Privacy Policy

1. Information We Collect

We collect the following information when you use Zera Align:

• Account Information: Full name, email address, phone number, and company name provided during registration.
• Profile Photo: Optional profile image you choose to upload.
• Project Data: Projects, tasks, team members, leads, and other content you create within the app.
• Usage Data: Information about how you interact with the app, including features used and actions taken.
• Device Information: Device type, operating system, app version, and push notification tokens.
• Location Data: Approximate location when you use the attendance check-in feature (only with your permission).

2. Data from Meta (Facebook/Instagram)

When you connect your Meta account, we collect the following data as authorized by you through Facebook Login for Business:

• Page Information: Names and IDs of the Facebook Pages you manage and choose to connect.
• Lead Ad Data: Contact information (name, phone number, email) submitted by potential customers through your Facebook and Instagram Lead Ad forms.
• Ad Campaign Data: Campaign names, form names, and ad IDs associated with leads.
• Access Tokens: Encrypted OAuth tokens to maintain your connection (stored securely using AES-256-GCM encryption).

We only access the specific data you authorize. We do not access your personal Facebook profile, posts, friends list, or messages.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Zera Align application.
• Manage your account and enable project collaboration with your team.
• Import and display leads from your Meta Lead Ad campaigns so you can follow up with potential customers.
• Send push notifications about new leads, messages, and project updates.
• Detect duplicate leads within your organization to avoid redundant follow-ups.
• Provide customer support and respond to your requests.

4. Data Sharing

We do not sell, rent, or trade your personal data or Meta data to any third party. We may share your information only in the following cases:

• Team Collaboration: Project data and leads are shared with team members within your company as configured by you.
• Service Providers: We use cloud hosting and storage providers to operate our service. These providers process data on our behalf under strict contractual obligations.
• Legal Requirements: We may disclose information if required by law, court order, or to protect our legal rights.

5. Data Security

We implement industry-standard security measures to protect your data, including:

• Encrypted data transmission (HTTPS/TLS) for all communications.
• AES-256-GCM encryption for stored Meta access tokens.
• Secure authentication using JWT tokens.
• HMAC-SHA256 signature verification for incoming Meta webhooks.
• Regular security reviews and updates.

However, no method of electronic storage is 100% secure, and we cannot guarantee absolute security.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide our services. Lead data imported from Meta is retained until you delete it or disconnect your Meta account. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law.

7. Data Deletion

You can request deletion of your data at any time by:

• Disconnecting Meta: Go to Settings > Meta Integration > Disconnect. This removes your Meta connection and access tokens.
• Deleting your account: Contact us at the email below to request complete account deletion. All data will be permanently deleted within 30 days.
• Deleting specific leads: You can delete individual leads from within the app at any time.

8. Your Rights

You have the right to:

• Access: Request a copy of the personal data we hold about you.
• Update: Correct or update your personal information through your profile settings.
• Delete: Request deletion of your account and all associated data.
• Revoke Meta Access: Disconnect your Meta account at any time.
• Export: Request a portable copy of your data.
• Withdraw Consent: You may withdraw consent for data processing at any time by contacting us.

9. Children's Privacy

Zera Align is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy within the app and updating the "Last updated" date.

11. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us at:

support@zeraalign.com