Privacy Policy

1. Introduction

This Privacy Policy explains what Zestlink collects, how we use it, who we share it with, and your rights. By using Zestlink, you consent to this policy where permitted by law.

2. Information We Collect

We collect information you provide directly, information generated by platform activity, and limited technical data.

2.1 Account and Profile Data

• Name, email address, phone/WhatsApp details, city/location preferences.
• Provider business information including business name, description, categories, service areas, offers, and profile media uploads.
• Authentication and account security data (hashed passwords, verification tokens, session tokens).

2.2 Transaction and Billing Data

• Subscription plan, billing status, payment transaction references, gateway responses, and financial metadata required for reconciliation and fraud prevention.
• Zestlink does not store full card numbers; card processing is handled by payment gateways.

2.3 Platform Usage and Analytics

• Search queries, profile views, contact-button clicks, conversion-related events, referral events, and moderation/report events.
• Device and network metadata such as IP address, user agent, approximate geolocation signals, timestamps, and request logs.

2.4 AI and Automation Data

• AI request inputs, prompts, outputs, model/provider used, and quality/feedback events to improve reliability and relevance.
• Where configured, key-rotation and provider-fallback metadata for operational resilience.

2.5 Cookies and Similar Technologies

• Session cookies, preference cookies, analytics identifiers, and referral-tracking cookies.

3. Why We Process Personal Information

• Provide core marketplace functionality, identity verification, profile publishing, and account administration.
• Facilitate payments, subscriptions, fraud prevention, and dispute resolution.
• Measure and improve platform performance, safety, and product quality.
• Generate and improve AI-powered features such as search parsing, recommendations, and insights.
• Comply with legal obligations, enforcement requests, and platform integrity requirements.

4. AI Processing and Learning

Zestlink may route AI requests through configured third-party AI providers (for example Gemini and Claude) using admin-controlled settings. We log AI request and feedback data to improve relevance, stability, abuse prevention, and cost control. We do not intentionally use your data to train third-party foundation models unless explicitly enabled by provider terms and applicable law.

5. Sharing and Disclosure

We may share data with service providers who process data on our behalf (payment gateways, cloud providers, messaging services, analytics/AI infrastructure) under contractual safeguards. We may disclose data when legally required or to protect rights, safety, or platform integrity.

6. Data Retention

We retain information only as long as necessary for legal, operational, security, and contractual purposes. Some logs and records may be retained longer where needed for fraud prevention, compliance, or dispute handling.

7. Security

We apply administrative, technical, and organizational safeguards including access controls, least-privilege administration, secure credential handling, and monitoring. No system is absolutely secure; users are responsible for protecting account credentials.

8. Your Rights

Subject to applicable law, you may request access, correction, deletion, objection/restriction, or portability of your personal information. Contact support@zestlink.co.za for requests.

9. International Processing

Some service providers may process data outside your country. We implement reasonable safeguards and contractual controls for such transfers.

10. Children

Zestlink is not directed to children. If you believe a child has provided personal data in violation of applicable law, contact us for removal review.

11. Policy Updates

We may update this policy periodically. Material updates will be reflected on this page with updated effective date where required.