Privacy Policy
Last updated: 26 August 2026
This Privacy Policy explains how ZavaraAI handles personal information collected through this website, www.zavaraai.com (the "Website"). It does not cover ZavaraAI's individual products — see §13 below for where to find those.
1. Who we are
ZavaraAI ("ZavaraAI", "we", "us", "our") is an Australian sole trader business operating under ABN 57 543 957 395 and based in Melbourne, Victoria, Australia.
2. Scope of this policy
This policy covers this Website only — browsing it, using its Contact form, emailing us directly, and using the "Ask ZavaraAI" assistant. Product-specific privacy documents apply where ZavaraAI has published them, and take precedence over this policy for anything that happens inside that product. HalalScanner's Privacy Policy is published at /privacy.
3. Information we collect
Information you provide directly. When you use the Contact form, we collect your full name, email address, the enquiry type you select, an optional product you're enquiring about, and the message you write. If you email us directly, we receive whatever your email contains. If you use Ask ZavaraAI, we receive the messages you type into it (see §4 below).
Technical and security metadata. Like any website, ours is served through hosting and infrastructure providers (currently Vercel) that inherently process standard request metadata — such as IP address and request headers — to deliver the page and detect abuse. On the Contact form and Ask ZavaraAI specifically, we also apply a short-lived, in-memory rate limit keyed to your IP address (or a randomly generated, non-identifying session id, for the assistant) purely to prevent automated abuse; this is not written to a database and is discarded automatically once the limiting window passes.
Cookies. See §5 below for what this Website does, and does not, use cookies for.
4. Ask ZavaraAI
Ask ZavaraAI is an AI assistant embedded on this Website. When you use it, the messages you type — together with limited surrounding conversation context — are sent to OpenAI, using OpenAI's Responses API, to generate a response. We send every request with OpenAI's store: false setting.
store: false means OpenAI does not retain your conversation in its own persistent storage for our account. This is not the same as Zero Data Retention, and ZavaraAI has not represented that Zero Data Retention applies to this integration. OpenAI's own published documentation states that API data is not used to train its models unless a customer opts in, and that default abuse-monitoring logs may still contain submitted content for a limited period. OpenAI's processing and retention of any data submitted through Ask ZavaraAI is governed by OpenAI's current API data-usage policies, published on OpenAI's own website, which OpenAI may update from time to time.
We do not maintain our own persistent, stored database of assistant conversations. Your conversation is not stored in cookies, localStorage, sessionStorage, or any database of ours — it exists only in your browser's active session state, identified by a randomly generated session id, and is lost when that state is reset, including a full page reload or when your browser session ends. We do not intentionally log the content of your assistant messages in our own server logs; our logs record only generic error codes.
Please do not share sensitive information with the assistant — including health, medical, financial, government-identifier, or other confidential information. Ask ZavaraAI provides general information only. It cannot provide pricing, timelines or guarantees, and it cannot provide legal, medical, financial, or authoritative religious advice. It cannot issue halal determinations or certifications on ZavaraAI's behalf. It cannot submit a contact enquiry or send an email — if you want us to follow up, please use the Contact form or email us directly.
6. How we use your information
We use the information you give us solely to respond to your enquiry, provide the information or support you asked for, and otherwise communicate with you about ZavaraAI and its products. We do not sell, rent, or share your personal information with third parties for their own marketing purposes.
8. Overseas processing
Resend, OpenAI and Vercel may process data on servers located outside Australia, including in the United States. We have not independently verified that every overseas recipient's privacy obligations are equivalent to the Australian Privacy Principles, and we do not claim that they are. We select providers who publish their own security and privacy commitments, and we encourage you to review those directly if this matters to you (OpenAI's and Vercel's own privacy documentation is publicly available).
9. Data retention
We keep the information you send us only for as long as reasonably necessary to respond to your enquiry and keep a record of that correspondence, and we do not currently apply a fixed retention schedule beyond that necessity-based standard. We do not retain Ask ZavaraAI conversations ourselves, in line with §4 above — any retention on OpenAI's side is governed by OpenAI's own policy, described in §4. When information is no longer needed, we take reasonable steps to delete or de-identify it.
10. Data security
We take reasonable steps to protect the information you send us, including encrypted transmission (HTTPS/TLS) and access limited to what's needed to respond to you. No method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.
11. Your rights
We aim to handle your personal information consistently with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth). Depending on where you are located, you may have rights to ask what information we hold about you, request that it be corrected, or request that it be deleted. If you are located outside Australia — for example in the European Economic Area or United Kingdom — you may have additional rights under your local law. To exercise any of these rights, contact us at info@zavaraai.com. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner at oaic.gov.au.
12. Children's privacy
This Website is not directed at children, and we do not knowingly collect personal information from children through it. ZavaraAI's individual products may have their own age requirements and child-safety commitments stated in their own product-specific policies (for example, HalalScanner states a minimum age of 13 in its own terms at /terms).
13. ZavaraAI products
WakeWise, RallyHQ and HalalScanner are ZavaraAI's current products. This policy covers this Website only — it does not cover what happens inside any product once you use it. Where a ZavaraAI product has its own privacy policy, that document applies to that product and takes precedence over this Website policy. HalalScanner's Privacy Policy is published at /privacy.
14. Third-party links
This Website may link to third-party websites. We are not responsible for their privacy practices, and we encourage you to review their own policies.
15. Changes to this policy
We may update this Privacy Policy from time to time. Changes will be posted here with a revised "Last updated" date.
16. Contact us
ZavaraAI
Email: info@zavaraai.com
Website: www.zavaraai.com
Location: Melbourne, Victoria, Australia
ABN: 57 543 957 395
17. Governing law
This Privacy Policy is governed by the laws of Victoria, Australia.