Privacy Policy

Last updated: July 22, 2026

AskZeron is operated by Aqua Soft Solutions Pvt Ltd (trading as Drazlon), registered in Pakistan. This policy explains what data we collect, why, and how we protect it. We keep it straightforward — no legal fog.

What we collect

Account information

When you sign up, we collect your name, email address, and a hashed password. If you provide it, we also store your website URL and company name. This is the minimum we need to create and secure your account.

Business configuration

You provide details about your business — product info, shipping policy, return policy, FAQs, business hours — so our AI can answer your visitors accurately. This data is stored in Cloudflare KV and used exclusively to power your chatbot.

Visitor conversations

When a visitor chats with your AskZeron widget, we store the conversation text, their approximate country (from Cloudflare's geo headers), their device type, and any contact details they voluntarily share (name, email). Conversations are retained for 30 days, then automatically deleted.

Lead data

When a visitor shares their email through the chatbot, we store it as a lead on your dashboard — including their name, email, deal score, and a conversation snippet. This data belongs to you; we store it on your behalf.

Payment information

Payments are processed by NOWPayments (cryptocurrency). We never see, store, or handle your wallet keys or payment credentials. We store only the order ID, plan selected, amount, and payment status for our records.

Technical data

We collect standard technical data: IP address (for rate limiting and security, not stored long-term), browser user agent (for error diagnostics), and Cloudflare analytics (page views, country). We do not use tracking pixels, third-party analytics, or advertising cookies.

How we use your data

• To provide and operate the AskZeron service — powering your AI chatbot, capturing leads, booking meetings, sending email notifications
• To process payments and manage your subscription
• To send transactional emails — lead alerts, booking confirmations, account notifications (via Resend)
• To detect and prevent abuse, fraud, and security threats
• To improve the service — aggregated, anonymized usage patterns only

We do not sell, rent, or share your data with advertisers. Ever.

AI processing

Visitor conversations are processed by Anthropic's Claude API to generate responses. Each conversation is sent to Claude with your business context (the information you configured in your dashboard) as a system prompt. Anthropic does not use API inputs to train their models. No visitor data is retained by Anthropic after processing.

Where data is stored

All data is stored on Cloudflare Workers KV, distributed across Cloudflare's global edge network. Cloudflare is SOC 2 Type II certified and GDPR compliant. Data is encrypted in transit (TLS) and at rest.

Data retention

• Conversations: 30 days, then auto-deleted
• Leads: Retained until you delete your account
• Bookings: 90 days
• Error logs: 30 days
• Audit logs: 90 days
• Email logs: 30 days
• Account data: Until you request deletion
• Payment records: 90 days (for dispute resolution)

Cookies

AskZeron's dashboard uses localStorage to store your session token — this is not a cookie and is not shared with any third party. The embeddable widget uses localStorage on your visitor's browser to save chat threads locally. We do not set any tracking cookies or use cookie-based advertising.

Third-party services

• Cloudflare — hosting, CDN, KV storage, DDoS protection
• Anthropic (Claude API) — AI conversation processing
• Resend — transactional email delivery
• NOWPayments — cryptocurrency payment processing
• Google Fonts — typography (Syne, Inter)

Each provider has its own privacy policy. We only share the minimum data each service needs to function.

Your rights

You can request at any time:

• Access — a copy of all data we hold about you
• Correction — fix any inaccurate information
• Deletion — complete removal of your account and all associated data
• Export — download your leads, conversations, and settings (available in your admin dashboard under Backup)

To exercise any of these rights, email us at help@askzeron.com. We respond within 48 hours.

Children

AskZeron is a business tool. We do not knowingly collect data from anyone under 18. If you believe a minor has provided us with personal information, contact us and we will delete it immediately.

Security

Passwords are hashed using PBKDF2 with SHA-256 (100,000 iterations) and unique salts — we never store plaintext passwords. All API communication uses TLS encryption. Admin sessions expire after 12 hours. Failed login attempts are logged and rate-limited. We conduct regular security reviews of our codebase.

Changes to this policy

If we make material changes, we'll update the "Last updated" date at the top and, for significant changes, notify you via email. Continued use of AskZeron after changes constitutes acceptance.