1. Who we are
Zenziva is operated by PT. Zenziva Zeta Indonesia (the "data controller" for this Policy), based at Jl. Arcamanik Endah No. 9B, Bandung 40293, Indonesia.
This Privacy Policy applies to data we collect about our customers (account holders) and about message recipients whose phone numbers and message content pass through our platform.
2. Data we collect
Account data — name, business name, NPWP, address, email, phone, and password hash for the people who register a Zenziva account.
Billing data — top-up records, invoice information, and transaction references issued to your bank or payment provider.
Message data — the recipient phone number, message content, sender ID, template name, timestamp, delivery status, and operator routing for every message you submit. We store this for as long as the law and our retention policy require, primarily for delivery reporting and dispute resolution.
Usage data — log files, IP addresses, browser, and console access patterns for security and abuse prevention.
3. How we use it
To deliver the messaging services you have requested.
To bill you and issue tax invoices (faktur pajak).
To maintain delivery reports and logs for your audit and dispute purposes.
To detect, prevent, and investigate fraud, abuse, or violations of our Terms.
To comply with Indonesian law and respond to lawful requests from authorities.
4. Sharing with third parties
Mobile network operators — required to deliver SMS and Voice. We share only the recipient number and message content with the operator handling the delivery.
Meta (WhatsApp) — for WABA, we share the recipient and template data with Meta's WhatsApp Business platform, subject to their terms.
Banks and payment providers — for processing top-ups and refunds.
Government and regulators — when required by Indonesian law.
We do not sell your data or message content to advertisers, data brokers, or any third party for marketing purposes.
5. Recipients of your messages
If you send messages through Zenziva, you are responsible for obtaining the recipient's consent and for the lawful processing of their personal data. You act as the data controller for the recipients; we act as the data processor.
6. Retention
Account and billing data are retained for the duration of your account plus 5 years for tax-record purposes.
Outbox messages — for SMS Masking and Voice — are retained for 6 months and are available for retrieval and export from the console at any point within that window. After 6 months, message content and individual delivery records are purged.
7. Your rights
Subject to Indonesian law, you may request access, correction, or deletion of your personal data. Send requests to email.
We may need to verify your identity before fulfilling requests.
8. Security
We use industry-standard technical and organizational measures to protect your data, including encryption in transit (TLS), restricted internal access, and audit logging.
9. Cookies & analytics
Our website uses Google Analytics to understand how visitors use the site — pages viewed, traffic sources, and interactions such as sign-ups, contact form submissions, or WhatsApp button clicks. To do this, Google places cookies in your browser and processes pseudonymized usage data (including IP address and device identifiers).
This data is processed by Google under their privacy policy. We use it in aggregate for statistics and service improvement and — if you arrive from an ad — to measure the effectiveness of Google Ads campaigns. We do not use this data to identify you personally.
You can opt out of analytics cookies through your browser settings, or by installing the Google Analytics Opt-out Add-on at https://tools.google.com/dlpage/gaoptout. Disabling it does not affect the core functionality of the service.
10. Changes to this policy
We may update this Privacy Policy and will announce material changes in advance. The "Last updated" date at the top of this page reflects the latest revision.