Privacy policy
What we collect, why, who we share it with, where it’s kept and your rights. In plain English.
Dazza is a product of Wall & Fifth, a studio based in London (“we”, “us”). This policy explains what we do with personal information when you visit dazza.io, use the Dazza app, or talk to a business through a Dazza chat or email agent.
The short version
- We collect what we need to run Dazza, and nothing to sell. We don’t sell personal information.
- Your knowledge and conversations only ever answer your own customers.
- Neither we nor our AI provider train AI models on your content.
- Your workspace data is stored in London.
- You can ask us for a copy of your data, or to delete it, at any time.
Who’s responsible for what
If you use Dazza for your business, or visit dazza.io, we are the controller of your personal information.
If you talk to a business through Dazza, that business is the controller of your conversation, and we process it on its behalf and on its instructions. The business’s own privacy notice applies, and it’s your first point of contact. We’ll help it answer any request you make.
What we collect
| Information | Examples | Why |
|---|---|---|
| Account | Your name, email address, sign-in details, workspace name, website and time zone | To run your account and let your team sign in |
| Workspace content | Pages read from your website, files, Q&As, agent settings and workflows | To answer your customers the way you’ve set up |
| Conversations | Messages and emails; files customers send (photos, screenshots, PDFs), stored with the conversation, and the names of other attachments; customers’ names and email addresses; the page a chat started on; verification records and ratings | To answer customers, run workflows and show your team |
| Technical | Logs, IP addresses, browser details and error reports | To keep Dazza secure and working |
| Billing | Your plan and invoices | To charge you correctly. Card details are handled by our payment provider, never stored by us |
dazza.io itself doesn’t use advertising or analytics cookies. See the cookie policy.
How we use it
- To provide Dazza: reading your knowledge, writing replies, running workflows, sending email and alerting your team.
- To keep Dazza secure: preventing abuse, investigating problems and protecting accounts.
- To support you when you ask for help.
- To tell you about important changes to Dazza or these terms.
- To improve Dazza using aggregated, de-identified usage. Never by training AI models on your content.
Under UK and EU data protection law, we rely on our contract with you, our legitimate interest in running and securing Dazza, and legal obligations. Where we need your consent, we’ll ask.
Who we share it with
We share personal information only with the providers that run Dazza for us, listed with what each one does on our security page: Vercel, Neon, Anthropic and Resend, and our payment provider when you pay for a plan. They can only use it to provide their service to us.
If you connect your own AI model provider (on Growth and above), conversations go to that provider under your agreement with it. If you connect messaging apps, messages travel through those apps (Meta, Twilio, Telegram, LINE or Viber) on your own accounts with them.
If you connect Slack, Dazza posts the alerts you turn on (who the customer is, a short summary and a link to the conversation) to the Slack channel you choose, under your agreement with Slack. If you connect Shopify, Dazza reads order details from your shop to answer the customer who placed the order. If you add event webhooks or use the API, conversation and contact details go to the systems you choose. These are services you choose and run under your own terms; they aren’t providers we use to run Dazza.
We may also share it with professional advisers, with authorities when the law requires it, or with a buyer if Wall & Fifth or Dazza is sold, under the same protections.
Where it’s stored
The Dazza app runs in London and your workspace data is stored there. Some providers process information outside the UK, mainly in the United States: for example, conversations, including files customers send, and the relevant knowledge are sent to our AI provider to write each reply. Where information leaves the UK or the EEA, we rely on the safeguards those providers offer, such as standard contractual clauses and the UK–US data bridge.
How long we keep it
- Account and workspace data: while your account is open. You can remove knowledge yourself at any time.
- Files customers send are kept with their conversation and deleted with it, for example when you erase a customer or a retention period you set runs out. Files uploaded to a chat but never sent are removed in a regular clean-up once they’re 6 hours old.
- When you close your account, we delete your workspace data within 90 days, unless we must keep something longer by law, such as invoices.
- Verification codes are stored hashed and expire after 10 minutes.
- Technical logs are kept only as long as we need them for security and fixing problems.
Your rights
You can ask us to access, correct, delete or restrict your personal information, to object to how we use it, or to give it to you in a portable format. Where we rely on consent, you can withdraw it.
To make a request, contact us. If you’re unhappy with how we’ve handled your information, you can complain to the Information Commissioner’s Office at ico.org.uk.
Children
Dazza is for businesses and isn’t aimed at children.
Changes
When we change this policy, we’ll update the date at the top. If a change is significant, we’ll tell account holders by email first.