Privacy Policy

1. Information We Collect

Account and Business Information

We may collect information used to create, verify, administer, and support an account, including:

• Name, business name, email address, telephone number, and business address
• Account credentials, preferences, and authorized-user information
• Business registration or tax-identification information where required for verification or service activation

Customer-Provided Contact Data

Business customers may upload, enter, synchronize, or otherwise provide information about their customers, contacts, employees, members, or other recipients. This may include names, email addresses, telephone numbers, mailing addresses, custom fields, tags, communication preferences, consent or opt-out status, appointment or booking information, and other information submitted by the customer. zCallMagic processes this information on behalf of the business customer to provide the requested Services.

Communications Data

We may process message, email, or voice-message content; sender and recipient information; delivery and call status; timestamps; communication metadata and logs; and opt-in or opt-out activity.

Calendar and Connected-Service Data

When a user chooses to connect a third-party account or service, zCallMagic may receive information that the user authorizes that service to provide. Depending on the integration and permissions, this may include calendar names, event titles, appointment dates and times, descriptions, locations, attendee names and email addresses, booking information, and other event or account information needed to provide the requested integration.

zCallMagic accesses connected-service data only after the user authorizes the connection. For read-only integrations, zCallMagic uses only permissions needed for the requested feature and does not modify connected-service data unless the user separately authorizes functionality that requires modification.

Billing and Transaction Information

We may collect billing name and address, subscription and invoice information, transaction amounts, payment status, and payment-method metadata such as card type and last four digits where provided. Complete payment-card credentials may be processed by authorized payment-processing services rather than stored directly by zCallMagic, where applicable.

Usage and Technical Information

We may collect IP address, browser and device information, operating system, login and application activity, API activity, audit and error logs, security events, approximate location derived from an IP address when applicable, and information from cookies and similar technologies.

2. How We Use Information

We may use information to:

• Create and administer accounts and authenticate users
• Provide platform functionality and process customer-requested communications
• Manage contacts, campaigns, appointments, calendar-based automation, notifications, and reminders
• Process billing and subscriptions and provide customer support
• Monitor delivery and service status, troubleshoot problems, and improve reliability and usability
• Prevent fraud and abuse, secure accounts and infrastructure, and maintain audit records
• Comply with legal obligations, enforce contractual terms, and protect the rights and safety of users, recipients, zCallMagic, and others

zCallMagic does not use connected-account data for unrelated advertising.

3. Customer Responsibility for Recipient Data and Consent

Customers are responsible for having a lawful basis to collect and use recipient information; obtaining legally required permissions and consents before communicating; maintaining consent records where required; honoring opt-out, unsubscribe, and revocation requests; ensuring uploaded data was lawfully obtained; and complying with applicable messaging, calling, email, privacy, marketing, and consumer-protection requirements.

zCallMagic provides technology customers use to communicate with recipients. zCallMagic does not determine whether a customer has legal authority to contact a particular recipient.

4. How We Share Information

zCallMagic does not sell personal information in the ordinary meaning of selling data for money.

We may disclose information to service providers and subprocessors that help operate the Services, including hosting and infrastructure, communications and telecommunications, email delivery, payment processing, authentication and identity, cloud and storage, analytics and monitoring, customer support, security and fraud prevention, calendar and productivity integrations, and AI or automation services when a user enables functionality requiring them.

Providers receive only information reasonably necessary to perform their role and are expected to process it subject to applicable contractual, confidentiality, security, and legal obligations. Information may also be disclosed when required by law; in response to lawful government requests; to enforce agreements or protect users or the platform; with customer authorization; or in connection with a merger, acquisition, financing, restructuring, or sale of business assets.

5. Connected Accounts and API Data

zCallMagic accesses information from connected services only after the user explicitly authorizes the connection. zCallMagic requests permissions intended to be limited to those necessary to provide the user-requested functionality.

Information obtained from connected services is used only to provide or support requested functionality, maintain security, troubleshoot the integration, and comply with applicable law. zCallMagic does not sell connected-service user data or use it for unrelated advertising or behavioral profiling. Access is limited to authorized systems and personnel where reasonably necessary for service operation, security, support, or compliance.

Where an integration provider imposes additional API user-data or limited-use requirements, zCallMagic intends to process information obtained from that provider consistently with those requirements.

zCallMagic's use and transfer of information received from third-party APIs will comply with the applicable API Services User Data Policy, including any Limited Use requirements.

6. AI-Assisted Features and Google Workspace Data

zCallMagic may provide AI-assisted functionality to help users understand and use the zCallMagic platform and to assist with user-requested tasks such as drafting, rewriting, translating, or improving communication content. AI-assisted communication drafting is initiated by the user and may help compose or improve content such as SMS or email messages.

Users may also optionally connect supported third-party productivity services, including calendar services, to enable user-authorized automation features. Google Calendar integration is optional and is initiated by the user.

zCallMagic's AI-assisted functionality operates independently from its Google Workspace integrations. Google Workspace API user data, including Google Calendar information and any raw, aggregated, anonymized, or derived data obtained from Google Workspace APIs, is not transmitted to or processed by zCallMagic's AI/ML services or third-party AI/ML service providers.

When a user chooses to connect Google Calendar, zCallMagic uses the authorized Calendar data only to provide the requested Calendar functionality, including identifying booked and upcoming appointments and executing reminder or notification workflows configured by the user. Appointment or event information may trigger notifications through supported channels such as SMS, email, voice, or other enabled messaging channels.

Notification timing, communication channels, message templates, and automation settings are configured within zCallMagic and are not obtained from Google Calendar.

Google Workspace API user data is not used by zCallMagic or transferred to AI/ML services to create, train, or improve generalized or foundational AI/ML models.

zCallMagic's use and transfer of raw or derived user data received from Google Workspace APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

7. Data Security and Protection

zCallMagic maintains administrative, technical, and organizational safeguards designed to protect personal information and connected-account data against unauthorized access, disclosure, alteration, misuse, loss, or destruction. Depending on the information and system, safeguards may include:

• HTTPS/TLS protection for data transmitted between supported clients and zCallMagic services
• Secure handling of sensitive credentials, authentication secrets, and OAuth tokens
• Authentication, authorization, role-based or account-based access restrictions, and tenant-isolation controls
• Restricted administrative access and secure credential and secret management
• Network and infrastructure security controls, logging, monitoring, and security-event investigation
• Software patching, dependency maintenance, backup and recovery procedures, secure development practices, and access revocation when no longer required

OAuth credentials and other sensitive authentication secrets are stored using security controls designed to prevent unauthorized access. OAuth access and refresh tokens are treated as sensitive credentials and are not intentionally exposed to other customers or included in normal application logs.

No method of electronic transmission or storage is completely secure, and zCallMagic cannot guarantee absolute security.

8. OAuth Credentials and Authentication Tokens

Authentication tokens are treated as sensitive credentials and used only to maintain integrations authorized by the user. Tokens are not intentionally exposed to other customers or included in normal application logs. Access is restricted to systems and components that require them. Users may revoke connected-account access as described below.

9. Data Retention

zCallMagic retains information only as reasonably necessary to provide Services, maintain accounts, complete billing and financial records, fulfill requested automation, maintain security and audit records, resolve disputes, enforce agreements, and meet legal and regulatory obligations. Retention periods vary by data category and processing purpose.

Connected-service data is retained only as long as reasonably necessary to provide the connected feature or satisfy legitimate legal, security, operational, or contractual requirements. Account deletion may not immediately delete every record because some information may need to be retained for legal, fraud-prevention, security, accounting, dispute-resolution, backup, or compliance purposes.

10. Data Deletion and Connected Account Revocation

Users may disconnect supported integrations through zCallMagic when that functionality is available or revoke access directly through the connected service. After authorization is revoked, zCallMagic will stop requesting new information through that authorization.

Users may request deletion of eligible personal information or connected-service data by emailing support@solozenith.com. Deletion requests are subject to applicable legal, security, accounting, fraud-prevention, contractual, and record-retention obligations.

11. Cookies and Similar Technologies

zCallMagic may use cookies, session storage, local storage, and similar technologies for authentication, security, session management, preferences, product functionality, analytics, and performance monitoring. Browser controls may allow users to limit some technologies, but doing so may affect Service functionality.

12. International Data Processing

Depending on infrastructure and service providers, information may be processed in countries other than the user's country. Where required, zCallMagic will use legally recognized safeguards for applicable cross-border transfers.

13. Privacy Rights and Choices

Depending on jurisdiction, individuals may have rights to request access, correction, deletion, or portability; object to or restrict certain processing; withdraw consent where processing depends on consent; opt out of certain communications; or complain to an appropriate privacy authority. Rights vary by location and are subject to applicable legal exceptions.

To submit a privacy request, email support@solozenith.com. We may take reasonable steps to verify a request and the requester's authority before responding.

14. Communications Preferences

Recipients may opt out of marketing or communication messages using applicable unsubscribe or opt-out mechanisms. Transactional or service-related communications may continue where permitted or required, including account, security, billing, or service notices. Business customers are responsible for honoring recipient preferences when using zCallMagic.

Mobile telephone numbers, SMS opt-in information, and messaging consent records will not be sold, rented, or shared with third parties or affiliates for their independent marketing or promotional purposes. Information may be processed by service providers acting on behalf of zCallMagic or the applicable business only as reasonably necessary to provide, operate, secure, support, or comply with requested communication services.

Message frequency varies based on the applicable business and messaging program. Message and data rates may apply. Recipients may reply STOP to opt out or HELP for assistance. Businesses using zCallMagic are responsible for obtaining and maintaining required recipient consent and for honoring applicable opt-out and revocation requests.

15. Children's Privacy

zCallMagic is intended for business use and is not intended for children under 13 or another applicable minimum age. zCallMagic does not knowingly collect personal information directly from children for independent consumer use.

16. Legal Requirements and Safety

Information may be processed or disclosed where reasonably necessary to comply with law or valid legal process, investigate fraud or abuse, enforce contractual rights, protect users and platform infrastructure, prevent security incidents, or protect the rights, property, or safety of zCallMagic or others.

17. Business Transfers

Subject to applicable law, information may be transferred as part of a merger, acquisition, financing, reorganization, sale of assets, bankruptcy, or similar business transaction.

18. Changes to This Privacy Policy

We may update this Privacy Policy periodically. Material changes may be communicated through a website or application notice, email, or another appropriate method. The “Last Updated” date identifies the most recent revision.

19. Contact Us