Privacy Policy

Effective date: 31 October 2026. Applies to www.ascenzero.com, our WhatsApp Business number, our email addresses and the services we deliver to clients.

1. Who we are

Ascenzero ("we", "us") builds AI agents and automation for businesses: assistants that answer customers, systems that handle routine office work, and tools that help businesses be found online. For the personal data described in this policy, Ascenzero is the data controller, except where section 7 says we act on behalf of a client.

Contact: hello@ascenzero.com, WhatsApp +20 122 655 5916.

2. Scope of this policy

This policy covers personal data we handle when you:

  • visit www.ascenzero.com;
  • contact us by WhatsApp, email, phone or a form;
  • request a free review ("X-ray"), a proposal or a report;
  • become a client, or work for a client we serve;
  • are a customer of one of our clients and interact with a system we built or run for them.

Websites and services of other companies that we link to have their own privacy policies.

3. Data we collect

CategoryExamplesSource
Contact detailsName, business name, job title, phone number, WhatsApp number, email addressYou, or your employer
MessagesContent of WhatsApp messages, emails and voice notes you send us, with dates and delivery statusYou
Business informationWhat your business does, locations, opening hours, services, goals and requirements you share with usYou, or public sources (section 6)
Account and access detailsAccess you grant us to your Google Business Profile, website, analytics or other tools in order to deliver a serviceYou (clients only)
Billing informationInvoices, payment amounts, payment method reference and date. We do not store full card numbersYou (clients only)
Free X-ray detailsBusiness name, city, website and your answers to the X-ray questions; the results we measure from public sources; and, if you ask for the full report, your name, email and phone. These create your free Ascenzero accountYou, and public sources
Device check for the free X-rayA random identifier saved in your browser, and a summary of your device settings (screen size, time zone, language and graphics type), stored only as a scrambled code together with your network. We use it only to keep the free X-ray to one per personYour browser
Contact formYour name, phone, email, message and how you prefer to be contactedYou
Website usagePages viewed, referring site, device type, browser, approximate country. No advertising identifiersYour browser
Technical logsIP address, time of request and error records kept by our servers for securityYour browser or device

We do not ask for and do not want special categories of data (such as health, religion or biometric data). If you send such data to us, we will use it only as needed to answer you and delete it when it is no longer needed.

4. How we use data

  • To reply to your enquiries and to prepare reviews, proposals and reports you request.
  • To deliver, operate, monitor and support the services a client has ordered.
  • To manage our relationship with clients, including contracts, invoices and records.
  • To run the free X-rays you request, send you the report, and keep your results in your account.
  • To follow up on a conversation you started with us, within the limits in section 14.
  • To keep our website, systems and clients' systems secure, and to detect misuse.
  • To improve our services using aggregated information that does not identify you.
  • To comply with legal obligations and to establish, exercise or defend legal claims.

We do not sell personal data, and we do not use it for advertising profiles.

5. Legal bases

Where data protection law requires a legal basis, including the Egyptian Personal Data Protection Law No. 151 of 2020 and the EU and UK General Data Protection Regulation for visitors in those regions, we rely on:

  • Contract: to take steps you request before a contract and to perform a contract with you.
  • Consent: where you ask us to contact you or agree to receive messages. You can withdraw consent at any time.
  • Legitimate interests: to run and secure our business, to review publicly available business information (section 6), and to follow up on enquiries. We balance these interests against your rights.
  • Legal obligation: to keep records required by tax, accounting and other laws.

6. Public business information

To prepare reviews and proposals, we look at information that businesses publish about themselves: their Google Maps listing, website, public reviews, opening hours, phone numbers and how they appear in search engines and AI assistants. We collect this through official interfaces and normal web access.

  • We focus on the business, not on private individuals. Public reviews may contain reviewers' first names; we use them only to understand what customers value and do not contact reviewers.
  • A review prepared about a business is shared only with that business, unless it agrees otherwise.
  • If you represent a business and do not want us to review it or contact you, tell us and we will stop and delete what we hold about you, except what we must keep to respect your request.

7. Data we process for clients

When we build or run a system for a client (for example a WhatsApp assistant that answers the client's customers), the client decides why and how its customers' data is used. In that case the client is the data controller and Ascenzero is a data processor acting on its written instructions. We:

  • use that data only to provide the client's service;
  • keep each client's data separate from other clients' data;
  • apply the security measures in section 12 and limit access to people who need it;
  • help the client answer requests from its customers;
  • delete or return the data when the service ends, as the client instructs.

If you are a customer of one of our clients, please contact that business first about your data. We will pass on any request we receive.

8. AI and automated processing

  • Our systems use AI models to understand messages, draft replies, summarise information and prepare documents.
  • Decisions that have a legal or similarly significant effect on a person are not made by AI alone. Our systems are designed so that a person approves anything that matters before it is sent or applied.
  • We use paid business interfaces of AI providers whose terms state that customer inputs are not used to train their models. We do not send client personal data to AI services that use inputs for training.
  • AI output can be wrong. We check important output and correct errors when we find them or when you tell us.

9. Service providers

We share personal data only with providers that help us run our services, under contracts that require them to protect it. The main categories are:

PurposeProviders
Hosting and storageOracle Cloud Infrastructure (servers and encrypted backups in the UAE region)
MessagingMeta Platforms (WhatsApp Business Platform); Telegram (internal notifications to our team)
EmailZoho Mail (our mailboxes); Resend (system emails)
Domain, network and bot protectionCloudflare (domain name service and Turnstile, which checks that X-ray requests come from people, not bots)
AI modelsGoogle (Gemini and Google Maps data), Microsoft (Azure OpenAI), Anthropic (Claude)
Search and measurementGoogle APIs (Places, PageSpeed Insights, Chrome UX Report); SerpApi (search result measurement)
Client recordsNotion (client relationship records)

We may also disclose data if required by law, by a court or a competent authority, or to protect our rights and the safety of others. If Ascenzero is reorganised or sold, data may pass to the successor, which will remain bound by this policy.

10. International transfers

Our main servers are in the United Arab Emirates. Some providers listed in section 9 process data in other countries, including the United States and member states of the European Union. When data leaves your country, we rely on safeguards required by applicable law, such as the provider's contractual commitments and standard contractual clauses where they apply.

11. Retention

DataHow long we keep it
Free X-ray accounts and resultsUp to 24 months after your last X-ray or contact, or until you ask us to delete them
Enquiries and messages that did not lead to a contractUp to 24 months after the last contact, then deleted
Client records and project dataFor the duration of the contract and up to 5 years after it ends, unless the client asks for earlier deletion of operational data
Invoices and accounting recordsAs long as tax and accounting law requires
Data processed for a client's customersAs the client instructs; deleted or returned when the service ends
Server and security logsNormally no longer than 90 days
BackupsKept on a rolling schedule; deleted data leaves all backups within 6 months

12. Security

  • Encrypted connections (HTTPS) for our website and systems, and encrypted backups.
  • Access keys and passwords stored in restricted files, never in shared documents or messages.
  • Access limited to the people who need it, with separate data for each client.
  • A firewall that allows only the connections our services need, and continuous monitoring with alerts.
  • Daily backups with regular restore tests.

No system is completely secure. If a breach affects your personal data, we will notify you and the competent authority where the law requires it.

13. Your rights

Depending on the law that applies to you, you may have the right to:

  • know whether we hold data about you and receive a copy;
  • correct inaccurate or incomplete data;
  • ask us to delete your data;
  • object to or restrict certain processing, including follow-up messages;
  • receive your data in a portable format;
  • withdraw consent at any time, without affecting earlier processing;
  • complain to a data protection authority. In Egypt this is the Personal Data Protection Center.

To make a request, write to hello@ascenzero.com. We may ask you to confirm your identity. We reply within 30 days, and there is no charge for a reasonable request.

14. Messages and marketing

  • Our official WhatsApp number replies to people who contact us. It does not start conversations with people who have not contacted us.
  • We send business information only to businesses and people we reasonably believe are interested, and every message makes it easy to say no. If you reply "stop" or ask us not to contact you, we stop and record your request.
  • We send marketing emails only if you ticked the box that allows it. Every marketing email has an unsubscribe link, and you can also reply "unsubscribe". Your report emails are sent either way, because you asked for them.
  • We do not buy or rent contact lists.

15. Cookies and analytics

Our website does not use advertising cookies or cross-site tracking. We may use privacy-friendly analytics that count visits without cookies and without identifying you. Our website loads fonts from Google Fonts, and the X-ray pages load Cloudflare Turnstile; both receive your IP address to work. Turnstile does not use advertising cookies. You can block third-party content in your browser settings.

16. Children

Our services are for businesses and are not directed at children under 18. We do not knowingly collect personal data from children. If you believe a child has sent us data, contact us and we will delete it.

17. Changes

We may update this policy as our services or the law change. We will post the new version on this page with a new effective date, and tell clients about important changes before they apply.

18. Contact

Questions, requests or complaints: hello@ascenzero.com, or WhatsApp +20 122 655 5916. If the English and Arabic versions differ, the English version applies.