Privacy Policy

Updated: 8/4/2026

Data we collect

• Account info: email, name, password (hashed with argon2id).
• Zalo info: your Zalo session/cookie (AES-256-GCM encrypted in DB), uid, Zalo phone number, messages.
• Your customer data: contacts, leads, customers, Zalo conversations. This belongs to your business — Webico does not access it unless you request technical support.
• Telemetry: error logs, AI message logs (for debugging). We do not store private message content outside your workspace.

How we use it

• Run the service: connect to Zalo, generate AI messages, render the inbox.
• AI providers: messages are sent to DeepSeek/Anthropic/OpenAI APIs to generate responses. These providers have their own privacy policies.
• Product improvement: only aggregated, anonymous data — never personal.

Storage and security

Data lives in PostgreSQL with per-workspace isolation. Zalo sessions are encrypted with AES-256-GCM using keys only Webico holds. Infrastructure is hosted in data centers with international security certifications.

Data sharing

Webico does NOT sell, NOR rent your data. We only share with:

• AI providers (DeepSeek/Anthropic/OpenAI) when generating responses — subject to their policies.
• Law enforcement when legally required.

Your rights

• Export all your business data to JSON/CSV (request via email).
• Delete all your business data (delete the workspace).
• Change/delete your personal data anytime.

Cookies

We use cookies for login sessions (httpOnly, secure). No ad-tracking cookies.

Contact

All data requests: hello@webico.ai · Zalo 0995053865