1. Introduction
This Privacy Policy explains how Zend ("Zend", "we", "us", or "our") collects, uses, shares, and protects personal information when you use our messaging platform, website, dashboard, and APIs (the "Service").
We are based in Accra, Ghana, and process personal data in accordance with the Data Protection Act, 2012 (Act 843) of Ghana and other applicable laws. By using the Service, you agree to the practices described in this Policy and in our Terms of Service.
2. Controller and Processor Roles
For personal information relating to your account and your use of the Service, Zend acts as a data controller.
For the content of the messages you send and the recipient data you supply (for example, recipient phone numbers and email addresses), you are the controller and Zend acts as a data processor that processes that information on your behalf and on your instructions, solely to deliver your messages and provide the Service. You are responsible for having a lawful basis and appropriate consents for the recipient data you process through the Service.
3. Information We Collect
- Account information — your name, business name, email address, phone number, and login credentials, which you provide when you register.
- Message and delivery data — the content, metadata, sender IDs, recipients, timestamps, and delivery status of the messages you send through the Service.
- Payment information — records of credit purchases and transactions. Card and mobile-money details are handled by our payment processors and are not stored by us.
- Usage and analytics data — how you interact with the dashboard and API, feature usage, and aggregated statistics.
- Technical data — IP address, device and browser information, and log data collected automatically when you use the Service.
- Support communications — information you provide when you contact us.
4. How We Use Information
We use personal information to:
- provide, operate, and maintain the Service and deliver your messages;
- authenticate you, secure your account, and prevent fraud and abuse;
- process payments and manage credits and billing;
- provide customer support and respond to your requests;
- monitor, analyse, and improve the Service and develop new features;
- send you service, security, and administrative communications; and
- comply with legal obligations and enforce our Terms.
5. Legal Bases for Processing
Where the Data Protection Act, 2012 or other applicable law requires a legal basis, we process personal data on the basis of: performance of our contract with you; your consent (which you may withdraw at any time); our legitimate interests in operating and securing the Service; and compliance with our legal obligations.
7. Message Content
To deliver your messages, message content and recipient details necessarily pass through us and the relevant carriers and channel providers. We process this data on your behalf to route and deliver messages, track delivery, provide support, and detect abuse. You remain responsible for the lawfulness of the content and for the consent of the recipients you message.
8. Data Retention
We retain account information for as long as your account is active and as needed to provide the Service. Message content and delivery metadata are retained for a limited period to support delivery verification, reporting, billing, troubleshooting, and legal compliance, after which they are deleted or anonymised. We may retain certain information longer where required to comply with legal obligations, resolve disputes, or enforce our agreements. You may request deletion of your data as described below.
9. Data Security
We implement technical and organisational measures designed to protect personal information, including:
- encryption of data in transit and, where appropriate, at rest;
- access controls, authentication, and the principle of least privilege;
- API keys and credentials that you can rotate and revoke;
- monitoring, logging, and regular review of our systems.
No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
10. International Transfers
Some of our service providers and infrastructure may be located outside Ghana, which means your information may be transferred to and processed in other countries. Where we do so, we take steps to ensure that appropriate safeguards are in place in accordance with applicable data-protection law.
11. Your Rights
Subject to applicable law, including the Data Protection Act, 2012 (Act 843), you have the right to:
- access the personal data we hold about you;
- request correction of inaccurate or incomplete data;
- request deletion of your data;
- object to or restrict certain processing;
- withdraw consent where processing is based on consent; and
- request a copy of your data in a portable format.
To exercise these rights, contact us at privacy@tryzend.com. You also have the right to lodge a complaint with the Data Protection Commission of Ghana.
13. Children's Privacy
The Service is intended for businesses and individuals aged 18 and over. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.
14. Third-Party Links and Services
The Service may link to or integrate with third-party websites and services that we do not control. This Policy does not apply to those third parties, and we encourage you to review their privacy policies.
15. Changes to This Policy
We may update this Privacy Policy from time to time. We will post the updated Policy and revise the "Last updated" date above, and where changes are material we will provide additional notice.
16. Contact Us
If you have questions about this Policy or how we handle your data, contact us at privacy@tryzend.com.