Privacy Policy

Privacy and Cookie Policy – Zeal Connect

Last updated: June 25, 2026

Company: Zeal Connect Private Limited, 302, Kohinoor World Tower, Old Mumbai–Pune Hwy, Pimpri Colony, Pune, Maharashtra 411018, India

This Privacy Policy describes the policies and procedures of Zeal Connect Private Limited ("the Company," "we," "us," or "our") on the collection, use, disclosure, and protection of your information when you use any of our services — including our website (zealconnect.com), Zeal Connect Desk, and Zeal Connect Reconfirmation. It also explains your privacy rights and how applicable law protects you.

We use your personal data to provide and improve our services. By using any of our services, you agree to the collection and use of information in accordance with this Privacy Policy.

Sections marked Desk apply specifically to Zeal Connect Desk. Sections marked Reconfirmation apply specifically to Zeal Connect Reconfirmation.


1. Definitions

Words with the initial letter capitalised have the meanings defined below. Definitions apply equally in singular and plural.

  • Account – A unique account created for you to access our Service or parts of our Service.
  • Company (also "We," "Us," or "Our") – Zeal Connect Private Limited, Pune, Maharashtra, India.
  • Cookies – Small files placed on your device by a website, containing details of your browsing activity among other uses.
  • Country – India.
  • Device – Any device that can access the Service, such as a computer, smartphone, or tablet.
  • Personal Data – Any information that relates to an identified or identifiable individual.
  • Service – The Zeal Connect website, Zeal Connect Desk, and Zeal Connect Reconfirmation, collectively or individually as context requires.
  • Service Provider – Any natural or legal person who processes data on behalf of the Company.
  • Usage Data – Data collected automatically when using the Service (e.g. page visit duration, IP address).
  • Website – Zeal Connect, accessible at https://zealconnect.com.
  • You – The individual accessing or using the Service, or the company on whose behalf that individual acts.
↑ Back to top

2. Information We Collect

2.1 Personal Data (Website)

When you use the Zeal Connect website or contact us, we may ask you to provide personally identifiable information including:

  • First name and last name
  • Email address
  • Phone number
  • Company name
  • Usage Data

2.2 Usage Data

Usage Data is collected automatically when you use the Service and may include:

  • Your device's IP address, browser type and version
  • Pages of our Service visited, time and date of visit, and time spent on each page
  • Device identifiers and diagnostic data
  • For mobile access: device type, operating system, browser, and unique device identifiers

2.3 Email and Mailbox Data Desk Reconfirmation

When you authorize Zeal Connect Desk or Zeal Connect Reconfirmation to access your email mailbox via OAuth 2.0, the following data may be accessed, retrieved, and stored within the Application:

  • Email subject and body (plain text and HTML)
  • Sender and recipient email addresses
  • Attachments (booking confirmations and related documents)
  • Date, timestamp, and message/thread IDs
  • Email labels and folder names
↑ Back to top

3. Tracking Technologies and Cookies

We use Cookies and similar tracking technologies (beacons, tags, and scripts) to monitor activity on our website and store certain information. The types of cookies we use are:

  • Necessary / Essential Cookies (Session) – Enable core website functionality and prevent fraudulent use. These cannot be disabled.
  • Cookies Policy / Notice Acceptance Cookies (Persistent) – Record your cookie consent preference.
  • Functionality Cookies (Persistent) – Store your preferences such as login details and language settings.

You can instruct your browser to refuse all cookies or to alert you when a cookie is being sent. However, some parts of the Service may not function correctly if cookies are disabled.

↑ Back to top

4. How We Use Your Data

The Company may use personal data for the following purposes:

  • To provide and maintain the Service
  • To manage your Account and authenticate your identity
  • For performance of a contract — delivering services you have purchased or requested
  • To contact you by email, phone, SMS, or push notifications regarding updates, support, or service changes
  • To provide news, offers, and product updates (unless you have opted out)
  • To manage your customer support requests and tickets
  • For business transfers such as mergers or acquisitions
  • For analytics, trend analysis, marketing effectiveness measurement, and service improvement

We may share your information with:

  • Service Providers (cloud hosting, analytics, support, communications)
  • Affiliates and business partners involved in delivering the Service
  • Other users where you have posted content publicly
  • Third parties with your explicit consent
  • Competent authorities where required by law
↑ Back to top

5. Zeal Connect Desk – Email and Mailbox Access Desk

Zeal Connect Desk is a cloud-based customer support ticketing platform. It connects to Gmail and Microsoft Outlook mailboxes to import inbound customer emails, create and manage support tickets, process hotel booking workflows, and send replies on your behalf.

Email and mailbox data accessed through connected accounts is used solely to:

  • Create and manage support tickets from inbound customer emails
  • Extract hotel booking and reservation details from email content
  • Send customer support replies and hotel reconfirmation emails on your behalf
  • Apply labels and synchronize inbox state with ticket statuses
  • Maintain conversation history within support tickets for continuity and quality assurance

We do not use email or mailbox data for advertising, marketing, profiling, resale, or any purpose unrelated to the customer support and ticketing functions described in this policy.

See Section 6 for Google Gmail API details and Section 7 for Microsoft Graph API details.

↑ Back to top

6. Zeal Connect Desk – Google Gmail API Desk

Zeal Connect Desk connects to Gmail mailboxes using Google's OAuth 2.0 authorization framework. Access is granted only after the user explicitly authorizes the Application through Google's OAuth consent screen.

6.1 Scopes Requested

When a user authorizes a Gmail mailbox, the Application requests the following scopes:

  • https://mail.google.com/ — Full mailbox access used to read incoming customer emails, send support replies and reconfirmation emails on behalf of the authorized user, apply labels, mark emails as read, and synchronize inbox state with the Zeal Connect Desk ticketing system.
  • https://www.googleapis.com/auth/userinfo.email — To identify the email address of the account being connected.
  • https://www.googleapis.com/auth/userinfo.profile — To identify the name and basic profile of the signed-in user within the Application.

6.2 How Gmail Data Is Used

The https://mail.google.com/ scope is used specifically for the following operations:

  • Reading emails – Incoming customer emails are retrieved to automatically create and update support tickets.
  • Sending emails – Customer support replies, hotel reconfirmation requests, and booking-related communications are sent from the connected Gmail mailbox on behalf of the authorized user.
  • Modifying the mailbox – Emails are marked as read and labels are applied to reflect the corresponding ticket status in Zeal Connect Desk.
  • Attachment access – Email attachments such as booking confirmations and hotel documents are retrieved when required for support workflows.

Zeal Connect Desk does not use Gmail data for advertising, marketing, user profiling, resale, or any purpose unrelated to providing customer support and ticket management services. Access is limited to the organization that authorized the mailbox connection.

6.3 Google Limited Use Compliance

Zeal Connect Desk's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In accordance with Google's Limited Use Policy, Zeal Connect Desk:

  • Uses Google user data only to provide or improve the user-facing features prominent in the Application
  • Does not transfer Google user data to third parties except as necessary to provide the Service, as required by law, or with the user's explicit consent
  • Does not use Google user data for serving advertisements
  • Does not allow humans to read Gmail content except where the user has given explicit affirmative consent, it is necessary for security purposes, or it is required by law

To revoke Gmail access, see Section 10 – OAuth Authorization and Revoking Access.

↑ Back to top

7. Zeal Connect Desk – Microsoft Graph API Desk

Zeal Connect Desk accesses Microsoft Outlook mailboxes using the Microsoft Graph API only after explicit user or administrator OAuth 2.0 consent, and only for the purposes of booking synchronization, hotel reconfirmation, and email support services.

The following permissions are requested:

  • Mail.Read – To read inbound emails for ticket creation and booking extraction
  • Mail.ReadWrite – To organise the inbox in sync with ticket statuses and mark emails as processed
  • Mail.Send – To send customer support replies and reconfirmation emails on behalf of the authorized user
  • User.Read – To identify the name and email address of the connected account within the Application

For organizational Microsoft 365 accounts, an authorized administrator may be required to grant admin consent before users can connect their mailboxes. Zeal Connect Desk's use of Microsoft Graph data is limited to the purposes described in this policy and complies with Microsoft's API Terms of Use.

To revoke Microsoft access, see Section 10 – OAuth Authorization and Revoking Access.

↑ Back to top

8. Zeal Connect Desk – WhatsApp Business API Desk

Zeal Connect Desk optionally connects to Meta's WhatsApp Business Cloud API to enable businesses to manage WhatsApp customer support conversations from within the platform. This integration is activated only when a business administrator explicitly connects their WhatsApp Business Account via Meta's Embedded Signup OAuth flow.

8.1 WhatsApp Data We Access

With your explicit OAuth 2.0 authorization via Meta's Embedded Signup, Zeal Connect Desk may access:

  • Inbound WhatsApp messages (text, images, documents, audio, and video) sent to your registered WhatsApp Business phone number
  • Sender's WhatsApp phone number and display name
  • Message timestamps and delivery/read status
  • Your WhatsApp Business Account ID (WABA ID) and Phone Number ID
  • Meta access token (encrypted at rest and used solely to send messages on your behalf)

8.2 How WhatsApp Data Is Used

WhatsApp data is used solely to:

  • Convert inbound WhatsApp messages into support tickets in Zeal Connect Desk
  • Enable support agents to read and reply to customer messages from within the platform
  • Maintain conversation history within support tickets for continuity and quality assurance
  • Deliver outbound replies from support agents to customers via WhatsApp

We do not use WhatsApp message data for advertising, profiling, AI model training, resale, or any purpose unrelated to the customer support function described above.

8.3 Meta API Permissions Used

  • whatsapp_business_messaging – To receive inbound WhatsApp messages from customers and send replies on your behalf
  • whatsapp_business_management – To discover and configure your WhatsApp Business Account and registered phone numbers during initial setup

Zeal Connect Desk's use of Meta platform data complies with the Meta Platform Terms, Meta Developer Policies, and WhatsApp Business Policy.

8.4 Connecting and Disconnecting WhatsApp

Zeal Connect Desk uses Meta's OAuth 2.0 Embedded Signup to connect your WhatsApp Business Account. We never store your Meta account password. You may disconnect at any time:

  • In-app: Settings → Channels → WhatsApp → Delete Channel
  • Via Meta: business.facebook.com → Accounts → Connected Apps → Remove Zeal Connect Desk

Upon disconnection, your access token is immediately deleted from our systems. Message history within existing tickets is retained per your data retention settings and can be permanently deleted on request — see Section 13 – Data Retention.

↑ Back to top

9. Zeal Connect Reconfirmation – Email Access Reconfirmation

Zeal Connect Reconfirmation is an AI-powered hotel booking reconfirmation platform. With your explicit OAuth 2.0 authorization, this product may connect to your Gmail or Outlook mailbox to:

  • Read incoming hotel booking confirmation emails
  • Extract booking reference numbers, hotel names, check-in and check-out dates, and guest details from email content
  • Send hotel reconfirmation requests on your behalf from the connected mailbox
  • Track reconfirmation status and update booking records accordingly

The same Gmail API scopes described in Section 6 and Microsoft Graph API permissions described in Section 7 apply to Zeal Connect Reconfirmation where it accesses Gmail or Outlook mailboxes. Email content accessed through Reconfirmation is used exclusively for hotel booking reconfirmation workflows and is never used for advertising, profiling, resale, or any unrelated purpose.

Zeal Connect Reconfirmation's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

To revoke access, see Section 10 – OAuth Authorization and Revoking Access.

↑ Back to top

10. OAuth Authorization and Revoking Access

Zeal Connect Desk and Zeal Connect Reconfirmation use the industry-standard OAuth 2.0 protocol for all third-party integrations. We never store your Google, Microsoft, or Meta account password. At no point does the Application handle your credentials directly.

You may revoke the Application's access to your account at any time through the following methods:

  • Google: Visit myaccount.google.com/permissions, find Zeal Connect Desk or Zeal Connect Reconfirmation, and click Remove Access.
  • Microsoft: Visit myapps.microsoft.com and revoke access for Zeal Connect.
  • Meta / WhatsApp: Visit business.facebook.com → Accounts → Connected Apps → Remove Zeal Connect Desk.
  • In-app (all integrations): Settings → Integrations → Disconnect.

Upon revocation, the Application will immediately cease accessing your connected account. Previously retrieved data is retained according to the schedule in Section 13 – Data Retention unless you also submit a deletion request to privacy@zealconnect.com.

↑ Back to top

11. AI and Automated Processing

Email, ticket, and message content may be processed by AI services — including Microsoft Azure OpenAI or OpenAI API — solely for the following purposes within Zeal Connect Desk and Zeal Connect Reconfirmation:

  • Classifying support tickets by type and priority
  • Extracting booking data (hotel names, reference numbers, dates, guest names) from email content
  • Suggesting or generating reply templates for support agents
  • Generating and dispatching hotel reconfirmation requests

Message and email content is never used to train general-purpose AI or machine learning models, for advertising, for profiling, or for any purpose beyond those listed above. All AI processing is performed under data processing agreements with our AI service providers that prohibit use of your data for unrelated purposes.

↑ Back to top

12. Data Sharing and Third-Party Providers

Your data is shared only with service providers essential to operating our services, under strict data processing agreements. We do not sell, rent, or share your data with advertisers or third parties for commercial purposes.

  • Amazon Web Services (AWS) – Cloud hosting, database storage, and content delivery
  • Microsoft Azure – AI processing and backup infrastructure
  • OpenAI – Natural language processing and automated response generation (if feature is enabled)
  • Meta Platforms – WhatsApp message delivery via WhatsApp Business Cloud API
  • Google Cloud Platform – Supporting infrastructure services

We may disclose data to law enforcement or regulatory authorities only where required by applicable law, a valid court order, or to protect the rights and safety of our users or the public.

↑ Back to top

13. Data Retention

We retain personal data only as long as necessary for the stated purposes or as required by applicable law. Specific retention periods are:

  • Website personal data (name, email, phone) – Retained for the duration of the business relationship plus 12 months, or as required by law.
  • Email and ticket content Desk Reconfirmation – Deleted within 30 days of account closure.
  • WhatsApp message content Desk – Deleted within 30 days of account closure. Access tokens are deleted immediately upon channel disconnection.
  • Google and Microsoft OAuth tokens – Deleted immediately upon mailbox disconnection or account termination.
  • Usage Data – Retained for shorter periods unless required for security purposes or service improvement.

Users may request deletion of their stored data at any time by emailing privacy@zealconnect.com with the subject line "Data Deletion Request." We will process deletion requests within 14 business days and confirm completion in writing.

↑ Back to top

14. Data Transfer

Your information may be transferred to and processed on servers located outside your state or country, including in the United States and the European Union, where data protection laws may differ from those in your jurisdiction. By using our Service, you consent to such transfers. We ensure adequate safeguards are in place, including standard contractual clauses and data processing agreements with all sub-processors listed in Section 12.

↑ Back to top

15. Disclosure of Personal Data

15.1 Business Transactions

If Zeal Connect is involved in a merger, acquisition, or sale of assets, your personal data may be transferred as part of that transaction. We will provide notice before your data is transferred and becomes subject to a different privacy policy.

We may disclose your personal data where required by law or where we believe in good faith that such disclosure is necessary to:

  • Comply with a legal obligation or government request
  • Protect and defend the rights or property of Zeal Connect
  • Investigate or prevent potential wrongdoing in connection with the Service
  • Protect the personal safety of users of the Service or the public
  • Defend against legal liability
↑ Back to top

16. Security

We implement industry-standard security measures to protect your data, including:

  • All data in transit is encrypted using TLS 1.2 or higher
  • All data at rest is encrypted using AES-256
  • OAuth tokens are stored in encrypted vaults (AWS KMS) with strict role-based access controls
  • Access to customer data within our systems is restricted to authorized personnel only
  • All access to email data is logged and monitored for unauthorized activity

No electronic transmission or storage is 100% secure. We cannot guarantee absolute security, but we continuously work to protect your information against unauthorized access, disclosure, alteration, or destruction.

↑ Back to top

17. Children's Privacy

Our website is not intended for children under the age of 13. Zeal Connect Desk and Zeal Connect Reconfirmation are intended solely for business use by organizations and their authorized personnel aged 18 or over. We do not knowingly collect personal data from minors. If such data is identified, we will delete it promptly. Please contact us at privacy@zealconnect.com if you believe a minor has provided us with personal data.

↑ Back to top

Our website and applications may contain links to external sites not operated by us. We encourage you to review the privacy policies of any third-party sites you visit. We are not responsible for the content or privacy practices of those sites and have no control over them.

↑ Back to top

19. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or the features of our services. When we make material changes, we will update the "Last updated" date at the top of this page and notify registered users by email. You are encouraged to review this policy regularly. Continued use of the Service after an update constitutes your acceptance of the revised policy.

↑ Back to top

20. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or our data practices, please contact us:

↑ Back to top

Privacy and Cookie Policy – Zeal Connect

Last updated: June 25, 2026

Company: Zeal Connect Private Limited, 302, Kohinoor World Tower, Old Mumbai–Pune Hwy, Pimpri Colony, Pune, Maharashtra 411018, India

This Privacy Policy describes the policies and procedures of Zeal Connect Private Limited (“the Company,” “we,” “us,” or “our”) on the collection, use, disclosure, and protection of your information when you use any of our services — including our website (zealconnect.com), Zeal Connect Desk, and Zeal Connect Reconfirmation. It also explains your privacy rights and how applicable law protects you.

We use your personal data to provide and improve our services. By using any of our services, you agree to the collection and use of information in accordance with this Privacy Policy.

Sections marked Desk apply specifically to Zeal Connect Desk. Sections marked Reconfirmation apply specifically to Zeal Connect Reconfirmation.


1. Definitions

Words with the initial letter capitalised have the meanings defined below. Definitions apply equally in singular and plural.

  • Account – A unique account created for you to access our Service or parts of our Service.
  • Company (also “We,” “Us,” or “Our”) – Zeal Connect Private Limited, Pune, Maharashtra, India.
  • Cookies – Small files placed on your device by a website, containing details of your browsing activity among other uses.
  • Country – India.
  • Device – Any device that can access the Service, such as a computer, smartphone, or tablet.
  • Personal Data – Any information that relates to an identified or identifiable individual.
  • Service – The Zeal Connect website, Zeal Connect Desk, and Zeal Connect Reconfirmation, collectively or individually as context requires.
  • Service Provider – Any natural or legal person who processes data on behalf of the Company.
  • Usage Data – Data collected automatically when using the Service (e.g. page visit duration, IP address).
  • Website – Zeal Connect, accessible at https://zealconnect.com.
  • You – The individual accessing or using the Service, or the company on whose behalf that individual acts.

2. Information We Collect

2.1 Personal Data (Website)

When you use the Zeal Connect website or contact us, we may ask you to provide personally identifiable information including:

  • First name and last name
  • Email address
  • Phone number
  • Company name
  • Usage Data

2.2 Usage Data

Usage Data is collected automatically when you use the Service and may include:

  • Your device’s IP address, browser type and version
  • Pages of our Service visited, time and date of visit, and time spent on each page
  • Device identifiers and diagnostic data
  • For mobile access: device type, operating system, browser, and unique device identifiers

2.3 Email and Mailbox Data Desk Reconfirmation

When you authorize Zeal Connect Desk or Zeal Connect Reconfirmation to access your email mailbox via OAuth 2.0, the following data may be accessed, retrieved, and stored within the Application:

  • Email subject and body (plain text and HTML)
  • Sender and recipient email addresses
  • Attachments (booking confirmations and related documents)
  • Date, timestamp, and message/thread IDs
  • Email labels and folder names

3. Tracking Technologies and Cookies

We use Cookies and similar tracking technologies (beacons, tags, and scripts) to monitor activity on our website and store certain information. The types of cookies we use are:

  • Necessary / Essential Cookies (Session) – Enable core website functionality and prevent fraudulent use. These cannot be disabled.
  • Cookies Policy / Notice Acceptance Cookies (Persistent) – Record your cookie consent preference.
  • Functionality Cookies (Persistent) – Store your preferences such as login details and language settings.

You can instruct your browser to refuse all cookies or to alert you when a cookie is being sent. However, some parts of the Service may not function correctly if cookies are disabled.


4. How We Use Your Data

The Company may use personal data for the following purposes:

  • To provide and maintain the Service
  • To manage your Account and authenticate your identity
  • For performance of a contract delivering services you have purchased or requested
  • To contact you by email, phone, SMS, or push notifications regarding updates, support, or service changes
  • To provide news, offers, and product updates (unless you have opted out)
  • To manage your customer support requests and tickets
  • For business transfers such as mergers or acquisitions
  • For analytics, trend analysis, marketing effectiveness measurement, and service improvement

We may share your information with:

  • Service Providers (cloud hosting, analytics, support, communications)
  • Affiliates and business partners involved in delivering the Service
  • Other users where you have posted content publicly
  • Third parties with your explicit consent
  • Competent authorities where required by law

5. Zeal Connect Desk – Email and Mailbox Access Desk

Zeal Connect Desk is a cloud-based customer support ticketing platform. It connects to Gmail and Microsoft Outlook mailboxes to import inbound customer emails, create and manage support tickets, process hotel booking workflows, and send replies on your behalf.

Email and mailbox data accessed through connected accounts is used solely to:

  • Create and manage support tickets from inbound customer emails
  • Extract hotel booking and reservation details from email content
  • Send customer support replies and hotel reconfirmation emails on your behalf
  • Apply labels and synchronize inbox state with ticket statuses
  • Maintain conversation history within support tickets for continuity and quality assurance

We do not use email or mailbox data for advertising, marketing, profiling, resale, or any purpose unrelated to the customer support and ticketing functions described in this policy.

See Section 6 for Google Gmail API details and Section 7 for Microsoft Graph API details.


6. Zeal Connect Desk – Google Gmail API Desk

Zeal Connect Desk connects to Gmail mailboxes using Google’s OAuth 2.0 authorization framework. Access is granted only after the user explicitly authorizes the Application through Google’s OAuth consent screen.

6.1 Scopes Requested

When a user authorizes a Gmail mailbox, the Application requests the following scopes:

  • https://mail.google.com/ — Full mailbox access used to read incoming customer emails, send support replies and reconfirmation emails on behalf of the authorized user, apply labels, mark emails as read, and synchronize inbox state with the Zeal Connect Desk ticketing system.
  • https://www.googleapis.com/auth/userinfo.email — To identify the email address of the account being connected.
  • https://www.googleapis.com/auth/userinfo.profile — To identify the name and basic profile of the signed-in user within the Application.

6.2 How Gmail Data Is Used

The https://mail.google.com/ scope is used specifically for the following operations:

  • Reading emails – Incoming customer emails are retrieved to automatically create and update support tickets.
  • Sending emails – Customer support replies, hotel reconfirmation requests, and booking-related communications are sent from the connected Gmail mailbox on behalf of the authorized user.
  • Modifying the mailbox – Emails are marked as read and labels are applied to reflect the corresponding ticket status in Zeal Connect Desk.
  • Attachment access – Email attachments such as booking confirmations and hotel documents are retrieved when required for support workflows.

Zeal Connect Desk does not use Gmail data for advertising, marketing, user profiling, resale, or any purpose unrelated to providing customer support and ticket management services. Access is limited to the organization that authorized the mailbox connection.

6.3 Google Limited Use Compliance

Zeal Connect Desk’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In accordance with Google’s Limited Use Policy, Zeal Connect Desk:

  • Uses Google user data only to provide or improve the user-facing features prominent in the Application
  • Does not transfer Google user data to third parties except as necessary to provide the Service, as required by law, or with the user’s explicit consent
  • Does not use Google user data for serving advertisements
  • Does not allow humans to read Gmail content except where the user has given explicit affirmative consent, it is necessary for security purposes, or it is required by law

To revoke Gmail access, see Section 10 – OAuth Authorization and Revoking Access.


7. Zeal Connect Desk – Microsoft Graph API Desk

Zeal Connect Desk accesses Microsoft Outlook mailboxes using the Microsoft Graph API only after explicit user or administrator OAuth 2.0 consent, and only for the purposes of booking synchronization, hotel reconfirmation, and email support services.

The following permissions are requested:

  • Mail.Read – To read inbound emails for ticket creation and booking extraction
  • Mail.ReadWrite – To organise the inbox in sync with ticket statuses and mark emails as processed
  • Mail.Send – To send customer support replies and reconfirmation emails on behalf of the authorized user
  • User.Read – To identify the name and email address of the connected account within the Application

For organizational Microsoft 365 accounts, an authorized administrator may be required to grant admin consent before users can connect their mailboxes. Zeal Connect Desk’s use of Microsoft Graph data is limited to the purposes described in this policy and complies with Microsoft’s API Terms of Use.

To revoke Microsoft access, see Section 10 – OAuth Authorization and Revoking Access.


8. Zeal Connect Desk – WhatsApp Business API Desk

Zeal Connect Desk optionally connects to Meta’s WhatsApp Business Cloud API to enable businesses to manage WhatsApp customer support conversations from within the platform. This integration is activated only when a business administrator explicitly connects their WhatsApp Business Account via Meta’s Embedded Signup OAuth flow.

8.1 WhatsApp Data We Access

With your explicit OAuth 2.0 authorization via Meta’s Embedded Signup, Zeal Connect Desk may access:

  • Inbound WhatsApp messages (text, images, documents, audio, and video) sent to your registered WhatsApp Business phone number
  • Sender’s WhatsApp phone number and display name
  • Message timestamps and delivery/read status
  • Your WhatsApp Business Account ID (WABA ID) and Phone Number ID
  • Meta access token (encrypted at rest and used solely to send messages on your behalf)

8.2 How WhatsApp Data Is Used

WhatsApp data is used solely to:

  • Convert inbound WhatsApp messages into support tickets in Zeal Connect Desk
  • Enable support agents to read and reply to customer messages from within the platform
  • Maintain conversation history within support tickets for continuity and quality assurance
  • Deliver outbound replies from support agents to customers via WhatsApp

We do not use WhatsApp message data for advertising, profiling, AI model training, resale, or any purpose unrelated to the customer support function described above.

8.3 Meta API Permissions Used

  • whatsapp_business_messaging – To receive inbound WhatsApp messages from customers and send replies on your behalf
  • whatsapp_business_management – To discover and configure your WhatsApp Business Account and registered phone numbers during initial setup

Zeal Connect Desk’s use of Meta platform data complies with the Meta Platform Terms, Meta Developer Policies, and WhatsApp Business Policy.

8.4 Connecting and Disconnecting WhatsApp

Zeal Connect Desk uses Meta’s OAuth 2.0 Embedded Signup to connect your WhatsApp Business Account. We never store your Meta account password. You may disconnect at any time:

  • In-app: Settings → Channels → WhatsApp → Delete Channel
  • Via Meta: business.facebook.com → Accounts → Connected Apps → Remove Zeal Connect Desk

Upon disconnection, your access token is immediately deleted from our systems. Message history within existing tickets is retained per your data retention settings and can be permanently deleted on request see Section 13 – Data Retention.


9. Zeal Connect Reconfirmation – Email Access Reconfirmation

Zeal Connect Reconfirmation is an AI-powered hotel booking reconfirmation platform. With your explicit OAuth 2.0 authorization, this product may connect to your Gmail or Outlook mailbox to:

  • Read incoming hotel booking confirmation emails
  • Extract booking reference numbers, hotel names, check-in and check-out dates, and guest details from email content
  • Send hotel reconfirmation requests on your behalf from the connected mailbox
  • Track reconfirmation status and update booking records accordingly

The same Gmail API scopes described in Section 6 and Microsoft Graph API permissions described in Section 7 apply to Zeal Connect Reconfirmation where it accesses Gmail or Outlook mailboxes. Email content accessed through Reconfirmation is used exclusively for hotel booking reconfirmation workflows and is never used for advertising, profiling, resale, or any unrelated purpose.

Zeal Connect Reconfirmation’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

To revoke access, see Section 10 – OAuth Authorization and Revoking Access.


10. OAuth Authorization and Revoking Access

Zeal Connect Desk and Zeal Connect Reconfirmation use the industry-standard OAuth 2.0 protocol for all third-party integrations. We never store your Google, Microsoft, or Meta account password. At no point does the Application handle your credentials directly.

You may revoke the Application’s access to your account at any time through the following methods:

  • Google: Visit myaccount.google.com/permissions, find Zeal Connect Desk or Zeal Connect Reconfirmation, and click Remove Access.
  • Microsoft: Visit myapps.microsoft.com and revoke access for Zeal Connect.
  • Meta / WhatsApp: Visit business.facebook.com → Accounts → Connected Apps → Remove Zeal Connect Desk.
  • In-app (all integrations): Settings → Integrations → Disconnect.

Upon revocation, the Application will immediately cease accessing your connected account. Previously retrieved data is retained according to the schedule in Section 13 – Data Retention unless you also submit a deletion request to privacy@zealconnect.com.


11. AI and Automated Processing

Email, ticket, and message content may be processed by AI services  including Microsoft Azure OpenAI or OpenAI API solely for the following purposes within Zeal Connect Desk and Zeal Connect Reconfirmation:

  • Classifying support tickets by type and priority
  • Extracting booking data (hotel names, reference numbers, dates, guest names) from email content
  • Suggesting or generating reply templates for support agents
  • Generating and dispatching hotel reconfirmation requests

Message and email content is never used to train general-purpose AI or machine learning models, for advertising, for profiling, or for any purpose beyond those listed above. All AI processing is performed under data processing agreements with our AI service providers that prohibit use of your data for unrelated purposes.


12. Data Sharing and Third-Party Providers

Your data is shared only with service providers essential to operating our services, under strict data processing agreements. We do not sell, rent, or share your data with advertisers or third parties for commercial purposes.

  • Amazon Web Services (AWS) – Cloud hosting, database storage, and content delivery
  • Microsoft Azure – AI processing and backup infrastructure
  • OpenAI – Natural language processing and automated response generation (if feature is enabled)
  • Meta Platforms – WhatsApp message delivery via WhatsApp Business Cloud API
  • Google Cloud Platform – Supporting infrastructure services

We may disclose data to law enforcement or regulatory authorities only where required by applicable law, a valid court order, or to protect the rights and safety of our users or the public.


13. Data Retention

We retain personal data only as long as necessary for the stated purposes or as required by applicable law. Specific retention periods are:

  • Website personal data (name, email, phone) – Retained for the duration of the business relationship plus 12 months, or as required by law.
  • Email and ticket content Desk Reconfirmation – Deleted within 30 days of account closure.
  • WhatsApp message content Desk – Deleted within 30 days of account closure. Access tokens are deleted immediately upon channel disconnection.
  • Google and Microsoft OAuth tokens – Deleted immediately upon mailbox disconnection or account termination.
  • Usage Data – Retained for shorter periods unless required for security purposes or service improvement.

Users may request deletion of their stored data at any time by emailing privacy@zealconnect.com with the subject line “Data Deletion Request.” We will process deletion requests within 14 business days and confirm completion in writing.


14. Data Transfer

Your information may be transferred to and processed on servers located outside your state or country, including in the United States and the European Union, where data protection laws may differ from those in your jurisdiction. By using our Service, you consent to such transfers. We ensure adequate safeguards are in place, including standard contractual clauses and data processing agreements with all sub-processors listed in Section 12.


15. Disclosure of Personal Data

15.1 Business Transactions

If Zeal Connect is involved in a merger, acquisition, or sale of assets, your personal data may be transferred as part of that transaction. We will provide notice before your data is transferred and becomes subject to a different privacy policy.

We may disclose your personal data where required by law or where we believe in good faith that such disclosure is necessary to:

  • Comply with a legal obligation or government request
  • Protect and defend the rights or property of Zeal Connect
  • Investigate or prevent potential wrongdoing in connection with the Service
  • Protect the personal safety of users of the Service or the public
  • Defend against legal liability

16. Security

We implement industry-standard security measures to protect your data, including:

  • All data in transit is encrypted using TLS 1.2 or higher
  • All data at rest is encrypted using AES-256
  • OAuth tokens are stored in encrypted vaults (AWS KMS) with strict role-based access controls
  • Access to customer data within our systems is restricted to authorized personnel only
  • All access to email data is logged and monitored for unauthorized activity

No electronic transmission or storage is 100% secure. We cannot guarantee absolute security, but we continuously work to protect your information against unauthorized access, disclosure, alteration, or destruction.


17. Children’s Privacy

Our website is not intended for children under the age of 13. Zeal Connect Desk and Zeal Connect Reconfirmation are intended solely for business use by organizations and their authorized personnel aged 18 or over. We do not knowingly collect personal data from minors. If such data is identified, we will delete it promptly. Please contact us at privacy@zealconnect.com if you believe a minor has provided us with personal data.


Our website and applications may contain links to external sites not operated by us. We encourage you to review the privacy policies of any third-party sites you visit. We are not responsible for the content or privacy practices of those sites and have no control over them.


19. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or the features of our services. When we make material changes, we will update the “Last updated” date at the top of this page and notify registered users by email. You are encouraged to review this policy regularly. Continued use of the Service after an update constitutes your acceptance of the revised policy.


20. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or our data practices, please contact us:

Zeal Connect Team

Travel Automation Expert

Book your exclusive no-cost demo call with our team.

As part of the free demo call, you will receive:

Discover our AI automation platform in action. Free consultation to upgrade your travel operations.