1. Who this notice covers
T24 Global publishes COMMERCE 2050. This notice explains personal-information processing for our website, accounts, platform operations and sales enquiries. A tenant merchant decides how its customer data is used for its own business and is responsible for its customer notices and lawful instructions. Where we process that data to provide the platform, we do so on the tenant's instructions, subject to applicable law and our agreement.
This notice does not replace a merchant's privacy notice or the policies of a payment, messaging or model provider you choose to use. Contact the merchant about its transaction data; contact [email protected] about T24 Global's own processing or to help route a request.
2. Information processed
Depending on the features used, information may include account name and email, password hashes, business and licence details, sales enquiries, order and booking details, delivery addresses, customer contact information, tenant configurations, support correspondence and chat messages. Passwords are hashed for storage; payment card details should be entered only in the payment provider's checkout, not in a chat.
Security and operational records can include IP address, sign-in time, IP-derived country when available, user and tenant identifiers, session identifiers, audit activity and application errors. IP-derived location is approximate. Precise delivery coordinates are processed only if you choose to share them through an enabled location feature; do not share precise location when it is unnecessary.
3. Purposes and lawful processing
We use necessary information to create and authenticate accounts, provide purchased services, process tenant instructions, support orders and workflows, respond to enquiries, send transactional messages, prevent abuse, investigate incidents and meet applicable legal obligations. Optional marketing or other consent-based processing requires the applicable permission and can be withdrawn.
We rely on a lawful basis permitted by the applicable law, including valid consent or a permitted use where relevant. Merely visiting this notice does not give blanket consent to unrelated processing. A tenant must provide the notices and permissions required for its use of customer data and integrations.
4. Chatbots and AI processing
An enabled assistant processes your messages and relevant tenant catalog, cart, order, booking or workflow context needed for your request. The tenant can configure a local or hosted model connection. The platform default uses an authenticated API at api.zetacontracts.com connected to LM Studio; tenants may configure a different provider. Internet transport is used for the hosted gateway even when the underlying model runs locally.
Tenant administrators and authorised support or platform administrators may review conversations and audit records for service delivery, security and troubleshooting. Avoid entering passwords, payment card details, government identifiers or unnecessary medical or other sensitive information in chat. Chat input is not automatically a promise of confidentiality under a professional relationship. A provider's own retention and processing terms apply to information sent to it; using a local model is not by itself a guarantee that no data is logged.
7. Retention and deletion
We retain information for the period needed for the relevant service, tenant instructions, security, dispute resolution or applicable statutory recordkeeping. A subscription ending does not automatically delete every legal or audit record. Backup copies and records under a lawful hold may remain after active records are deleted.
There is no promise of indefinite retention, a universal deletion deadline or recovery of deleted data. Contact [email protected] for a request concerning your account; contact your merchant for its customer data. We will verify authority and explain applicable retention requirements and practical limits. Business users must keep their own independent backups.
8. Security and administrator access
Controls include authentication, role and tenant access checks, encrypted transport where configured, password hashing, encrypted provider secrets and audit records. Authorised administrators can manage their tenant, and platform administrators can perform support and security functions. No security system, internet service or backup is infallible.
We will address security incidents and make notifications required by applicable law. The contractual service and data-loss limitations in our Terms do not waive non-excludable privacy rights or mandatory security responsibilities. Report suspected exposure promptly to [email protected] and do not include credentials in your report.
9. Your choices, requests and grievances
Subject to applicable law and verification of your identity and authority, you may request information about processing, correction, access or deletion, withdraw consent for consent-based processing and raise a grievance. Withdrawal may prevent a feature requiring that information from operating; it does not make earlier lawful processing unlawful.
Send requests to [email protected] with your tenant name, relevant account email and the request. Do not send identity documents unless we request a proportionate secure verification method. We will respond and handle grievances within the periods required by applicable law. You retain any right to approach a competent regulator or other authority under the law in force; our Bengaluru jurisdiction clause does not remove that right.
10. Children and sensitive uses
Platform business accounts are intended for adults aged 18 or older. Tenants must not enable processing of children's data without legally required parent or guardian consent and safeguards. Booking a consultation is not an invitation to submit medical records or obtain emergency care through the platform. Regulated or sensitive uses require an appropriate separate assessment and agreement.
11. Changes and contact
We may update this notice when our processing or applicable law changes. The revised date is shown on this page, and material changes will be notified where required. Indian data-protection obligations apply according to their statutory commencement dates; this notice is not a claim that every provision of a phased law is already in force or that the platform is independently certified.
Publisher: T24 Global. Privacy and grievance contact: [email protected]. Commercial contact: [email protected]. For the contract governing the platform, read our Terms & Conditions.