Who we are
Zensia (“we”, “us”) runs zensia.si and the Zensia digital workers (Echo, Edi, Vocalis). For personal data collected on this website, we are the Data Fiduciary under India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”). This policy explains what we collect on this website, why, how long we keep it, who helps us process it, and the rights you have. It does not cover data our customers put into their own Zensia agents; for that, the customer is the Data Fiduciary and we process it on their behalf.
What we collect and why
We collect only what each form or feature needs, and we use it only for the purpose shown next to it:
- Book a demo: name, business email, phone, company, role, team size and your notes, to schedule and run the demo and follow up about it.
- Contact form: name, email, industry, website and your message, to reply to you.
- Talking to Echo on this website (the hero character or the chat widget): your voice and what you say during the call, processed live so Echo can answer and show you pages, plus a transcript and call details we use to answer follow-up questions and improve the experience.
- After a call: the phone number and email you choose to give us, and whether you liked the call, to follow up about Echo.
- Early access (Echo, Vocalis): your business email, to tell you when access opens.
- Affiliate and solution partner applications: the details on the form, including payout details for affiliates, to review the application and run the programme with you.
- Newsletter: your email, to send product updates until you unsubscribe.
- Basic technical data: IP address, browser and pages visited, to keep the website secure, stop abuse and understand which pages are useful. See our Cookie policy for cookies.
We do not sell personal data, and we do not use it for anything other than the purposes above without asking you first.
Data from connected Google accounts
Zensia’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
If you connect Google Calendar to ECHO, we request the calendar.events scope together with your basic profile (email address). We use this access only to:
- read your busy times so your AI agent offers only free slots;
- create, and where you ask, update or cancel, events for appointments your agent books;
- show which Google account is connected.
Google user data is used only to provide the calendar features you turn on. It is not used for advertising, not sold, not shared with third parties except as needed to provide the feature, not read by humans except with your permission, for security, or where the law requires it, and not used to train generalized AI or machine-learning models.
Tokens are stored encrypted and deleted when you disconnect Google Calendar or delete your account. You can revoke access anytime at myaccount.google.com/permissions.
Zensia does not use Google APIs to create or distribute AI-generated non-consensual intimate imagery.
Your consent and marketing
We process the data above on the basis of the consent you give when you submit a form or start a call, or where the DPDP Act allows it for a legitimate use you have chosen, such as replying to your own message. Marketing emails are separate and optional: we only send them if you subscribe to the newsletter or tick the optional box on a form. That box is never ticked for you. We keep a record of each consent: what you were told, which form, and when.
Withdrawing consent and unsubscribing
You can withdraw consent at any time, as easily as you gave it. Every product update email has an unsubscribe link, and you can also unsubscribe at zensia.si/unsubscribe. To withdraw any other consent, email info@zensia.si. Once you withdraw, we stop processing that data for that purpose and delete it, unless the law requires us to keep it. Withdrawal does not affect processing done before it.
Who we share it with
We share personal data only with service providers that process it for us under contract and only on our instructions (Data Processors), and with authorities where the law requires it:
- Google Cloud and Firebase: website hosting and our database.
- Google Gemini: real-time speech and language processing when you talk to Echo on the website.
- The Zensia (Echo) platform: runs the website’s voice agents and page navigation.
- Our email and calendar providers: to send demo invites, replies and newsletters.
Some of these providers may process data outside India. We transfer data only to countries the Government of India has not restricted under the DPDP Act, and our providers are bound to protect it.
How long we keep it
- Demo requests, contact messages, call follow-ups and early-access requests: up to 12 months after our last contact with you.
- Website call transcripts and call details: up to 12 months.
- Affiliate and partner applications: for as long as we work together, then up to 12 months.
- Newsletter: until you unsubscribe. We then keep only your email and unsubscribe date, so we don’t email you again.
- Consent records: up to 3 years after the consent ends, to show what you agreed to.
We delete data sooner if you ask and the law allows it, and we keep it longer only where a law requires us to.
Your rights
Under the DPDP Act you can:
- Get a summary of the personal data we hold about you, what we do with it, and who we have shared it with.
- Ask us to correct, complete or update your data.
- Ask us to erase your data, once it is no longer needed for the purpose you gave it for.
- Withdraw your consent at any time.
- Raise a grievance with us and get a response.
- Nominate someone to exercise these rights for you if you die or are unable to.
To use any of these, email info@zensia.si from the address you used with us, or tell us how to verify you. We respond as soon as we can, and within 90 days at the latest.
Grievances and complaints
For any concern about your personal data, contact our grievance officer at info@zensia.si, or write to Zensia, Vishal Khand, Gomti Nagar, Lucknow, Uttar Pradesh 226010, India. If you are not satisfied with our response, you can complain to the Data Protection Board of India.
Security
Data is encrypted in transit and at rest by our cloud providers. Access is limited to the people who need it for the purposes above. Forms are rate limited and screened for abuse. If a personal data breach affects you, we will tell you and the Data Protection Board as the law requires.
Children
This website and our products are for businesses. They are not meant for anyone under 18, and we do not knowingly collect their personal data. If you believe a child has given us personal data, email info@zensia.si and we will delete it.
Changes to this policy
When we change this policy in a way that matters, we update the date at the top and, where we have your email and the change affects you, we tell you. The forms on this website always link to the current version.