Privacy Policy

Zaxted Inc., a company registered in the State of New York, United States, operates Zasmate. Our principal office is 138 Sheridan Ave, Brooklyn, NY, United States, and our Bangladesh branch is at 560/C, Road-5, Shantibag R/A, Agrabad, Chittagong, Bangladesh.

For any privacy or data request, contact info@zaxted.com.

We process two broad categories of data. Business (vendor) account data — the details a business provides to create and run its workspace: name, email, login credentials, plan and billing status, connected-channel identifiers, and knowledge-base content the business uploads.

End-customer messaging data — when a customer messages a business through a connected channel, we process the message content, the customer's channel identifier (e.g. a Messenger/Instagram-scoped id or WhatsApp phone number), display name where provided, and conversation metadata.

Comment data — when a business turns on comment automation, we process the comments people leave on that business's Facebook Page and Instagram posts: the comment text, the commenter's Facebook or Instagram-scoped id and display name, the post the comment is on, and the replies the business approves. We send the commenter at most one private reply to that comment.

We process this data solely to provide the service: routing messages to the correct business, generating grounded AI replies from that business's own knowledge base, suggesting answers to comments for the business to approve, enforcing plan limits, and handing conversations to a human agent when needed.

When a business connects a WhatsApp, Messenger, or Instagram channel, that connection and the resulting message flow are handled through Meta's APIs and our messaging infrastructure. We access only the Page, Instagram account, or WhatsApp Business identifiers and the message events needed to operate the agent for that business.

When a business connects comment automation, we list the Facebook Pages it manages so it can choose one, read that Page's and its linked Instagram account's posts and the comments on them, post the public and private replies the business approves or sets up, and hide comments the business chooses to hide.

A business can choose to send a resource only to people who follow its Instagram account. When such a person messages the business, we ask Instagram one question, whether that person follows the business, and use the answer only to decide whether to send the resource. We do not store anything else from their profile.

We do not sell Meta Platform data, we do not use it for advertising, and we do not share it with third parties except the subprocessors listed below that are strictly necessary to deliver the service. Use of Meta data complies with the Meta Platform Terms and Developer Policies.

The inbox where your team reads, replies to, and takes over conversations runs on our own self-hosted infrastructure — conversation content is not handed to a separate inbox vendor.

We rely on a small set of processors to run the service, each bound to protect the data they handle:

• Our large-language-model provider — generates AI replies from the business's knowledge-base context; prompts are scoped per business.
• Cloud hosting and database providers that store the data described above.
• An email delivery provider — sends account emails to the business and the inbox's notification emails to the business's own team, which can include the text of the customer message they are about.

Each business is a separate tenant. Knowledge base, tools, conversations, and audit trail are isolated at the database level, and the agent only ever loads context scoped to that business. Content is never merged across businesses.

We retain data for as long as the business account is active and as needed to provide the service. When an account is closed or terminated, business data is deleted after a short purge window, while a minimal, anonymized record may be retained where required for audit, security, or legal compliance.

You may request access to, correction of, or deletion of your data by emailing info@zaxted.com. End users can also have their data deleted automatically — see our Data Deletion policy at /legal/data-deletion.

Zaxted Inc. is registered in the State of New York, United States, and has a branch in Bangladesh. Data may be processed in either country; we apply consistent safeguards regardless of where processing occurs.

The service is intended for businesses and is not directed to children. We do not knowingly collect data from children.

We may update this policy from time to time. Material changes will be reflected by updating the effective date at the top of this page.

Zaxted Inc., 138 Sheridan Ave, Brooklyn, NY, United States. Email info@zaxted.com · +1 516-298-4870 (US) · +88 01742 494424 (BD).