1. Scope and who we are
Zyan Labs, Inc. (“Zyan,” “we,” “us,” or “our”) operates the Zyan platform at zyan.ai and its verified workspace subdomains. Zyan provides agency operations, website building, client portal, project, CRM, advertising, analytics, content, messaging, billing, and related tools. This policy applies when you visit our public site or use the platform.
2. Information we collect
Account and workspace information
We process names, email addresses, authentication records, workspace membership, roles, permissions, billing contacts, and settings needed to provide and secure your account. Passwords are handled by our authentication provider and are not stored in readable form.
Business and client data
Depending on the features you use, Zyan processes project files, websites, tasks, approvals, contacts, leads, sales records, messages, content, analytics, invoices, campaign information, and other material you or authorized workspace members submit.
Connected-platform data
When an owner connects a third-party service, we receive the data and credentials needed to provide the requested integration. This may include Meta Pages and professional Instagram accounts, messages and comments, advertising campaigns and leads, Google analytics or advertising data, calendar or mailbox data, and provider account metadata. Access tokens are stored in tenant-scoped secret storage and are not returned to ordinary browser clients.
Usage and device information
We collect IP address, browser and device details, request logs, security events, feature interactions, and diagnostic information needed for reliability, fraud prevention, and support.
3. How we use information
- Provide, maintain, secure, and improve the services you choose to use.
- Authenticate users and enforce workspace roles and permissions.
- Sync, display, publish, or send data through integrations you explicitly connect.
- Process projects, leads, campaigns, content, communications, billing, and reports.
- Respond to support requests and send essential service notices.
- Detect abuse, investigate security incidents, and comply with legal obligations.
Zyan does not sell personal information or connected-platform data. We do not use customer content to train general-purpose AI models. AI features are invoked only through enabled product workflows and are subject to the workspace controls shown in the product.
4. Meta and Instagram data
If you connect Facebook or Instagram, Zyan uses Meta APIs to access only the accounts and permissions you authorize. Depending on your configuration, this can include Page and professional-account identity, messages, comments, campaign metrics, creatives, lead-form submissions, and audience insights. We use this information only to provide the connected Zyan features, do not sell it, and restrict it to authorized members of the same workspace. You can disconnect an account in Zyan or revoke Zyan in Meta at any time.
Instructions for removing account and Meta-derived data are available on our Data Deletion page.
5. Sharing and subprocessors
We share information only as needed to operate Zyan, at your direction, or when legally required. This includes infrastructure, authentication, hosting, payment, communications, analytics, and AI providers acting on our behalf; members and client users inside the workspace scopes configured by an owner; and authorities when disclosure is required by law or necessary to protect users and the service. Our current operational subprocessor summary appears on the Security page.
6. Security and retention
We use encryption in transit and at rest, tenant isolation, role-based access controls, secret storage, logging, and other safeguards described on our Security page. No system is perfectly secure, but we review and improve these controls as the platform evolves.
We retain information while an account is active and as needed to provide services, maintain security and transaction records, resolve disputes, and satisfy legal duties. After a verified deletion request, eligible personal data is deleted or de-identified from production systems within 30 days; limited records or encrypted backups may remain for a longer period where law, fraud prevention, accounting, or backup rotation requires it.
7. Your choices and rights
Depending on your location, you may have rights to access, correct, delete, restrict, or receive a copy of personal information, or to object to certain processing. Workspace owners can manage connected accounts and member access in Zyan. You may also contact team@zyan.ai. We may verify your identity and authority before fulfilling a request.
8. Cookies, children, and changes
We use essential cookies and browser storage for authentication, security, preferences, and core service operation. Zyan is not directed to children under 18, and we do not knowingly collect their personal information. We may update this policy as Zyan changes; the date above identifies the current version, and material changes will be communicated through an appropriate service notice.