This Privacy Policy explains how Zela (“we”, “us”, or “our”) collects, uses, shares, and protects personal information when you use the Zela booking platform, public booking pages, Telegram bot, APIs, and related services (collectively, the “Service”). We aim to align with the principles of the GDPR and similar data-protection laws regardless of where you operate.
1. Who we are
Zela is the operator of the Service and the data controller for personal information collected about business owners and staff who sign up and use the platform. For personal information collected about end customers who book through a business that uses the Service, that business is the data controller and we act as the data processor on its behalf.
2. Information we collect
We collect personal information in the following ways:
- Information you give us — name, email, phone number, business name, Telegram username (if linked), service catalogue, working hours, and payment details for paid plans.
- Information your customers give the businesses that use us — name, phone, optional notes, and the booking they made. We process this on behalf of that business.
- Automatic information — IP address, device and browser metadata, pages visited, timestamps, and basic diagnostic logs used for security and reliability.
- Cookies & similar technologies — used to keep you signed in, remember preferences, and measure anonymous product usage.
3. How we use information
We use personal information to:
- Provide, maintain, secure, and improve the Service.
- Create and manage your account, authenticate sessions, and process payments.
- Send booking confirmations, reminders, reschedule and cancellation notices, and other transactional messages through the channels you configure (Telegram, SMS, email).
- Respond to support requests, troubleshoot issues, and communicate about service updates.
- Detect, prevent, and respond to fraud, abuse, security incidents, and violations of our Terms.
- Comply with legal obligations.
4. Legal bases (where applicable)
Where data-protection law requires a legal basis to process personal information, we rely on (i) performance of a contract with you, (ii) our legitimate interests in operating and securing the Service, (iii) your consent (which you may withdraw at any time), or (iv) compliance with a legal obligation.
5. Sharing of information
We share personal information only as needed and only with:
- Sub-processors — vendors who help us run the Service (cloud hosting, database hosting, messaging providers, payment processors, error monitoring, analytics). These vendors are bound by contractual confidentiality and data-protection terms.
- The business you booked with — if you are an end customer, your booking and contact details are shared with the business so it can serve you.
- Authorities — when required by law, regulation, legal process, or to protect the rights, property, or safety of us, our users, or the public.
- Successors — in the event of a merger, acquisition, or asset sale, personal information may transfer to the successor entity, subject to the commitments in this policy.
We do not sell personal information.
6. International transfers
Personal information may be stored or processed in countries other than the one you are located in. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for cross-border transfers.
7. Data retention
We keep personal information for as long as your account is active, as needed to provide the Service, and as required to meet legal, accounting, or reporting obligations. When you close your account, we will delete or anonymize your personal information within a reasonable period, except where retention is legally required.
8. Your rights
Depending on where you live, you may have the right to access, correct, delete, port, or restrict processing of your personal information, to object to processing, and to withdraw consent. You also have the right to lodge a complaint with your local data-protection authority. To exercise these rights, contact us at hello@zela.am. If you are an end customer of a business that uses Zela, please contact that business directly first; we will assist them in fulfilling your request.
9. Security
We use a combination of technical and organisational measures to protect personal information, including encryption in transit, access controls, audit logging, and regular review of our practices. No system is perfectly secure, however, and we cannot guarantee absolute security.
10. Children
The Service is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, contact us and we will take appropriate steps to delete it.
11. Changes to this policy
We may update this Privacy Policy from time to time. If a change is material, we will provide notice (for example, by email or in-app banner) before it takes effect. The “Effective” date at the top of this page reflects the latest revision.
12. Contact
Questions, requests, or concerns about your privacy? Write to hello@zela.am.