Privacy Policy
Last Updated: August 25, 2025
Welcome to Z360 (“Z360BIZ LLC,” “Z360,” “we,” “us,” or “our”). We build a digital teammate for small businesses that talks to customers and finishes approved tasks inside the software you already use. This Privacy Policy explains how we collect, use, share, and protect personal information (“Personal Data”) when you visit www.z360.biz (the “Site”) or use the Z360 platform and related services (the “Services”).
By using our Site or Services, you agree to this Policy.
Scope & focus. Z360 is U.S.-based and primarily serves U.S. small and mid‑sized businesses. This Policy is aligned with U.S. privacy laws. We don’t specifically target individuals in the EU or other regions outside the U.S.
1) Who we are
- Legal entity: Z360BIZ LLC
- Website: www.z360.biz
- What we do (plain English): Z360 is a dependable digital teammate that handles customer conversations (calls, text, email, chat, forms) and follows through on the work via approved abilities. It can already click and type in your browser to complete supported tasks in your tools, with a click‑by‑click audit trail. Unusual cases are handed back to you.
2) Our role with your data
- Controller (we decide purposes/means): account and billing data, product analytics, website logs, support communications, and marketing preferences.
- Processor (you decide; we act on your behalf): content and records you upload or connect (e.g., contacts, messages, tickets, call audio/transcripts if enabled), plus data the digital teammate processes to execute approved abilities in your tools.
- For processor use, we only process your data to provide and improve the Services you’ve requested and within your approved abilities. A Data Processing Addendum (DPA) is available upon request.
Healthcare note: Z360’s standard subscription is not designed for PHI/HIPAA. If you require HIPAA support, a signed Business Associate Agreement (BAA) is required before storing or processing any PHI.
3) Information we collect
1. You provide directly
- Account & business info (name, email, phone, business name, industry), credentials you create, profile settings.
- Billing & subscriptions (billing contact and address; full payment details handled by Stripe).
- Conversations & content: messages, attachments, forms, tickets, notes, reminders, and (if enabled) call recordings and transcripts.
- Configuration: approved abilities, operating hours, routing rules, knowledge articles, workflows, and integrations you connect.
- By providing your phone number, you consent to receive marketing SMS and calls from Z360.BIZ. Message frequency may vary, and message and data rates may apply. Reply STOP to opt out or HELP for help. Your mobile information will not be sold or shared with third parties for marketing purposes.
2. Collected automatically
- Usage & device logs: IP, device/OS, browser, time zone, pages/features, errors/performance.
- Cookies & similar tech: to keep you signed in, remember preferences, and analyze usage.
- Browser execution/audit trail (when you enable it): click/keystroke events, page titles, limited URL metadata, timestamps, and system responses necessary to show what was done. We do not capture full page contents unless required for the task (e.g., form payload) or you explicitly provide it.
3.From integrations you connect
- With your permission, we may access limited data from services like Google (Gmail, Calendar, Drive), Twilio, Stripe, or other tools you authorize—only to deliver the features you enable (e.g., syncing emails, sending invoices, scheduling, telephony).
4) Cookies & tracking
We use essential cookies for authentication and security, and functional/analytics cookies (e.g., Google Analytics) to understand usage and improve the product. You can manage non‑essential cookies via our banner (where available) or your browser settings. Blocking some cookies may limit functionality.
5) How we use Personal Data (purposes)
- Provide the Services: account creation, login, omnichannel conversations, task execution via approved abilities, and audit trail.
- Operate & improve: troubleshooting, analytics, quality checks, feature development, and safety (fraud/abuse detection).
- Customer success & support: respond to requests, fix issues, and deliver onboarding/training.
- Payments: subscriptions, invoices, receipts (via Stripe).
- Legal & security: monitor for misuse, enforce terms, and comply with law.
- Communications: service notices and (if you haven’t opted out) product updates or marketing emails.
Model training & vendors.
- We do not use your Customer Data to train third‑party foundation models.
- For providers that offer a “don’t train on my data” control, we configure it not to train.
- We may use aggregated and de‑identified data to improve the Services.
- For Google user data obtained via Google APIs, we comply with Google’s Limited Use policy: no human reading except to provide/support the features, comply with law, or with your explicit consent; no selling or sharing for ads.
6) Artificial Intelligence Features & Third-Party AI Providers
Z360’s AI-powered features (including the AI agent, Ask Z assistant, and AI-assisted messaging) use third-party AI services — specifically OpenAI (including via Microsoft Azure OpenAI Service), Google Gemini (including via Google Cloud Vertex AI), and Amazon Web Services (AWS Bedrock) — to process requests and generate responses.
Third-party AI providers: When you interact with an AI feature, the content of your query or conversation is transmitted to the applicable AI provider solely to generate a response. This may include any personal information you choose to include in your messages. We do not separately send account credentials or billing details to AI providers.
Zero data retention: We operate under a zero data retention policy with our AI providers. Conversation content transmitted to OpenAI, Google Gemini, or AWS Bedrock is not retained, stored, or logged by those providers beyond the time required to return a response. We have contractual controls in place to enforce this.
No model training: Neither OpenAI, Google Gemini, nor AWS Bedrock uses your data to train, fine-tune, or improve their AI models.
Your consent: AI features are opt-in. During onboarding, you are required to explicitly enable AI features before any data is transmitted to third-party AI providers.
7) Sharing & disclosures
We do not sell Personal Data. We share only as needed:
- Service providers (sub‑processors) under contract:
- Hosting & infrastructure: AWS (U.S.)
- Payments: Stripe
- Email/SMS/telephony: AWS SES, Twilio
- Product analytics: Google Analytics
- AI/machine learning features: trusted providers (e.g., OpenAI) used strictly to perform features you enable
- Third‑party tools you connect: We send/receive data at your direction (e.g., Gmail, Calendar, Drive, CRM, billing).
- Legal, safety, and business transfers: to comply with law, protect rights, or as part of a merger/acquisition.
8) Retention & deletion
We retain Personal Data while your account is active and as needed to provide the Services, meet legal obligations, resolve disputes, and maintain security logs. You may request deletion at privacy@z360.biz. Certain records (e.g., invoices, security logs) may be retained as permitted by law. For processor data, we follow your instructions and our DPA.
9) Security
We use administrative, technical, and physical safeguards, including encryption in transit and at rest (where applicable), access controls, network protections, and monitoring. We maintain click‑level audit logs for browser‑executed tasks. No system is perfectly secure; please use strong passwords and protect your devices.
If we learn of a security incident affecting Personal Data, we will notify you without undue delay and provide information consistent with legal requirements.
10) Your responsibilities
- Obtain all required consents for messaging/calls/recordings and to use data in the Services.
- Comply with laws like TCPA, CAN‑SPAM, and carrier rules.
- Use approved abilities responsibly and set appropriate supervision/handoffs for unusual cases.
11) Your rights (U.S.)
You may access, correct, or delete certain info in your account settings, or email privacy@z360.biz.
California (CPRA) and other state laws may grant additional rights (access, deletion, correction, portability, limits on sensitive info, opt‑out of “sale”/“sharing”). We do not sell or share Personal Data for cross‑context behavioral advertising as those terms are defined by California law. We will not discriminate against you for exercising your rights. We will verify requests before acting.
12) Children
The Services are not for individuals under 16. If we learn we collected Personal Data from a minor, we’ll delete it. Contact legal@z360.biz.
13) International data
We store and process data in the United States. If you access from another region, your data may be transferred to the U.S., where laws may differ.
14) Google API Limited Use (additional notice)
If you connect Google services, we access and use Google user data only to provide user‑facing features you enable, comply with law, troubleshoot with your consent, and ensure security. We don’t sell or use that data for ads. Human review occurs only in the limited cases above.
15) Changes to this Policy
We may update this Policy. We’ll post the “Last Updated” date above. Material changes may be announced in‑app or by email.
16) Contact us
Z360BIZ LLC
1302 E Collins Blvd, Richardson, TX 75081
legal@z360.biz