- Headquartered in Milton, ON, Canada
- SOC 2 Type II readiness in progress
- GDPR · CCPA · PIPEDA compliant
- +1 (905)-798-6999
- info@zemora.ai
At Zemora.ai, we handle communications data on behalf of our customers — calls, messages, emails, and the contacts behind them. We treat that responsibility seriously. This page summarizes the security practices that protect your data and the data of the people you communicate with.
Data is encrypted in transit (TLS 1.3) and at rest (AES-256). Nothing sensitive travels or sits unencrypted.
API keys, OAuth tokens, and credentials are stored in a managed secrets vault — never in our database.
Only engineers who need access to a customer's data have it, scoped per-customer. Every access is logged.
MFA is required on all internal systems and administrative accounts.
Customer data is stored in North American cloud regions by default. EU residency available on request.
You control how long conversation data is kept. Deletion requests are honored permanently within 30 days.
We are a Canadian company headquartered in Ontario, and we align our practices with the following frameworks and regulations:
For products that connect to your Google or Microsoft account (such as Zemora Email), we follow strict Limited Use principles: data is used only to deliver the features you've enabled, is never sold, is never used for advertising, and is never used to train general-purpose AI models.
Read more: Full detail is in our Google API Disclosure and Privacy Policy.
We welcome reports from security researchers. If you believe you've found a vulnerability in our systems, please email security@zemora.ai with details and steps to reproduce. We will acknowledge your report, investigate promptly, and keep you updated. Please give us a reasonable opportunity to address the issue before any public disclosure.
To request a Data Processing Addendum (DPA), a list of sub-processors, or to exercise your data rights, email legal@zemora.ai or privacy@zemora.ai. We typically respond within 24-48 hours.
Questions about our security practices? We're here to help.
We typically respond within 24-48 hours.
