We comply with the Nigeria Data Protection Act 2023 (NDPA/NDPR), PIPEDA (Canada), and GDPR (EU/UK)
1Introduction
ZubaChat ("we," "our," or "us") is a Canadian company based in Calgary, Alberta. ZubaChat is a customer messaging platform for small businesses on WhatsApp and Instagram. It makes sure you never miss a customer, even when you're busy, with a client, or closed for the night. When someone messages about a booking, a product, or a question, ZubaChat replies instantly and handles the back-and-forth. 80% of conversations are covered automatically. When something needs a real person, it hands off without a hitch. ZubaChat is a Meta Official Tech Partner, so your number is verified, messages land in inbox, and your customers' data is protected. No engineers needed. Most businesses are live the same day. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.
By using ZubaChat, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our services.
2Information We Collect
Business Account Information
- Business name and contact details
- Email address and phone number
- Payment information (processed securely by third-party providers)
- Business settings and preferences
Customer Conversation Data
- Messages exchanged between your business and customers
- Customer phone numbers and names (as provided via WhatsApp)
- Order and transaction details discussed in conversations
- Images and media shared in conversations
Technical Data
- IP addresses and browser information
- Device information and operating system
- Usage data and analytics
- Cookies and similar tracking technologies
3How We Use Your Information
- ✓AI Processing: To generate intelligent responses to customer messages using our AI system
- ✓Service Delivery: To provide, maintain, and improve our services
- ✓Communication: To send you service updates, security alerts, and support messages
- ✓Analytics: To understand how our services are used and improve user experience
- ✓Legal Compliance: To comply with applicable laws and regulations
4Third-Party Services
ZubaChat integrates with the following third-party services to provide our platform:
Meta (WhatsApp/Instagram)
For messaging platform integration
OpenAI
For automated response generation
Supabase
For secure data storage
Google (Calendar)
For optional calendar-based appointment booking (see Section 11)
Shopify
For optional read-only store lookups — orders, products, inventory (see Section 12)
Payment Processors
For secure payment handling
Each third-party service has its own privacy policy governing the use of your information. We encourage you to review their policies.
5Data Security
We implement appropriate technical and organizational security measures to protect your data:
6Data Retention
We retain your data for as long as your account is active or as needed to provide you services. Specifically:
- Account data: Retained until account deletion
- Conversation data: Retained for 2 years, then automatically deleted
- Analytics data: Retained for 1 year in anonymized form
- Billing records: Retained as required by law (typically 7 years)
You may request earlier deletion of your data by contacting us.
7Your Rights
Under the Nigeria Data Protection Act 2023 (NDPA) and NDPR, PIPEDA (Canada), and the EU/UK GDPR, you have the following rights:
Right to Access
Request a copy of your personal data
Right to Rectification
Correct inaccurate personal data
Right to Erasure
Request deletion of your data
Right to Portability
Receive your data in a portable format
Right to Object
Object to certain processing activities
Right to Withdraw Consent
Withdraw consent at any time
8Children's Privacy
ZubaChat is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.
9International Data Transfers
Your information may be transferred to and processed in countries other than Canada, including the United States and European Union, where our service providers are located. We ensure appropriate safeguards are in place to protect your data in accordance with this privacy policy and applicable laws, including PIPEDA requirements for cross-border transfers.
10Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. For significant changes, we will provide a more prominent notice (such as an email notification).
11Google User Data (Google Calendar)
If you choose to connect your Google Calendar, ZubaChat requests access to your calendar so it can power appointment booking on your behalf. This section explains exactly what we access, how we use it, and who we share it with.
What we access
- Your calendar events and availability (busy and free times)
- The ability to create, update, and cancel events for bookings made through ZubaChat
How we use it
We use your Google Calendar data solely to provide the appointment-booking feature you enabled: checking your availability and creating, updating, or cancelling calendar events when you or your customers book, reschedule, or cancel an appointment. We do not use it for any other purpose.
Who we share it with
We do not sell, rent, or share your Google user data with third parties. We do not transfer it to others except as strictly necessary to provide the booking feature (for example, our secure hosting and database providers acting on our behalf), to comply with applicable law, or in connection with a merger or acquisition where equivalent protections remain in place. We do not use Google user data for advertising, and we do not use it to develop, improve, or train generalized artificial intelligence or machine learning models.
Limited Use disclosure
ZubaChat's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Revoking access
You can disconnect Google Calendar at any time from your ZubaChat dashboard, or revoke ZubaChat's access directly from your Google Account permissions. When you disconnect, we stop accessing your calendar and delete the stored access tokens.
12Shopify Store Data
If you choose to connect your Shopify store, ZubaChat requests read-only access so the assistant can answer your customers' questions about their orders, your products, and stock availability, and so you can import your product catalogue into ZubaChat. This section explains exactly what we access, how we use it, and who we share it with.
What we access
- Orders — status, line items, totals, and fulfillment/tracking
- Products and inventory — titles, descriptions, prices, and stock levels
- Customer records — name, contact details, and order history, used to answer a customer's questions about their own orders
Access is read-only. ZubaChat does not have permission to create, edit, or delete anything in your Shopify store.
How we use it
We use your Shopify data solely to provide the features you enabled: answering customer questions in chat (such as order status, product availability, and pricing) and importing your product catalogue into ZubaChat when you choose to. We do not use it for any other purpose.
Who we share it with
We do not sell, rent, or share your Shopify data with third parties. We do not transfer it to others except as strictly necessary to provide these features (for example, our secure hosting and database providers acting on our behalf), to comply with applicable law, or in connection with a merger or acquisition where equivalent protections remain in place. We do not use Shopify data for advertising, and we do not use it to develop, improve, or train generalized artificial intelligence or machine learning models. We handle protected customer data in accordance with Shopify's requirements.
Revoking access
You can disconnect Shopify at any time from your ZubaChat dashboard, or uninstall the ZubaChat app directly from your Shopify admin under Settings → Apps and sales channels. When you disconnect or uninstall, we stop accessing your store and delete the stored access tokens.
Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us:
© 2026 ZubaChat. All rights reserved.