Privacy Policy

Effective 11 September 2026.

This policy explains what data the ZetChat service collects, what it is used for, and what rights you have over it. ZetChat is owned and operated by CV Zona Ekosistem Terpercaya ("we", "us"), at Jl. Aria Santika No. Blok E, RT.003/RW.006, Sumur Pacing, Kec. Karawaci, Tangerang City, Banten 15113, Indonesia.

1. Our role

For staff account data and billing data we act as data controller. For the content of customer conversations flowing through ZetChat we act as data processor on behalf of the business using the service. That business decides the purpose of processing, so an end consumer should normally raise a request with that business first.

2. Data we collect

Account data

Name, username, email address, role, and the branch a staff member is assigned to. Passwords are stored only as a hash, never in readable form.

Conversation data

Inbound and outbound message content, the phone number and profile name of the other party, public profile photos, file attachments, timestamps, delivery status, and internal notes staff write on a conversation.

Integration data

Business phone number identifiers, WhatsApp Business Account (WABA) identifiers, access tokens granted when you connect an account, and message template status. Tokens are stored encrypted.

Technical data

IP address, browser type, access times, and system error logs. This is used to keep the service secure and to trace faults.

We do not deliberately collect sensitive personal data. Where a consumer sends such data inside a conversation, it is treated like any other conversation content and is subject to the retention section below.

3. How data is used

• To display, send, and store conversations inside the service.
• To authenticate staff and enforce access limits between roles and branches.
• To provide history search, basic reporting, and customer context.
• To keep the service secure, prevent abuse, and investigate technical faults.
• To invoice subscriptions and meet legal and tax obligations.

We do not sell personal data, do not rent it, and do not use customer conversation content to serve advertising or to train third party artificial intelligence models.

4. Legal basis

Processing is based on performance of the service agreement with the business user, our legitimate interest in securing and maintaining the service, and legal obligations under Indonesian law, including Law Number 27 of 2022 on Personal Data Protection.

5. Third parties

Data may be passed to the following providers, limited to what is necessary:

• Meta Platforms, to send and receive messages through the WhatsApp Business Cloud API. This use is subject to Meta's own privacy policy.
• Infrastructure providers that host the service, for compute, database, and file storage.
• A speech transcription provider, only when a staff member deliberately asks for a specific voice message to be transcribed.
• Public authorities, where required by law or a valid court order.

6. Storage and retention

Data is held in the data centres we use to run the service. Conversation content is kept for as long as your business account is active, unless you ask for a shorter period. After an account is closed, data is deleted or anonymised within 90 days, unless a legal obligation requires us to keep it longer.

7. Security

Traffic between browser and server is encrypted. Passwords are hashed, integration tokens are stored encrypted, and staff access is restricted by role and branch. No system is perfectly safe, so we also maintain access logging and an incident procedure. If a personal data breach occurs, we notify affected parties and the relevant authority as required.

8. Your rights

You have the right to:

• request access to the personal data we hold about you;
• request correction of inaccurate or incomplete data;
• request deletion of your data;
• request restriction of, or object to, certain processing;
• receive a copy of your data in a commonly used format.

Send requests to support@zetchat.id. We respond within 30 days of receiving and verifying a request. To delete data originating from the WhatsApp Business Cloud API, state the business WhatsApp number concerned so we can remove the related conversations and their backups.

9. Children

ZetChat is a business tool and is not directed at anyone under 18. We do not knowingly collect personal data from children.

10. Changes to this policy

This policy may be updated. The current version is always published on this page with its effective date. Material changes are announced by email to account administrators before they take effect.

11. Contact

CV Zona Ekosistem Terpercaya
Jl. Aria Santika No. Blok E, RT.003/RW.006, Sumur Pacing, Kec. Karawaci, Tangerang City, Banten 15113, Indonesia
Email: support@zetchat.id
Phone and WhatsApp: +62 851-2111-1220