Privacy Policy

Introduction

Welcome to Fictora Labs ("we", "us", or "our"). We are a Micro-SaaS-based automation and digital marketing agency headquartered in Dubai, UAE. This Privacy Policy describes how we collect, use, disclose, and safeguard your personal information when you visit our website or engage with our services — including Zena, our WhatsApp AI customer support platform.

By accessing or using our site or services, you acknowledge you accept the practices described in this policy.

Information We Collect

Information You Provide

• Contact details (name, email, phone number, company info) when you reach out via forms or email
• Project or business details shared through consultation or onboarding
• Account credentials when registering for Zena or other Fictora products
• Business type, company size, and goals collected during onboarding

Automatically Collected Information

• Device & Technical Data: browser type, IP address, operating system
• Usage Data: pages viewed, session duration, referral source
• Cookies & Tracking: session and persistent cookies

How We Use Your Information

• Deliver Services: To respond to inquiries, provide the platform, and manage your subscription
• Personalise Experience: Onboarding data used to pre-configure your workspace
• Improve & Analyze: Optimize platform performance via analytics
• Communications: Send service-related updates and respond to your messages
• AI Processing: When using Zena, messages are processed by AI models to generate automated responses on behalf of businesses
• Legal & Security: Enforce our Terms of Use and prevent abuse

Facebook & WhatsApp Data

Zena integrates with Meta's WhatsApp Business API. This section explains how we handle data obtained through this integration.

WhatsApp Business API

Zena connects to the Meta WhatsApp Business Cloud API on behalf of tenant businesses. Through this integration we process:

• Incoming and outgoing WhatsApp messages on behalf of connected businesses
• Customer phone numbers (WhatsApp IDs) and display names
• Message content for AI-generated responses and conversation history
• WhatsApp Business Account credentials (AES-256 encrypted and stored securely)

Meta Platform Policy Compliance

Our use of Meta APIs complies with the Meta Platform Terms and WhatsApp Business Policy. We do not use WhatsApp message data to serve advertisements or share it with third parties for marketing purposes.

Cookies & Tracking Technologies

We use cookies and similar technologies to facilitate site functionality, improve user experience, and gather anonymized analytics. You can adjust your browser settings to block or delete cookies, although this may impact site usability.

How We Share Your Information

We may share your data with:

• Service Providers: For hosting, analytics, email, and customer support
• Meta Platforms: Message data is transmitted to and from Meta's WhatsApp Cloud API as part of the service
• AI Providers: Message content may be processed by OpenAI or Google (Gemini) to generate automated replies
• Legal Authorities: If required by law or to protect rights
• Business Transfers: In the event of a sale, merger, or acquisition

We do not sell or lease your personal information for marketing purposes.

International Data Transfers

Though we operate from the UAE, our service infrastructure and providers may reside in other countries including the United States and European Union. By using our site or services, you consent to such data transfers in compliance with applicable data protection laws.

Your Rights and Choices

• Access or Correct: Request what data we hold about you
• Delete: Request permanent deletion of your personal data — see Section 9
• Unsubscribe: Opt out of non-transactional emails at any time
• Cookie Controls: Manage or disable cookies via your browser

To exercise any rights or make requests, contact us at admin@fictoralabs.ae.

Data Deletion

You have the right to request permanent deletion of all personal data Fictora Labs holds about you — at any time and at no cost.

Children's Privacy

Our services and website are not directed to individuals under 18 years of age. We do not knowingly collect data from minors. If you believe a minor has submitted their data without consent, please contact us promptly.

Security

We implement industry-standard measures to protect your data, including AES-256 encryption for stored credentials and HTTPS for all data in transit. However, due to inherent risks in digital communications, we cannot guarantee absolute data security.

Updates to This Policy

We may update this Privacy Policy from time to time. Any substantial changes will be posted here with an updated "Last Updated" date. Continued use of our site or services after updates implies your acceptance of the revised policy.

Contact Us

For questions, concerns, or privacy requests, reach out to: