Privacy Policy

This policy covers ZemKit (ZemKit Inc.) and the services we provide at zemkit.com, including the agent studio, embedded widgets, phone and messaging channels, and our APIs.

We distinguish between two roles: you — the customer or partner who signs up for ZemKit — and your end-users, who interact with an agent you have built. Our obligations differ for each.

Account information. When you sign up, we collect your name, email, company, and billing information.

Knowledge you provide. Documents, links, media, and other content you upload to train your agent.

Conversations. Messages, voice recordings, and transcripts of interactions between your agent and your end-users, stored so you can review, audit, and improve your agent over time.

Usage data. Log data, device information, approximate location (from IP), and product-analytics events that help us keep the platform reliable and improve it.

Third-party integrations. When you connect a calendar, phone number, or messaging account, we store the credentials needed to make those integrations work.

• To operate, maintain, and improve the service.
• To run your agent — retrieve knowledge, generate responses, send messages, book appointments, and hand off to your team.
• To bill you and enforce our terms.
• To notify you about product updates, incidents, and security matters. You can opt out of marketing email at any time.
• To detect, investigate, and prevent abuse, fraud, or security incidents.

We do not sell your data. We do not use your content or your end-users' conversations to train our own foundation models or to improve models for other customers.

To provide the service, we work with a small set of vetted sub-processors — for cloud hosting, payment processing, telephony, analytics, and customer support. We require every sub-processor to meet the same standards for data protection that we hold ourselves to.

A current list of sub-processors is available on request from contact@zemkit.com. We will notify customers on paid plans of material changes to that list at least 30 days in advance.

We share information only in these situations:

• With sub-processors, as described above, under strict data-processing terms.
• With your instructions — when you connect a calendar, send a webhook, or route a conversation to another tool.
• For legal reasons — to comply with a subpoena, court order, or applicable law. Where legally permitted, we will notify you first.
• Business transfers — if we're ever acquired or merge with another company, your data may transfer as part of that transaction, subject to this policy.

Account data is retained for the life of your account. When you close your account, we delete your account data within 30 days, except where we're legally required to keep it (for example, billing records).

Conversation and recording retention is configurable per agent. Defaults are 90 days on Starter, 12 months on Growth, and configurable on Partner. You can shorten or extend the retention window in your dashboard.

Depending on where you or your end-users live, you may have rights under laws like the GDPR (EU), UK GDPR, CCPA/CPRA (California), or Brazil's LGPD. Those rights typically include:

• Access to the personal data we hold about you
• Correction of inaccurate data
• Deletion of data, subject to legal exceptions
• A portable copy of your data
• Objection to certain types of processing

To exercise any of these, email contact@zemkit.com. We respond within 30 days.

If you're an end-user of a ZemKit-powered agent, please contact the business operating the agent first — they are the controller of that conversation data. We will assist them in fulfilling your request.

ZemKit primarily processes data in the United States and the European Union. Where data is transferred across regions, we use recognized safeguards — including Standard Contractual Clauses for EU/UK transfers — to protect it.

Enterprise customers can pin data to a specific region as part of a Partner or custom plan.

ZemKit is not intended for use by children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, email contact@zemkit.com and we will delete it.

We use a small number of cookies and similar technologies to keep you signed in, remember your preferences, and measure product usage. You can control cookies through your browser settings. Marketing analytics cookies are opt-in in regions that require it.

We update this policy occasionally. If we make material changes, we'll notify you by email and post a notice in the product before the changes take effect. The "Last updated" date at the top of this page always reflects the current version.