Privacy Policy

Last updated: 1 October 2026

Ziva is operated by Techlab X ("we", "us"). This policy explains what information we collect when you use Ziva, how we use it, and the choices you have.

Information we collect

• Account information: your name, email address and sign-in details when you register (including through Google sign-in).
• Connected platform data: when you connect TikTok, YouTube, Instagram or Facebook through their official sign-in, we receive the data you authorize. This can include your profile and account identifiers, your posts and videos, comments on your posts, messages sent through your automations, and basic performance metrics. We also receive access tokens that let us act on your behalf.
• Content you provide: videos, captions, messages, links and workflow settings you create in Ziva.
• Audience and lead data: public usernames, platform user IDs and comment text of people who interact with your connected posts, plus any details they choose to share with you. For this data you are the controller and we process it on your behalf.
• Billing information: payments are handled by our payment processors (Paystack, Flutterwave and Stripe). We do not store full card numbers.
• Usage and device data: log data such as IP address, browser type and the actions you take in the app, used for security, debugging and improving the product. We only use cookies that are essential to run the service.

How we use information

• To run the automations you set up: publishing your videos, replying to comments, sending messages and recording leads, exactly as you configure them.
• To generate titles, captions and replies with AI. The relevant content is sent to our AI provider for processing under terms that do not allow it to be used to train their models.
• To provide support, keep the service secure and prevent abuse.
• To bill you and to send service and account-related emails.

We do not sell your personal information, and we do not use it for third-party advertising.

Google and YouTube data

Ziva's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Ziva uses YouTube API Services. By connecting a YouTube account you agree to the YouTube Terms of Service, and Google's handling of your data is described in the Google Privacy Policy. You can revoke Ziva's access at any time from your Google security settings.

TikTok and Meta (Instagram, Facebook) data

We access TikTok, Instagram and Facebook data only through their official APIs, only for the features you enable, and in line with each platform's developer terms. You can disconnect an account in Ziva at any time, or remove our app from your platform settings. Either way, we delete the stored access tokens for that account.

Service providers

We share data only with providers that help us run Ziva, under contract:

• Google Cloud and Firebase: hosting, databases and authentication
• Cloudflare: media storage and delivery
• Anthropic: AI text generation
• Paystack, Flutterwave and Stripe: payments
• Sentry: error monitoring

We may also disclose information if required by law or to protect rights and safety.

Retention

• Uploaded videos and the processed versions we create are deleted automatically after they have been published (within 30 days at most).
• Access tokens for a connected account are deleted as soon as you disconnect it.
• When you delete your account, we delete your personal data within 30 days, except where we must keep records by law (for example, invoices).

Security

Data is encrypted in transit and at rest. Platform access tokens are additionally encrypted with keys managed in a hardware-backed key management service, and access is limited to the systems that need it.

Your rights

Depending on where you live (including under the Nigeria Data Protection Act 2023 and the GDPR), you may have the right to access, correct, export or delete your personal data, and to object to or restrict certain processing. See how to delete your data, or email privacy@ziva.run.

International transfers

We and our providers may process data in countries other than yours. Where required, we use appropriate safeguards for these transfers.

Children

Ziva is not directed to children under 13, and we do not knowingly collect their data.

Changes

If we make material changes to this policy, we will update the date above and notify account holders by email or in the app.

Contact

Questions about privacy: privacy@ziva.run.