Workspace data
Organizations may import contact records, tags, custom fields, consent status, campaign history, provider settings, templates, and analytics into their workspace.
Policy
ZOLLO privacy and data handling overview.
ZOLLO is designed to help organizations manage contact records, consent status, unsubscribe preferences, campaign activity, provider connections, and audit history.
Provider credentials
Email and AI provider credentials are stored for the organization and are used only to perform configured sending, composing, and integration workflows.
Campaign activity
ZOLLO records operational events such as sends, deliveries, opens, clicks, replies, bounces, complaints, unsubscribes, lead requests submitted on campaign landing pages, sales events supplied by workspace users, imports, and configuration changes.
Connected AI apps
When you connect ChatGPT or another AI app, you sign in through ZOLLO and authorize workspace access. ZOLLO receives tool inputs for your requested actions and returns workspace data to the connected app. Depending on the tools used, results can include contact and consent information, segment filters and samples, email templates, campaign readiness, sender details, and automation records. Data returned to ChatGPT is shared with OpenAI as part of the conversation.
Connection data
ZOLLO stores the workspace and user associated with an authorized connection, granted permissions, authorization-code and token hashes, expiry timestamps, and an encrypted credential used to authorize workspace requests. These records support authentication and access control. Workspace-linked connection records are removed with the workspace.
Data recipients
Hosting and storage services process data to operate ZOLLO. Connected AI apps receive the workspace data returned by the tools you use. For email delivery, your configured email provider receives the recipient and message data needed for delivery, and intended recipients receive the messages.
Customer control
Workspace users are responsible for lawful data collection, consent, unsubscribe honoring, retention, deletion, and provider compliance for their contact data. Workspace administrators can export workspace data and delete contact records from the app. Customers initiate deletion directly through ZOLLO's deletion controls or privacy request form. When a customer requests deletion of their workspace through ZOLLO, ZOLLO removes the entire workspace within seven days. The MCP integration does not expose data-deletion tools and cannot initiate a deletion request.
Backup retention
ZOLLO retains backups for one week. Backup retention is separate from the seven-day deadline for removing a workspace after a customer requests deletion.
Security
ZOLLO uses authentication, organization scoping, role-based access, encrypted provider credentials, signed webhooks, sandboxed previews, and rate limits as product controls.
Your rights
You can submit a request to access, correct, erase, restrict, receive, or object to processing of personal data. ZOLLO verifies identity before taking action.
Contact
Privacy and data handling questions can be sent to [email protected].
Need to exercise a privacy right?
Submit a request and we will verify your identity before responding.