1. Data Controller & Operator Identity
This application and platform (Zero Point Intel, Nuncio) is operated by:
- Operator / Data Controller: Nuno Ribeiro (Sole Proprietor / Independent Professional trading as Zero Point Intel)
- Operating Jurisdiction: Zurich, Switzerland
- Contact Email: contact@zeropointintel.com
- Website: https://zeropointintel.com
- Jurisdiction & Compliance: Swiss Federal Act on Data Protection (revDSG / FADP) and European Union General Data Protection Regulation (GDPR - Regulation (EU) 2016/679).
2. Scope & Roles
- Website Visitors & Subscribers: We act as the Data Controller for your account, subscription billing, and direct correspondence.
- Business Tenants & Merchants using WhatsApp Automation: The Merchant is the Data Controller, and Zero Point Intel acts as a Data Processor under Art. 28 GDPR / Swiss revDSG.
3. Data We Collect and Process
A. Account & Billing Information
- Full name, business trade name, and email address.
- Billing details, tax identification (NIF/VAT/UID), and payment status (processed securely via Stripe; we do not store full credit card numbers).
- Authentication records, login timestamps, and session tokens.
B. WhatsApp Message & Conversation Data (Processor Role)
- WhatsApp User ID (
wa_id), phone number in E.164 format, and profile name. - Inbound and outbound message text, interactive button selections, and timestamps.
- Audio voice notes (temporarily stored for speech-to-text transcription).
- Lead and quote request details (e.g. service location, specifications, quote amount).
4. Third-Party Sub-Processors & Data Residency
We partner exclusively with vetted infrastructure and AI providers adhering to strict European and Swiss data protection standards:
| Sub-Processor | Purpose | Data Residency | Compliance Framework |
|---|---|---|---|
| Meta Platforms Ireland Ltd. | WhatsApp Cloud API & Embedded Signup | European Union (Ireland) | GDPR DPA / Meta Tech Terms |
| Stripe Payments Europe, Ltd. | Payment Processing & Billing | European Union (Ireland) | PCI-DSS Level 1 / GDPR Compliant |
| Google Cloud / Vertex AI | AI Model Inference (Gemini) | European Union (Frankfurt / Belgium) | ISO 27001 / EU Model Clauses |
| Mistral AI SAS | EU-Residency AI Model Inference | European Union (Paris, France) | EU-Native / GDPR Compliant |
| Deepgram, Inc. | Voice Note Audio Transcription | European Union / USA (SOC 2) | Standard Contractual Clauses |
| Neon / Supabase (PostgreSQL) | Multi-Tenant Database with RLS | European Union (Frankfurt, Germany) | AES-256 Encrypted at Rest |
5. Data Subject Rights (GDPR & revDSG)
Under European and Swiss privacy laws, data subjects hold the following rights:
- Right of Access (Art. 15 GDPR / Art. 25 revDSG): Request a copy of personal data held.
- Right to Rectification (Art. 16 GDPR): Correct inaccurate or incomplete records.
- Right to Erasure ("Right to be Forgotten" - Art. 17 GDPR): Request permanent deletion of your data.
- Right to Restriction & Object: Restrict or object to processing.
- Right to Data Portability (Art. 20 GDPR): Receive data in structured JSON format.
6. User Data Deletion Instructions
In compliance with Meta Platform Policies and GDPR, users may request deletion of their data at any time by emailing contact@zeropointintel.com with the subject line "Data Deletion Request". All records and transcripts are purged within 30 days.
7. Contact Information
Data Protection Officer / Controller: Nuno Ribeiro
Operating Jurisdiction: Zurich, Switzerland
Email: contact@zeropointintel.com