Home / gdpr

GDPR and data privacy at Zepiva

Zepiva is a B2B communication SaaS that processes customer interactions as an authorised orchestration layer on top of Meta WhatsApp Cloud API, Google Workspace email, and certified telephony providers — not as a permanent conversation warehouse.

WhatsApp and email conversation data

• WhatsApp: Message history and media remain in Meta’s infrastructure. Zepiva uses the official Cloud API via OAuth to send/receive on your behalf.
• Email: Inbox data remains in your Google Workspace / Gmail account, accessed via scoped OAuth2 tokens.
• Voice: Call audio is processed in real time via telephony partners (e.g. Telnyx / Vapi) to deliver AI voice responses.

What we do not do

• We do not sell customer conversation data.
• We do not use private WhatsApp/email chats to train public foundation models.
• We do not scrape WhatsApp Web unofficially.

EU / UK rights

Account holders can request export of workspace settings/logs and account deletion via support@zepiva.com. Full legal text: Privacy Policy.

Markets

These practices matter especially for customers in the United Kingdom, Germany, France, Netherlands, Spain, and the wider EEA who evaluate vendors on GDPR clarity.