Zaila AI Designs

Privacy Policy

Last updated: May 12, 2026

1. Introduction

Zaila AI Designs ("we", "us", "our") operates zailaai.com. We are based in Hamilton, Ontario, Canada and are committed to protecting your personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Canadian law.

2. Information We Collect

We collect only the information you voluntarily provide through our contact forms:

  • Name
  • Email address
  • Business name
  • Project type
  • Message content

We do not collect sensitive personal information such as financial data, government-issued identifiers, or health information.

3. How We Use Your Information

We use the information you provide to:

  • Respond to your inquiry or project request
  • Provide a quote or consultation
  • Communicate with you about our services

We will not use your information for any purpose other than what you provided it for without your consent.

4. How We Share Your Information

We do not sell, rent, or trade your personal information. We may share your information only with the following third-party service providers who assist us in operating our business:

  • Resend — email delivery service used to receive your contact form submissions
  • ZailaOS / InsForge — internal CRM and database used to manage inquiries and client work
  • Hosting provider (Vercel) — website hosting and CDN provider used to deliver the site, including Vercel Blob for storing post images we publish to Instagram
  • Meta Platforms (Facebook, Instagram) — when you message us on Instagram, we receive and store your message via the Instagram Graph API to respond and manage the conversation. See section 11 for full detail.
  • OpenAI and OpenRouter — language-model providers we use to classify inbound messages, draft suggested replies, and generate marketing content. Submissions sent to these providers are subject to their respective privacy policies.

These providers are contractually obligated to protect your data and may only use it to perform services on our behalf.

5. Cookies and Analytics

Our website does not use cookies for tracking purposes. If we implement analytics in the future, this policy will be updated accordingly and any analytics tools will comply with PIPEDA requirements.

6. Data Storage and Security

Your information is transmitted securely via HTTPS. Contact form submissions are sent to our email and stored in our private internal CRM so we can respond to your inquiry and manage follow-up. We take reasonable measures to protect your information from unauthorized access, disclosure, or misuse.

Please note that data processed by our service providers may be stored on servers located outside of Canada. By submitting your information, you acknowledge this transfer. We ensure that any such providers maintain comparable levels of data protection.

7. Your Rights Under PIPEDA

Under PIPEDA, you have the right to:

  • Know what personal information we hold about you
  • Request access to your personal information
  • Request correction of inaccurate information
  • Withdraw your consent for us to use your information
  • File a complaint with the Office of the Privacy Commissioner of Canada

8. Consent

By submitting a contact form on our website, you consent to the collection and use of your personal information as described in this policy. You may withdraw your consent at any time by contacting us.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date.

10. Instagram and Meta Platform Data

We operate an Instagram business presence (@zailaaidesigns) and use Meta's Instagram Graph API to publish content, read engagement metrics on our own posts, and receive direct messages sent to us. When you interact with our Instagram account, the following data may be collected and stored in our internal CRM:

  • Direct messages you send us — we store the message text, your Instagram sender ID, your Instagram username (if available), and the timestamp, so we can respond and continue the conversation. We do not read other Instagram conversations.
  • Comments you post on our content — if you comment on a post by @zailaaidesigns, we may store the comment text and your Instagram username to respond.
  • Aggregated post metrics — likes, saves, comments, reach, and total interactions on our own posts. We do not track or store metrics for any other accounts' content.

We do not sell, rent, or share Instagram-derived data with third parties other than the service providers listed in section 4. Inbound messages and their classifications are accessible only to authorized Zaila AI Designs operators.

Our use of information received from the Instagram Platform adheres to the Meta Platform Terms and Developer Policies. You may revoke our app's access to your Instagram data at any time from your Instagram account settings (Settings → Apps and websites).

11. AI Processing of Your Submissions

We use third-party language-model providers (OpenAI and OpenRouter) to help us run our business — specifically to classify inbound messages, draft suggested replies for our team to review, and generate marketing content for our own channels. When you send us a message (contact form, email reply, or Instagram DM), the message text may be sent to one of these providers as part of automated classification.

We do not provide more information than is necessary to perform the task (we do not, for example, send your CRM history along with a reply-classification request). These providers process data on our behalf under their respective enterprise terms; we do not authorize them to use your submissions for training their models.

12. Data Retention and Deletion

We retain personal information only as long as necessary for the purposes described above. Inquiry and project records are retained while we are doing business with you and for a reasonable period afterward for legal and accounting requirements (typically up to seven years for financial records, in line with Canadian tax law). Instagram message records are retained for as long as you remain in active conversation with us; you may request earlier deletion at any time.

To request deletion of your personal information held by Zaila AI Designs, including data we collected via Instagram or Meta's APIs, please visit our data deletion request page or email us at the address below. We will confirm receipt within 48 hours and complete the deletion within 30 days, except where we are required by law to retain certain records.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, contact us at:

Zaila AI Designs
Hamilton, Ontario, Canada
hello@zailaaidesigns.com