GDPR Compliance
Last Updated: August 5, 2026
1. Our Commitment
ZenSell.ai is a European company (based in Málaga, Spain) and we are committed to complying with the EU General Data Protection Regulation (GDPR) for all personal data we process, whether as a Data Controller (for our own merchant customers) or a Data Processor (for merchants' end-shopper data processed through the chat widget).
2. Your Rights Under GDPR
If you are located in the EU/EEA, you have the right to:
- Access the personal data we hold about you
- Rectify inaccurate or incomplete data
- Erase your data ("right to be forgotten")
- Restrict or object to certain processing
- Data portability (receive your data in a structured, machine-readable format)
- Withdraw consent at any time, where processing is based on consent
- Lodge a complaint with your local Data Protection Authority
3. How to Exercise Your Rights
Email privacy@zensell.ai with your request. We respond to verified requests within 30 days, as required by GDPR.
4. Data Processing Agreement (DPA)
Merchants that need a signed Data Processing Addendum for their own GDPR compliance can request one at team@zensell.ai. We offer Standard Contractual Clauses (SCCs) for any data transferred outside the EEA.
5. Where This Is Detailed Further
Full details on what we collect, why, how long we keep it, and our sub-processors (OpenAI, Supabase, Stripe) are in our Privacy Policy.