Security
Your customers’ data, protected.
How we keep your WhatsApp and Instagram conversations safe — in plain words.
-
Hosted in India
Your workspace data is hosted primarily in India.
-
Encrypted
TLS 1.2+ in transit. Databases, storage and backups encrypted at rest.
-
Role-based access
Give each teammate only the access they need.
-
Workspace isolation
One workspace can never read another’s data.
-
Protected tokens
Meta access tokens are stored encrypted and rotated if ever at risk.
-
Audit & monitoring
Admin and data-access events are logged and monitored.
DPDP Act 2023
Clear roles under India’s data law.
- You control your customers’ data and their consent to be messaged.
- We process it only to run Zanoo for you — never sold, never used to train general AI models.
- If a breach ever affects you, we tell you within 72 hours.
- Need a DPA? Email privacy@zanoo.in.
How long we keep data
- Chats and contacts
- Your plan’s history window. Exportable for 30 days after you leave, then deleted within 90 days.
- Account data
- While your account is active, plus up to 90 days.
- Invoices and tax records
- 8 years, as Indian law requires.
- Backups
- Roll off automatically, normally within 35 days.
Sub-processors
Who helps us run Zanoo.
| Provider | Why |
|---|---|
| Meta Platforms | WhatsApp Business Platform and Instagram messaging |
| Cloud hosting provider (India region) | Application, databases, storage and backups |
| Zoho ZeptoMail | Transactional email |
| PayU | Subscription payments |
| Anthropic (Claude), OpenAI (ChatGPT) or Google (Gemini) | Zanoo AI, using the provider your workspace picks; only when you turn on or use an AI feature |
| Google, OpenAI | Only when you switch on an integration or chatflow AI step that uses them |
Found a security issue?
Email security@zanoo.in with the steps to reproduce it. Please give us reasonable time to fix it before sharing it publicly.
Is WhatsApp itself down? Check Meta’s platform status.
Start free. Upgrade when you grow.
Connect WhatsApp and Instagram in minutes. No setup fee, no contract.