Identity of the controller
This Privacy, Cookies and Data Processing Policy describes the way in which Z3NITH, SOCIEDAD POR ACCIONES SIMPLIFICADA DE CAPITAL VARIABLE, trading commercially under the Z3NITH brand, collects, uses, stores, protects and processes personal data or information related to users, prospects, clients, business partners and visitors of the website z3nith.io.
Z3NITH, S.A.S. de C.V. has its domicile in Santa Tecla, Department of La Libertad, El Salvador, and is registered with Company Registration No. 2026130063 in the Commercial Registry. For privacy questions or requests, you may write to info@z3nith.io. Z3NITH provides technology, automation, artificial intelligence, integration, systems design, CRM, dashboard, conversational agent and digital solution services for businesses.
Scope of this policy
This policy applies to the Z3NITH website, its forms, landing pages, contact channels, commercial communications, diagnostic processes, proposals, contracted services, developed systems, AI agents, automations, integrations, CRM and any digital interaction where Z3NITH collects or processes information.
When Z3NITH processes data on behalf of a client within a project, automation, agent or system, Z3NITH may act as a provider or data processor, following reasonable and lawful instructions from the client. In those cases, the client retains primary responsibility for the legitimacy, accuracy, authorization and purpose of the data it delivers or connects to the systems.
Data we may collect
Z3NITH may collect data provided directly by the user, data generated during interaction with our channels, and technical data derived from use of the site. This may include: first name, last name, email address, phone number, company, job title, industry, country, city, commercial information, messages sent through forms, WhatsApp, email or social media, documents or files sent voluntarily, contact preferences, commercial follow-up history, information needed to prepare proposals, project configuration data, technical logs, session identifiers, device and browser information, traffic source, pages visited, browsing events and data collected through cookies or similar technologies.
Data we do not ordinarily request
Z3NITH does not ordinarily request sensitive data, medical information, biometric data, data about minors, personal passwords, confidential financial information or identity documents, unless they are strictly necessary for a contractual relationship, a specific technical integration or legal compliance.
Users and clients should avoid sending sensitive data or unnecessary confidential information through forms, chats, WhatsApp, email or unauthorized channels. If a client delivers sensitive or regulated information to Z3NITH, it declares that it has the legal basis, authorization and notices required to do so.
Purposes of the processing
Z3NITH may use the data for the following purposes: answering inquiries, contacting prospects, scheduling meetings, carrying out diagnostics, preparing commercial proposals, providing contracted services, configuring AI agents, automations, integrations, CRM, dashboards, forms, n8n or API workflows, providing support, monitoring technical operation, improving internal processes, analyzing website performance, measuring campaigns, preventing abuse or fraud, complying with legal or contractual obligations, documenting agreements, carrying out commercial follow-up and sending communications related to Z3NITH services where there is prior interest, a commercial relationship or applicable consent.
Legal basis and consent
Data processing may be based on the consent of the data subject, the execution of pre-contractual measures, the performance of a contract, compliance with legal obligations, Z3NITH’s legitimate interest in operating and improving its services, or any other basis permitted by applicable regulations.
Where a purpose requires specific consent, Z3NITH will seek to obtain it through clear written or electronic mechanisms. The user may withdraw their consent where applicable, without affecting prior processing carried out lawfully.
AI agents, automations and automated processing
Because of the nature of Z3NITH’s services, some messages, forms, requests or data may be processed by artificial intelligence agents, automated workflows, CRM, classification tools, integrations, APIs or internal systems in order to answer inquiries, qualify leads, record information, generate reports, trigger follow-ups, schedule meetings, send notifications or run operational processes.
Z3NITH will seek to design these systems with security, data minimization and access control criteria. However, the user acknowledges that responses generated by automated agents may require human review and should not be interpreted as legal, financial, medical or specialized professional advice unless expressly stated and covered by a specific contract.
Use of WhatsApp, email, forms and social media
When the user contacts Z3NITH through WhatsApp, email, forms, social media or any digital channel, they accept that the information provided may be used to reply, follow up, record the contact in internal systems, prepare proposals, schedule meetings and provide services.
The third-party platforms used for these communications may apply their own policies, terms, security measures and data processing rules. Z3NITH does not fully control the infrastructure, availability, security or processing carried out directly by those third parties.
Google Analytics
Z3NITH may use Google Analytics 4 to obtain aggregated statistics about the use of the website, such as pages visited, session duration, traffic source, events, devices, approximate location and general browsing behaviour. Google Analytics may use first-party cookies such as _ga and _ga_<container-id> to distinguish users and preserve session state.
Z3NITH configures Google Analytics prudently, avoiding sending personally identifiable information in URLs, events, custom fields or parameters. Where applicable, the user may reject analytics cookies from the consent banner or use blocking tools, browser settings or the Google Analytics opt-out add-on available at tools.google.com/dlpage/gaoptout.
Third-party tools and providers
To provide its services, Z3NITH may use external tools or providers, including but not limited to Google Analytics, Google Workspace, Google Sheets, Google Drive, Meta, WhatsApp Business, hosting providers, CRM, n8n, APIs, email platforms, automation tools, artificial intelligence services, databases, dashboards and cloud storage or processing services.
These third parties may process data under their own terms, privacy policies, processing agreements, security standards and infrastructure locations. Z3NITH will seek to use reliable providers and limit access to what is necessary to provide the service.
International transfers and cloud storage
Some tools used by Z3NITH or by its clients may host, back up or process data outside El Salvador. By using the site, contacting Z3NITH or contracting services that depend on international providers, the user or client understands that international transfer, storage or processing of data may occur.
Z3NITH will seek to work with providers that declare reasonable security, confidentiality and data protection measures, without assuming responsibility for decisions, changes, incidents or breaches directly attributable to those providers when they exceed Z3NITH’s reasonable control.
Data retention
Z3NITH will retain data for as long as reasonably necessary to fulfil the purposes described, maintain the commercial or contractual relationship, handle requests, provide support, document services, comply with legal obligations, resolve disputes, prevent fraud, audit processes or keep operational records.
When the data is no longer necessary, Z3NITH may delete, anonymize or block it, or retain it only where there is an applicable legal obligation, legitimate interest or contractual need.
Information security
Z3NITH will apply reasonable technical, organizational and administrative measures to protect information against unauthorized access, loss, alteration, improper disclosure or unauthorized use. These measures may include access control, credential management, the principle of least privilege, review of integrations, separation of permissions, internal confidentiality, automation best practices, technical monitoring, backups where applicable and provider review.
Nevertheless, no system connected to the Internet, cloud platform, messaging channel, website or digital integration can guarantee absolute security.
Security incidents, attacks or breaches
If a security incident affecting personal data under Z3NITH’s direct responsibility is detected, the scope will be assessed, reasonable containment, mitigation and documentation measures will be taken, and the communications or actions required by applicable regulations, contractual obligations and internal protocols will be carried out.
Z3NITH will not be liable for incidents originating from causes beyond its reasonable control, including sophisticated third-party attacks, unknown vulnerabilities, external provider failures, credentials improperly shared by users or clients, phishing, malware on client devices, unsafe instructions, configurations altered without authorization or misuse of the platforms by third parties.
Limitation of liability
Z3NITH undertakes to apply reasonable and professional data protection measures within the scope of its services. However, Z3NITH does not guarantee that the site, the integrations, the agents, the automations or the external providers will operate uninterrupted, error-free, attack-free or completely immune to unauthorized access.
Z3NITH will not be liable for damages arising from false or incomplete information provided by users or clients, lack of authorization to process third-party data, the client’s non-compliance towards its own users, misuse of credentials, Internet failures, outages of external platforms, actions by hackers, force majeure, fortuitous events, API changes, third-party policy changes, account blocks, suspension of third-party services or vulnerabilities beyond its reasonable control.
This limitation is not intended to exclude liabilities that cannot legally be limited, nor to cover wilful misconduct, gross negligence or proven breach directly attributable to Z3NITH.
Client responsibilities when Z3NITH provides services
When Z3NITH develops, configures or administers systems for a client, the client is responsible for informing its own users about the processing of their data, obtaining the necessary consents, defining lawful purposes, delivering accurate and authorized data, avoiding the sending of unnecessary sensitive data, reviewing its own terms and policies, protecting its credentials, approving configurations, validating workflows before production and using the tools in accordance with the law.
Z3NITH will not be liable for unlawful processing, unauthorized databases, non-consented bulk messaging, spam, scraping, abusive use of automations or client instructions contrary to the law or to third-party policies.
Confidentiality
Z3NITH will treat the information of clients, prospects and users with confidentiality and limited access criteria. Staff, collaborators or providers who may access information must do so solely for purposes related to service provision, support, operation or compliance. Where it is necessary to share data with technical third parties, the information shared will be limited to what is strictly necessary.
Rights of data subjects
In accordance with applicable regulations, the data subject may request access, rectification, cancellation or erasure, objection, portability, the right to be forgotten, restriction of processing and withdrawal of consent where applicable.
To exercise these rights, you may write to info@z3nith.io stating your full name, contact details, the right you wish to exercise, a clear description of the data involved and documents evidencing identity or representation where necessary. Z3NITH may request additional information to verify the identity of the applicant and locate the corresponding data.
Minors
The site and the commercial services of Z3NITH are not directed at minors. Z3NITH does not intentionally seek to collect data from minors. If it is identified that data from a minor has been received without the corresponding authorization, Z3NITH may delete or block it, unless an applicable legal or contractual obligation exists.
Commercial communications
Z3NITH may send commercial, educational or informational communications to people who have requested information, completed forms, initiated contact, attended meetings, shown interest in services or maintained a commercial relationship. The user may ask to stop receiving communications by writing to info@z3nith.io or through the unsubscribe mechanisms available in each channel, where they exist.
Changes to this policy
Z3NITH may modify this Privacy and Cookies Policy to reflect legal, technical, commercial, operational or provider changes. The version in force will be published at z3nith.io together with its last update date. Where changes are substantial, Z3NITH may communicate them through reasonable means, as appropriate.
Contact
For inquiries, privacy requests, exercise of rights, withdrawal of consent or reports related to personal data, you may write to info@z3nith.io. We recommend including in the subject line: “Privacy request — Z3NITH”.
Additional protection clauses
These clauses separate responsibilities between Z3NITH, the client, the end user and external providers, and can be incorporated into contracts, commercial proposals or data processing annexes.
When Z3NITH implements solutions for a client, Z3NITH may act as provider, integrator, developer or operational processor. The client is responsible for determining the purposes of the processing, validating the legal basis, informing its users, obtaining consents and ensuring that the data delivered or connected to the systems has been obtained lawfully.
The client declares that it has sufficient authorization to share with Z3NITH the data of its leads, customers, employees, providers or users. Z3NITH will not be liable for databases that were purchased, collected without consent, extracted from unauthorized sources, obtained through improper scraping or used for bulk communications contrary to the law or to platform policies.
Z3NITH services may depend on external platforms such as Meta, WhatsApp, Google, AI providers, hosting, CRMs, payment gateways, APIs and automation tools. Z3NITH does not control changes in pricing, rules, blocks, outages, limitations, suspensions, updates, errors, availability or decisions made by those providers.
The security of an automated system is a shared responsibility. Z3NITH protects its configurations within the contracted scope, but the client must protect access, users, passwords, devices, email accounts, permissions, ad accounts, Meta accounts, Google accounts, webhooks, tokens, APIs and any credential delivered to or managed by its team.
Before activating an automation, agent or integration in production, the client must review, approve and validate the use scenarios. Z3NITH will not be liable for outcomes arising from unapproved changes, incomplete testing, erroneous data, use other than intended or modifications made by third parties after delivery.
Z3NITH’s agents, automations, reports or systems do not replace legal, financial, accounting, medical, tax or regulated professional advice, unless covered by a specific contract with authorized professionals. Automated responses should be considered operational support and not a definitive professional decision.