VERSION 2.4 | LAST UPDATED: MAY 2024

Privacy & Trust Center

At Zibo ZHOU, we believe privacy is a fundamental human right. Our commitment to data security and transparency is at the core of our AI infrastructure.

Compliance Framework

Zibo ZHOU operates under a strict Global Privacy Standard, ensuring full compliance with international data protection regulations:

GDPR: General Data Protection Regulation (EU)
CCPA/CPRA: California Consumer Privacy Act
NZ Privacy Act 2020: New Zealand Data Sovereignty Standards

Data Collection & Processing

We process information only to provide the automation services you have configured. This includes:

Communication Data: Content of messages processed via WhatsApp, Instagram, and Messenger to facilitate AI responses.
User Metadata: Social media identifiers, time zones, and language preferences necessary for contextual interaction.
Integration Tokens: Securely encrypted API keys and access tokens for third-party platform synchronization.

Our "Zero-Knowledge" Policy

Zibo ZHOU does not sell, lease, or monetize your customer data. Our AI models are siloed, meaning the data from your conversations is never used to train models for other clients.

Security Architecture

We employ enterprise-grade security protocols to protect your information at every layer:

End-to-End Encryption: All data in transit is protected via TLS 1.3, and data at rest is secured using AES-256 encryption.
Infrastructure: Hosted on Tier-4 SOC2 Type II compliant data centers with 24/7 monitoring.
Access Control: Strict Principle of Least Privilege (PoLP) and Multi-Factor Authentication (MFA) for all internal system access.

Third-Party Subprocessors

To deliver our services, we partner with industry leaders who maintain the same high standards of privacy. This includes cloud infrastructure providers (AWS/Google Cloud) and API gateways for social platforms (Meta, WhatsApp Business).

Your Rights & Controls

You maintain full ownership of your data. At any time, you may:

Request a full export of your conversational data.
Invoke the "Right to be Forgotten" to permanently delete all records from our system.
Modify data retention policies to suit your business requirements.

Contact Privacy Team

For inquiries regarding Data Processing Agreements (DPA) or security audits, please contact our Data Protection Officer:

Email: privacy@echomindnz.com
Attention: DPO, Compliance Department