Privacy notice

1. Information We Collect

We collect information directly from our Customers (the businesses using Nuteq AI) and indirectly from End-Users who interact with our Customers via WhatsApp.

Customer Account & Business Profile: Name, business email address, company legal name (Zyntova Solutions LLC), phone number, billing address, and payment information.

Meta Integration Identifiers: WhatsApp Business Account (WABA) IDs, Phone Number IDs, and Meta Developer App credentials/tokens necessary to route messages.

Communication Data (Processed on behalf of Customers): When End-Users call or text a Customer's connected WhatsApp number, we act as a data processor and collect message payloads (text, media, and interactive payloads), audio attachments/voice memos, and associated metadata (timestamps, delivery status, and status logs).

2. How We Use Information

We process and use the collected data strictly to deliver our Services, satisfy Meta platform requirements, and provide business analytics:

Message Routing & Orchestration: To receive, queue, and deliver inbound and outbound text/voice messages between End-Users and Customers via the WhatsApp Cloud API.

AI & Natural Language Processing (LLM): To analyze text payloads and construct contextual responses utilizing downstream Large Language Models (OpenAI).

Speech-to-Text (STT) Processing: To convert incoming End-User voice notes or audio inputs into text formats so they can be processed by our AI orchestration layer (using Soniox and Deepgram).

Text-to-Speech (TTS) Processing: To convert text responses generated by our AI platform into synthetic voice formats for voice-based interactions (using Uplift AI and Google/Gemini).

Multi-Tenant SaaS Isolation: To maintain strict logical separation of Customer data, ensuring that database queries, logs, and analytics remain isolated to each respective Customer workspace.

Business Analytics & Reporting: To generate aggregated metrics, sentiment analysis, response rate statistics, and operational insights for the Customer's internal business improvement.

3. Data Sharing & Third Parties

We do not sell, rent, or lease Customer or End-User data to third parties. We share data only as necessary to provide the Services, routing payloads through the following essential technology partners and downstream sub-processors:

Meta Platform (WhatsApp Cloud API): All WhatsApp communication is transmitted through Meta's servers. As a WhatsApp Tech Provider, our access is governed by the Meta Developer Tools Agreement and WhatsApp Business Terms.

Speech-to-Text (STT) Providers: Voice notes and audio recordings are transmitted to and processed by Soniox and Deepgram to perform transcription.

Large Language Model (LLM) Providers: Text transcripts and chat contexts are sent to OpenAI to generate conversational responses.

Text-to-Speech (TTS) Providers: Synthesized voice responses are processed via Uplift AI and Google/Gemini (TTS APIs) to generate audio files.

Infrastructure Hosting & Database Services: Our cloud databases and message queues are securely hosted in isolated environments.

We ensure that all downstream providers maintain stringent confidentiality standards and are contractually restricted from using your data for any purpose other than providing these specific processing services.

4. Data Security & Retention

Data Security: We implement industry-standard security measures designed to secure data from accidental loss and unauthorized access, alteration, or disclosure. Data in transit is encrypted using TLS 1.3, and data at rest is encrypted using AES-256. Customers' databases, configurations, and credentials (including Meta API tokens) are logically isolated in a multi-tenant environment, and integration secrets/API tokens are stored in secure credential vaults.

Data Retention: We retain data only as long as necessary to fulfill the purposes outlined in this policy or as configured by our Customers. Account data is retained for the life of the active account. Call recordings, transcripts, and CRM data are retained for the period configured by the Customer. Temporary voice recordings processed for STT/TTS are purged automatically from our operational cache shortly after processing is completed, unless a Customer explicitly requests storage for quality and training purposes.

5. User Rights & Data Deletion

WhatsApp Disconnection: Customers may disconnect their WhatsApp Business Accounts from Nuteq AI at any time. This can be executed through the Nuteq AI Dashboard by removing the WhatsApp integration, or via the Meta Business Manager settings by revoking Nuteq AI's permissions and access tokens.

Customer Data Access & Deletion: Customers may request access to, correction of, or deletion of their account information and associated communication logs by emailing us at support@nuteqai.com.

End-User Data Requests: Because Nuteq AI acts as a data processor on behalf of our Customers, any End-User wishing to access, correct, or delete their WhatsApp message history must submit their request directly to the Customer (the business with whom they communicated). Upon receiving instructions from the Customer, we will purge the requested records from our systems in accordance with applicable laws (e.g., GDPR, CCPA).

Data Wipe Execution: Once a deletion request is validated, we will permanently delete or anodize the relevant records from our active databases within thirty (30) business days. Backups are overwritten within a standard cycle not to exceed ninety (90) days.

6. Contact Information

For questions, compliance inquiries, or data deletion requests, please contact us:

Company: Zyntova Solutions LLC

Website: nuteqai.com

Email: support@nuteqai.com