Zeal Connect Desk Privacy Policy

Last updated: June 24, 2026

This Privacy Policy describes how Zeal Connect Desk (“the Application,” “we,” “us,” or “our”) collects, uses, and handles your information when you use the Service. Zeal Connect Desk is a ticketing and customer support platform that connects to Google Gmail, Microsoft Outlook mailboxes, and WhatsApp Business Accounts to manage customer support conversations and hotel booking workflows on your behalf.

By using Zeal Connect Desk and connecting your Google Workspace, Microsoft 365 mailbox, or WhatsApp Business Account, you agree to this Privacy Policy.

Email Data We Access

With your explicit OAuth 2.0 authorisation, Zeal Connect Desk may access the following from your Gmail or Outlook mailbox:

• Email subject and body (plain text and HTML)
• Sender and recipient email addresses
• Attachments (booking confirmations and related documents)
• Date, timestamp, and message/thread IDs
• Email labels and folder names
  
  

How We Use Your Data

Email and message data is used solely to:

• Create and manage support tickets from inbound customer messages
• Extract hotel booking and reservation details
• Send replies and reconfirmation messages on your behalf
• Automate customer support workflows you have enabled
  
  

We do not use your email or message data for advertising, profiling, or any purpose unrelated to the above.

Google Gmail API Permissions

The following Gmail API scopes are used:

• gmail.readonly – To read inbound emails and create support tickets
• gmail.modify – To apply labels and mark emails as processed
• gmail.send – To send customer replies and reconfirmation emails on your behalf
  
  

Zeal Connect Desk’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Microsoft Graph API Permissions

Zeal Connect Desk accesses Microsoft Outlook mailboxes using Microsoft Graph API only after explicit user or administrator OAuth 2.0 consent, and only for booking synchronisation, hotel reconfirmation, and email support services. The following permissions are used:

• Mail.Read – To read inbound emails for ticket creation
• Mail.ReadWrite – To organise the inbox in sync with ticket statuses
• Mail.Send – To send support replies on your behalf
• User.Read – To identify the connected account
  
  

WhatsApp Business API Integration

Zeal Connect Desk connects to Meta’s WhatsApp Business Cloud API to enable businesses to manage WhatsApp customer support conversations from within the platform. This integration is optional and is activated only when a business admin explicitly connects their WhatsApp Business Account via the in-app setup flow using Meta’s Embedded Signup OAuth.

WhatsApp Data We Access

With your explicit OAuth 2.0 authorisation via Meta’s Embedded Signup, Zeal Connect Desk may access:

• Inbound WhatsApp messages (text, images, documents, audio, video) sent to your registered WhatsApp Business phone number
• Sender’s WhatsApp phone number and display name
• Message timestamps and delivery/read status
• Your WhatsApp Business Account ID (WABA ID) and Phone Number ID
• Meta access token (encrypted at rest, used solely to send messages on your behalf)
  
  

How We Use WhatsApp Data

WhatsApp data is used solely to:

• Convert inbound WhatsApp messages into support tickets in Zeal Connect Desk
• Enable support agents to read and reply to customer messages from within the platform
• Maintain conversation history within support tickets for continuity and quality assurance
• Deliver outbound replies from support agents to customers via WhatsApp
  
  

We do not use WhatsApp message data for advertising, profiling, AI model training, selling to third parties, or any purpose unrelated to the customer support function described above.

Meta API Permissions Used

• whatsapp_business_messaging – To receive inbound WhatsApp messages from customers and send replies on your behalf
• whatsapp_business_management – To discover and configure your WhatsApp Business Account and registered phone numbers during initial setup
  
  

Connecting and Disconnecting WhatsApp

Zeal Connect Desk uses Meta’s OAuth 2.0 Embedded Signup to connect your WhatsApp Business Account. We never store your Meta account password. You may disconnect at any time:

• In-app: Settings → Channels → WhatsApp → Delete Channel
• Via Meta: business.facebook.com → Accounts → Connected Apps → Remove Zeal Connect Desk
  
  

Upon disconnection, your access token is immediately deleted from our systems. Message history within existing tickets is retained per your data retention settings and can be permanently deleted on request by emailing privacy@zealconnect.com.

Meta Platform Compliance

Zeal Connect Desk’s use of Meta platform data complies with:

• Meta Platform Terms
• Meta Developer Policies
• WhatsApp Business Policy

We access only the permissions necessary to provide the WhatsApp customer support functionality. We do not access user data beyond what is required and explicitly authorised by the business connecting their WhatsApp account.

OAuth Authorisation and Revoking Access

Zeal Connect Desk uses OAuth 2.0 for all third-party integrations (Google, Microsoft, Meta). We never store your Google, Microsoft, or Meta account password. You may revoke access at any time:

• Google: myaccount.google.com/permissions
• Microsoft: myapps.microsoft.com
• Meta / WhatsApp: business.facebook.com → Accounts → Connected Apps
• In-app (all integrations): Settings → Integrations → Disconnect
  
  

AI Processing

Email and ticket content may be processed by AI services (Microsoft Azure OpenAI or OpenAI API) solely for ticket classification, booking data extraction, and reply suggestions. Message content is never used to train general AI models or for advertising. WhatsApp message content follows the same AI processing rules as email content.

Data Sharing

Your data is shared only with service providers essential to operating the Application, including AWS (hosting), Microsoft Azure (AI processing), OpenAI (if enabled), and Meta Platforms (WhatsApp message delivery via WhatsApp Business Cloud API), under strict data processing agreements. We do not sell, rent, or share your data with advertisers or third parties for commercial purposes.

Data Retention

Message content retrieved through Google Gmail API, Microsoft Graph API, or WhatsApp Business Cloud API is retained only as long as necessary to provide the requested services.

• Email and WhatsApp message content is deleted within 30 days of account closure.
• WhatsApp access tokens are deleted immediately upon channel disconnection.
• Google and Microsoft OAuth tokens are deleted immediately upon mailbox disconnection.
• Media attachments (images, documents, audio, video) are subject to the same ticket-based retention rules.
  
  

Users may request deletion at any time by emailing privacy@zealconnect.com.

Security

All data is encrypted in transit (TLS 1.2+) and at rest (AES-256). OAuth tokens are stored encrypted using AWS KMS with strict access controls. No electronic transmission or storage is 100% secure; absolute security cannot be guaranteed.

Children’s Privacy

Zeal Connect Desk is intended solely for business use by organisations and their authorised personnel. We do not knowingly collect data from individuals under the age of 18. If such data is identified, we will delete it promptly.

Changes to This Policy

We may update this policy periodically. Updates will be posted on this page with a new “Last updated” date. Continued use of the Service after an update constitutes acceptance of the revised policy.

Contact Us

If you have any questions regarding this Privacy Policy, you can reach us:

• By email: privacy@zealconnect.com
• By website contact form: zealconnect.com/contact-us
• By phone: 88550 88130