Trust and privacy
What we run, where, and what we never do with your data.
Where your data lives
Every place your data goes, by name.
- Application and database hosted in Frankfurt, Germany (Hetzner)
- Backups encrypted at rest, kept 30 days
- Served through Cloudflare
- AI inference by OpenAI under a zero-retention agreement
- Web research for profiling by Tavily
- Region options for Scale on request
Your data is never used to train a model
Not by us, and not by our AI providers.
- Never used for training, by us or by our AI providers
- A workspace's prompts and conversations stay in that workspace
- Deleted data is purged from backups within 30 days
Subprocessors
The companies that process data for us, and what for.
| Name | Role | Region |
|---|---|---|
| Hetzner | Hosting | DE |
| Cloudflare | Edge | EU/US |
| OpenAI | Inference | US |
| Tavily | Web research | US |
| SendGrid | Email delivery | US |
| TCG | SMS | LT |
| Slack | Team channel, only if connected | US |
Telling people they talk to an AI
Your customers always know when a reply comes from an AI.
- The chat widget says so in its first message and in its header
- AI replies by email carry a footer line
- Staff see which replies were written by the AI
- EU AI Act Art. 50 and the US state rules are met the same way everywhere
Privacy roles
You decide what happens to your customers' data; we process it for you.
- Zellwo is the processor, the merchant the controller
- DPA with standard contractual clauses on request
- GDPR deletion and export per contact, from the dashboard and the API
- CCPA "do not sell" honoured
Security basics
The basics, done everywhere.
- TLS everywhere
- Credentials encrypted at rest
- Per-staff permissions and ticket scope
- OAuth 2.1 for the API and MCP, with per-grant caps
- SSO with Google and Microsoft
- Every AI call and connector call logged with its cost for 90 days
- Vulnerability reports to [email protected], answered within two working days
Put it on your shop this week
14-day trial on Grow and Scale · Live in under 30 minutes
“Support that used to take two people now takes one, and the follow-ups bring back customers we had written off.”