Privacy notice

Zephyria is a product of Kiria Software Consulting, S.A.S. ("Kiria"), based in San Nicolás de los Garza, Nuevo León, México, which is responsible for your personal data.

For anything related to your data, email hola@zephyria.io.

• Account: first and last name, email, password (we only store an encrypted version), language, time zone and preferences. If you sign in with Google: your name, email and Google account identifier.
• Business: name, address and map location, social links, services and prices, hours, calendars and appointments, registers (for example, inventory) and team members.
• A business's customers: when you book with or message a business, your name, email, phone, appointment notes and your conversations with the business and its assistant.
• Conversations with the Zephyr assistant and the notes Zephyr keeps to remember what matters.
• Payments: handled by Stripe. We never store your card details, only the subscription's status and history.
• WhatsApp: if a business connects its number, the messages sent and received on that number, and its customers' numbers and profile names.
• Technical data: server logs (such as IP address, time and errors) to run the service and keep it secure.
• Visits to zephyria.io: the pages you visit, browser and device details, and an identifier the Meta Pixel stores in a cookie. In the app, the Meta Pixel only records whether a business created its account or subscribed to a plan, and the plan's price.

We don't ask for sensitive personal data.

• Creating and managing your account and your business's.
• Running bookings, calendars, messages and registers.
• Letting the assistant answer with each business's real information.
• Sending necessary emails: verification, team invitations and password resets.
• Reminding you of your appointments the day before, by email or, if you agreed when booking, by WhatsApp from the business's number. The business can turn reminders off.
• Charging for the subscription (Solo or Pro).
• Providing support, preventing abuse and keeping the service secure.
• Measuring how our ads on Facebook and Instagram perform: visits to zephyria.io and how many businesses sign up or subscribe.

We don't sell your data. App data (your account, your business, your customers and your conversations) is never used for advertising.

When a business uses Zephyria to serve its customers, that business decides what data it collects and why. In that case Zephyria handles the data on the business's behalf, to provide the service. If you're a customer of a business, you can also send your requests to that business directly.

We use these providers to run the service; they handle data on our behalf:

• Railway: servers and database.
• Vercel: hosting for the website and the app, and anonymous visit counts for the website.
• OpenAI: processes messages to generate the assistant's replies.
• Stripe: payments and subscriptions.
• Resend: sending email.
• Google: sign-in with Google and maps.
• Pydantic (Logfire): technical monitoring and error diagnosis.
• Meta: WhatsApp messages, when a business connects its number, and measuring our ads with the Meta Pixel.

Some of these providers process data outside Mexico, mainly in the United States.

The app uses two necessary cookies: one keeps you signed in, the other remembers whether you use the business or customer view. It also stores preferences in your browser (such as the theme and the active business).

In the app, the Meta Pixel only runs when a business creates its account or subscribes to a plan, so we know which ads bring us businesses. It never runs on booking pages or for a business's customers, and isn't used in the iOS and Android apps.

The zephyria.io website counts visits anonymously with Vercel Web Analytics, which doesn't use cookies. It also uses the Meta Pixel, which stores a Meta cookie to measure our ads on Facebook and Instagram. Meta may link your visit to your Facebook or Instagram account and use it under its own privacy policy. You can block or delete that cookie in your browser and manage the ads you see in your Meta account's ad settings.

If you arrive from an ad or a tagged link, the site keeps its tags (such as utm_campaign and the click id) in its own cookie for 90 days, so we know which ad brought each new account. If you sign up, those tags are saved with your account.

You can access, correct or delete your data, object to its use (known in Mexico as ARCO rights) and withdraw your consent. Email hola@zephyria.io from your account's email with your name, what you're asking for and, if relevant, the data to correct. We may ask for more information to confirm your identity.

We'll reply within the time limits set by law.

We keep your data while you have an account. If you ask us to delete it, we do so within 30 days at most, except billing records we must keep for tax purposes. Details are on the Data deletion page.

If we change this notice, we'll publish the new version on this page with its update date.