Privacy Policy

Effective Date: February 22, 2026

1. Introduction

Zakii AI LLC (operating as Zakii.ai, referred to as "the Provider," "we," "us," or "our") is an AI-powered customer engagement platform designed for independent auto dealers. Our Service enables dealerships to automate customer communications, manage leads, book appointments, and deliver timely follow-ups through SMS, email, web chat, and Facebook Messenger.

This Privacy Policy describes how we collect, use, store, and protect information when you use our platform and visit our website (collectively, the "Service"). It applies to all users of our Service, including dealership operators ("Dealers") and the customers who interact with dealers through our platform ("End Users").

By using our Service, you consent to the practices described in this policy. If you do not agree with this Privacy Policy, please do not use our Service.

2. Information We Collect

From Dealers (Our Customers)

• Contact information: name, email address, phone number
• Business information: dealership name, address, website URL
• Payment information: processed securely through third-party payment processors; we do not store credit card numbers
• Inventory data: vehicle listings, pricing, availability, stock numbers (provided via inventory feed)
• AI configuration: tone preferences, behavior rules, training instructions, business-specific knowledge
• Account credentials: username and password (passwords stored as encrypted hashes)

From End Users (Dealer's Customers Who Interact Through the Platform)

• Contact information: name, phone number, email address (as voluntarily provided during conversations)
• Conversation content: messages exchanged via chat, SMS, email, or Facebook Messenger
• Appointment information: requested dates, times, and vehicle interests
• Device information: IP address, browser type, operating system (for website chat widget only)

Automatically Collected Information

• Browser type and version
• Device type and operating system
• IP address and approximate geographic location
• Pages visited on our website and time spent
• Referring website URLs
• Cookies and similar tracking technologies (see Section 9 — Cookies)

3. How We Use Information

We use the information we collect for the following purposes:

• Deliver, operate, and maintain the Service
• Process AI-powered conversations and generate responses
• Book appointments and manage dealer CRM data
• Execute automated follow-up sequences (SMS and email)
• Send service-related notifications and updates to dealers
• Provide customer support
• Improve AI accuracy, response quality, and Service features
• Monitor for security threats and prevent fraud
• Comply with legal obligations
• Generate anonymized analytics and usage reports

What We Do NOT Do

• We do NOT sell your personal information to third parties
• We do NOT use your data for advertising purposes
• We do NOT share identifiable customer data with unrelated third parties
• We do NOT use dealer conversation data to train AI models for other dealers (each dealer's data is isolated)

4. Third-Party Services

We use the following third-party service providers to deliver our Service:

• Twilio — Powers SMS text messaging and communication delivery. Twilio may process phone numbers and message content. Privacy Policy
• OpenAI — Provides AI language processing capabilities for generating conversational responses. Conversation content is processed through OpenAI's API. Privacy Policy
• Render — Cloud hosting and infrastructure provider where our platform and data are hosted. Privacy Policy
• Google Analytics — Website usage analytics to understand how visitors interact with our website. Collects anonymized browsing data. Privacy Policy

Each third-party provider operates under their own privacy policy. We recommend reviewing their policies for details on their data practices. We select providers that maintain appropriate security and privacy standards.

5. Data Security

We take the security of your data seriously and implement the following measures:

• 256-bit AES encryption for all data at rest
• TLS/SSL encryption for all data in transit
• Per-dealer data isolation: each dealership's data is stored separately with no cross-access
• Role-based access controls limiting who can access data internally
• Regular security assessments and monitoring
• Secure authentication with encrypted password storage
• Automated threat detection and logging

Data Storage Location

All data is stored on servers located in the United States. By using our Service, you consent to the storage and processing of your data in the United States. If you are accessing the Service from outside the United States, please be aware that your data may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your jurisdiction.

Data Breach Notification

In the event of a data breach that compromises the security, confidentiality, or integrity of personal information, we will notify affected Dealers without unreasonable delay and no later than 72 hours after becoming aware of the breach. Notification will include the nature of the breach, the types of data affected, the measures taken to address the breach, and recommendations for steps affected parties can take to protect themselves.

We will also notify relevant regulatory authorities as required by applicable law.

While we implement industry-standard security measures, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security but are committed to protecting your information to the best of our ability.

6. Data Retention

• Active subscriptions: Data is retained throughout the subscription period
• Post-cancellation: Customer data is retained for 30 days following termination to allow for data export, then permanently deleted from our systems
• Immediate deletion: Dealers may request immediate data deletion at any time by contacting us
• Anonymized data: Anonymized and aggregated data (which cannot identify any individual) may be retained indefinitely for analytics and service improvement purposes
• Legal requirements: We may retain certain data longer if required by law or to resolve disputes

7. Your Rights

You have the following rights regarding your personal information:

• Right to Access: Request a copy of the personal data we hold about you
• Right to Correction: Request correction of inaccurate or incomplete information
• Right to Deletion: Request deletion of your personal data, subject to legal retention obligations
• Right to Data Portability: Request your data in a structured, commonly used, machine-readable format
• Right to Opt-Out: Unsubscribe from marketing communications at any time
• Right to Restrict Processing: Request that we limit how we use your data in certain circumstances

To exercise any of these rights, contact us at contact@zakii.ai. We will respond to your request within 30 days.

8. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You may request that we disclose what personal information we have collected, used, disclosed, or sold about you in the past 12 months
• Right to Delete: You may request deletion of your personal information, subject to certain exceptions
• Right to Opt-Out of Sale: We do not sell personal information. If this changes, we will provide an opt-out mechanism
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights

To submit a CCPA request, email us at contact@zakii.ai with the subject line "CCPA Request." We will verify your identity before processing your request and respond within 45 days.

9. Cookies

We use cookies and similar technologies on our website:

• Essential Cookies: Required for basic website functionality, authentication, and security. Cannot be disabled.
• Analytics Cookies: Used by Google Analytics to understand how visitors interact with our website. These collect anonymized data about page views, session duration, and navigation patterns. You can opt out by disabling cookies in your browser settings or using Google's opt-out browser add-on.
• We do NOT use: advertising cookies, retargeting cookies, or third-party tracking cookies for marketing purposes

You can control cookie settings through your browser. Note that disabling essential cookies may affect website functionality.

10. Children's Privacy

Our Service is designed for business use by auto dealerships and is not directed at individuals under the age of 18. We do not knowingly collect personal information from children under 18.

If we become aware that we have collected data from a minor, we will take steps to delete it promptly. If you believe a child has provided us with personal information, please contact us at contact@zakii.ai.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. Material changes will be communicated via email to dealers at least 30 days before taking effect.

The updated effective date will be posted at the top of this page. Continued use of the Service after the effective date constitutes acceptance of the updated policy. We encourage you to review this policy periodically.

12. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices:

• Email: contact@zakii.ai
• Website: https://zakii.ai

For privacy-specific requests, please include "Privacy Request" in the subject line.