BLUEZEBRALast updated: October 1, 2026

Privacy Policy

1. Data controller

BLUE ZEBRA LABS, S.L. · Tax ID (NIF) B88890629
C/ Saragossa, 95, ent. pta. 3 · 08006 Barcelona (Spain)
Contact: legal@bluezebralabs.com

2. Data we process

(a) Data you provide in access-request or contact forms and when creating your account (identification, email, phone, business details); (b) data derived from use of the service and billing; (c) technical and cookie data as per the Cookie Policy.

3. Purposes and legal basis

To provide and bill the service and handle your requests (performance of a contract or pre-contractual measures); to comply with legal obligations; to improve the service and, only with your consent, analytics and commercial communications (which you can withdraw at any time).

4. Recipients

We do not sell your data. It is processed, as data processors under contract, by providers needed to deliver the service: hosting and infrastructure, telephony and messaging, artificial-intelligence services, payments and analytics. Data may also be disclosed to authorities where required by law.

5. International transfers

Some providers may be located outside the European Economic Area. In that case, transfers are covered by appropriate safeguards (adequacy decisions or standard contractual clauses).

6. Retention

We keep data for as long as the relationship lasts and, afterwards, blocked for the applicable legal limitation periods.

7. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to legal@bluezebralabs.com. If you believe we have not handled your rights properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

8. Security and minors

We apply appropriate technical and organizational measures to protect data. The service is not intended for children under 14.

9. Google APIs and Limited Use

When a business connects its Google account (Gmail and/or Google Calendar), BlueZebra's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. The use of raw or derived user data received from Google Workspace APIs adheres to that policy, including the Limited Use requirements.

Google user data is never used to create, train, or improve generalized artificial intelligence or machine-learning models. Where Google user data (such as the content of an incoming email) is processed by a third-party AI service to provide user-facing features (e.g., drafting a reply on the business's behalf), that processing occurs exclusively through OpenAI's API Platform (GPT-4o family models, e.g. gpt-4o and gpt-4o-mini), whose terms state that data submitted via the API is not used to train their models. The platform's AI engine is configurable; any additional provider (including Google Gemini) would be onboarded under this same Limited Use isolation.

10. Data from Meta platforms (Messenger and Instagram) and how to delete it

When a business connects its Facebook Page or Instagram professional account to BlueZebra (through Facebook Login for Business) so that its AI agent can answer customer messages, we receive and process: the ID and name of the Page and/or Instagram account; a Page access token, stored encrypted; and the messages that customers send to that Page or account, together with the sender’s app-scoped ID and the replies sent by the agent.

We use this data only to provide the service to the business that connected the account: receiving the messages, generating and sending the agent’s replies, and showing the conversation history to that business in its private portal. We do not sell it, we do not use it for advertising and we do not share it with third parties other than the processors needed to run the service (hosting at OVHcloud, in data centres in Germany, and, to generate replies, the Anthropic API (Claude models), whose commercial terms state that API data is not used to train its models). Data received from Meta platforms is never used to train artificial intelligence models.

Data deletion instructions