Privacy Policy

Last updated: August 7, 2026

This Privacy Policy explains how Zit Technology Limited ("ZitStack", "we", "us", or "our") collects, uses, and protects information across the ZitStack ecosystem of products and services (including ZitCloud, Zit Mall, Registers, Afiam, Zit Reach, Zit Quiz, and related products — collectively, the "Services"). By using the Services you agree to this Policy.

Information We Collect

Information you provide

• Account data: name, email address, phone number, business details, and login credentials.
• Content: data you create or upload while using the Services (e.g. contacts, campaigns, messages, forms, and files).
• Billing data: handled by our payment processor (Stripe); we do not store full card numbers.

Information collected automatically

• Usage data: pages visited, features used, timestamps, and diagnostic data.
• Device & log data: IP address, browser and device type, and similar identifiers.
• Cookies: we use essential and functional cookies to authenticate users and remember preferences. You can control cookies in your browser; some features require them.

How We Use Your Information

• To provide, maintain, secure, and improve the Services.
• To manage your account and process transactions.
• To communicate with you about your account, updates, and support.
• To send service or marketing communications where permitted, which you may opt out of.
• To comply with legal obligations and prevent fraud or abuse.

Connected Business Accounts & Messaging (Meta, WhatsApp, Google)

Zit Reach lets you connect your own third-party business accounts so we can provide outreach, messaging, advertising, and reporting features on your behalf. We access these accounts only after you authorize us through the provider's official flow (WhatsApp Embedded Signup, Facebook Login for Business, or Google OAuth), and only to deliver the features you enable.

What we access, and why

• WhatsApp Business (Meta): your WhatsApp Business Account, phone number(s), message templates, and the content of messages exchanged with your customers — to send opted-in messages you initiate and to display incoming replies in your team inbox.
• Meta Ads & Pages: your ad accounts, Pages, campaigns, performance insights, and Lead Ads submissions — to create and manage the campaigns you request, show reporting, and import your leads into your CRM.
• Google Ads: your Google Ads accounts, campaigns, performance metrics, and Lead Form submissions — for the same campaign-management, reporting, and lead-import features.

How we store and use it

• Access tokens are encrypted at rest (AES-256-GCM), scoped to your workspace, and used solely to provide the features you authorized.
• We act as a technology provider on your behalf. You remain responsible for, and the controller of, your customers' data processed through your connected accounts.
• We do not sell your data or your customers' data, and we do not use it for our own advertising or to train AI models. Where you use AI features, message or prompt content is processed by our AI provider only to generate the output you requested.

How We Share Information

We share data only as needed to run the Services, with infrastructure and platform providers acting as our processors, including: Meta Platforms (WhatsApp / Ads), Google (Ads), Amazon Web Services (email sending and file storage), our AI model providers, Supabase (database/auth), and Stripe (billing). We may also disclose information to comply with law, enforce our terms, or in connection with a business transfer. We do not sell personal information.

Data Retention & Deletion

• We retain data for as long as needed to provide the Services and meet legal obligations.
• Disconnecting a channel revokes and deletes the associated access tokens and stops further access to that account.
• Deleting your account or workspace removes your associated data, subject to any legal retention requirements. You may request deletion at any time by contacting us.

Security

We use commercially reasonable technical and organizational measures — including encryption of sensitive credentials at rest and tenant isolation — to protect your data. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

International Transfers

Your information may be processed in countries other than your own, where data-protection laws may differ. Where required, we take steps to ensure appropriate safeguards are in place.

Your Rights

Depending on your location, you may have rights to access, correct, delete, or restrict the processing of your personal data, and to object to certain processing. To exercise these rights, contact us at the address below. You can also update or delete much of your information from within your account.

Children's Privacy

The Services are not directed to children under 13 (or the minimum age required in your jurisdiction), and we do not knowingly collect their personal data.

Changes to this Policy

We may update this Policy from time to time. We will post the updated version here and revise the "Last updated" date, and where appropriate provide additional notice.

Contact Us

Zit Technology Limited
63 Egbe Road, Oshodi-Isolo, Lagos, Nigeria
Contact us through our website at zitstack.com