Privacy Policy
Last updated: 24th June 2026
This Privacy Policy explains how Eweev Limited collects, uses, stores and shares personal data when you visit our website, create an account, use the ZAQ user portal, subscribe to ZAQ SME, contact us, or otherwise interact with our services.
This Privacy Policy applies to personal data that Eweev Limited processes for its own business purposes, such as account management, billing, customer support, security, service administration and communications.
Where a customer uses ZAQ SME to process its own data inside its ZAQ instance, the customer is generally the controller of that data and Eweev Limited acts as a processor, except where we process data for our own independent purposes. Those processing activities may be further governed by our Terms and Conditions and, where applicable, a separate Data Processing Addendum.
1. Who we are
The service is operated by Eweev Limited, a company registered in England and Wales under company number 10390198.
Registered office: 71-75 Shelton Street, Covent Garden, London, England, WC2H 9JQ.
In this Privacy Policy, “Eweev”, “ZAQ”, “we”, “us” and “our” refer to Eweev Limited.
2. The services covered by this Privacy Policy
This Privacy Policy applies to:
- the ZAQ website;
- the ZAQ user portal;
- ZAQ SME account and subscription management;
- customer support by email, chat or other communication channels;
- billing, payment and administrative communications;
- security, logs and service monitoring related to ZAQ.
It does not replace the privacy policy or legal obligations of a customer using ZAQ SME for its own business purposes.
3. Personal data we collect
We may collect and process the following categories of personal data.
Account and contact data
This may include your name, email address, company name, role, contact details, login credentials or account identifiers.
Billing and subscription data
This may include billing details, subscription status, payment confirmation, invoice information, VAT details, transaction references and payment-related metadata. Card payments are processed by our payment provider and we do not intend to store full card details ourselves.
Support and communication data
This may include messages you send to us, support requests, chat history, email exchanges, onboarding information and any information you choose to provide when contacting us.
Usage and technical data
This may include IP address, browser type, device information, operating system, login dates, pages or features accessed, timestamps, diagnostic data, security logs and service activity logs.
Customer workspace and instance data
When you use ZAQ SME, your instance may contain documents, prompts, outputs, configurations, connected data sources, communication channels, logs, messages, files and other data uploaded or connected by the customer.
For this data, the customer is generally responsible for deciding what data is connected to ZAQ and how it is used. Eweev Limited processes this data mainly to provide, secure, maintain and support the ZAQ SME service.
AI usage data
When the ZAQ Router is used, we may process technical and usage information related to AI requests, such as model used, token consumption, timestamps, cost calculation, routing information, error logs and request metadata.
Depending on the model or provider selected, prompts, inputs and outputs may be processed by third-party AI providers. Customers may use their own AI provider or keys where this option is available and where they require additional control.
4. How we collect personal data
We collect personal data when:
- you visit our website;
- you create or use an account;
- you subscribe to ZAQ SME;
- you use the ZAQ user portal;
- you connect data sources or communication channels to ZAQ;
- you contact us for support or sales;
- you make a payment;
- your browser, device or server sends technical data automatically;
- ZAQ records logs needed for operation, security, audit or support.
5. Why we use personal data and our legal bases
We use personal data for the following purposes.
To provide and administer the service
We use personal data to create accounts, provide access to ZAQ, manage subscriptions, operate the user portal, configure services, process AI credits and keep the service accessible.
Legal basis: performance of a contract or steps taken before entering into a contract.
To process billing and payments
We use personal data to issue invoices, manage payments, confirm transactions, manage failed payments and comply with accounting obligations.
Legal basis: performance of a contract and legal obligation.
To provide support and respond to requests
We use personal data to answer questions, provide customer support, troubleshoot issues and manage onboarding or service requests.
Legal basis: performance of a contract and legitimate interests.
To secure and maintain the service
We use personal data and logs to protect accounts, prevent misuse, investigate incidents, maintain service availability, debug issues and monitor the technical performance of ZAQ.
Legal basis: legitimate interests and, where applicable, legal obligation.
To improve the service
We may use usage information, feedback and aggregated or non-customer-specific learnings to understand how the service is used, improve functionality, update ZAQ OS and develop better user experiences.
Legal basis: legitimate interests.
To send service communications
We may send emails or messages about account activity, subscription status, invoices, payment issues, security alerts, maintenance, service changes or important administrative information.
Legal basis: performance of a contract and legitimate interests.
To send marketing communications
We may send updates, offers or information about our services where permitted by law. You can opt out of marketing communications at any time.
Legal basis: consent where required, or legitimate interests where permitted by applicable law.
To comply with legal obligations
We may process personal data where necessary to comply with tax, accounting, regulatory, court, law enforcement or other legal obligations.
Legal basis: legal obligation.
6. Cookies and similar technologies
We may use cookies and similar technologies to operate the website and user portal, remember preferences, maintain sessions, secure accounts and understand basic usage of our services.
Some cookies are necessary for the service to work. If we use optional analytics, advertising or non-essential cookies, we will request consent where required by law and provide a way to manage cookie preferences.
You can also configure your browser to refuse or delete cookies. Some features may not work properly if necessary cookies are disabled.
7. Who we share personal data with
We may share personal data with the following categories of recipients where necessary.
Hosting and infrastructure providers
ZAQ SME instances are hosted in France using Scaleway infrastructure.
Payment providers
We use payment providers to process card payments, manage transactions and confirm payment status.
AI providers
When the ZAQ Router is used, selected AI providers may process prompts, inputs, outputs or related technical information depending on the model used and the customer’s configuration.
Communication and support tools
We may use email, chat or support tools to communicate with customers and manage support requests.
Professional advisers and authorities
We may share data with accountants, lawyers, auditors, insurers, courts, regulators or public authorities where necessary.
Business transfers
If Eweev Limited is involved in a merger, acquisition, financing, restructuring or sale of assets, personal data may be transferred as part of that transaction, subject to appropriate confidentiality and legal safeguards.
We do not sell personal data.
8. International transfers
Eweev Limited is based in the United Kingdom. ZAQ SME customer instances are hosted in France, but some service providers, AI providers or technical partners may process personal data in other countries, including the United States or other locations outside the United Kingdom or European Economic Area.
Where required, we use appropriate safeguards for international transfers, such as adequacy regulations, standard contractual clauses, the UK International Data Transfer Agreement or other lawful transfer mechanisms.
Customers who require more control over AI processing locations may use their own AI provider or keys where this option is available.
9. How long we keep personal data
We keep personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy.
As a general guide:
- account data is kept for as long as the account remains active and for a reasonable period afterwards;
- billing and invoice data is kept for the period required by tax and accounting laws;
- support communications are kept for as long as needed to manage the request, maintain service history and protect our legal interests;
- security and technical logs are kept for a limited period unless needed for security, investigation or legal reasons;
- ZAQ SME customer instance data is deleted at the end of the subscription period or according to the applicable Terms and Conditions;
- backups are kept for a limited period, usually up to 7 days, unless otherwise required for operational or legal reasons;
- marketing contact data is kept until you unsubscribe or object, unless we have another lawful reason to retain limited records.
10. Data deletion and export
Customers are responsible for exporting their data before the end of their subscription or before deletion following non-payment.
At the end of the subscription period, or where deletion is triggered under the Terms and Conditions, customer instance data may be deleted. After deletion, we may not be able to restore or provide access to that data.
In case of non-payment, customers are warned by email before suspension or deletion, as described in the applicable Terms and Conditions.
11. Security
We take reasonable technical and organisational measures to protect personal data.
ZAQ SME uses isolated instances and isolated databases for customers. Communications with the service are protected by encryption in transit using HTTPS/TLS.
Access rights, users and permissions inside the customer’s ZAQ instance are managed by the customer administrator. The customer is responsible for granting appropriate permissions and protecting account credentials, API keys and connected services.
No method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security.
12. Your rights
Depending on where you are located and the legal basis for processing, you may have rights over your personal data, including the right to:
- access your personal data;
- request correction of inaccurate personal data;
- request deletion of personal data;
- request restriction of processing;
- object to processing, including certain processing based on legitimate interests;
- request data portability;
- withdraw consent where processing is based on consent;
- object to direct marketing at any time;
- lodge a complaint with a data protection authority.
To exercise your rights, contact us using the details below.
Some rights are not absolute and may depend on the circumstances, our legal obligations and the role we have in relation to the relevant data.
If your request relates to personal data controlled by one of our customers inside their ZAQ instance, we may ask you to contact that customer directly, or we may forward your request to them where appropriate.
13. Children
ZAQ SME is intended for business and professional use. It is not directed at children and we do not knowingly collect personal data from children.
14. Third-party websites and services
Our website or service may contain links to third-party websites, applications or services. We are not responsible for the privacy practices, content or security of those third parties.
Customers are responsible for reviewing the terms and privacy policies of any third-party services they connect to ZAQ.
15. Changes to this Privacy Policy
We may update this Privacy Policy from time to time.
When we make material changes, we may notify users by email, through the user portal or by posting a notice on our website. The updated version will apply from the date indicated at the top of the policy.
16. Contact us
If you have questions about this Privacy Policy or wish to exercise your privacy rights, you can contact us at:
info@eweev.com