Legal
Privacy policy
Effective 20 October 2026
Zesteh is operated by Hassan Raza, Karachi, Pakistan ("Zesteh", "we", "us"). This policy explains what information we collect when you use zesteh.com, a store on zesteh.com, the Zesteh dashboard, or the Zesteh WhatsApp number, and what we do with it. Contact: hassanrazamohammadtufail@gmail.com.
What we collect
- Account details: your email address, phone number, and, if you sign in with Google, your name and email from your Google account.
- WhatsApp messages you send to Zesteh: the sign-in codes and order confirmations you send to our WhatsApp number, and the phone number they come from.
- Orders: your name, phone, delivery address, the items you order, delivery date, payment method, and any payment screenshot you upload.
- Seller store content: store name, products, prices, photos, delivery areas and settings that sellers add.
- Instagram content (sellers only, when you connect it): your recent posts, captions and images, read through Meta's official API to draft your catalogue. We store the access token encrypted.
- Technical data: IP address, browser and device type, and logs we need to keep the service secure and working.
How we use it
- To sign you in and keep your account secure.
- To pass your order to the store you ordered from, and to send order confirmations and updates.
- To build and run sellers' stores, including drafting products from Instagram posts with AI. Sellers review every draft before it is published.
- To prevent fraud and abuse, and to fix problems.
- To show stores in collections and search results on zesteh.com.
We do not sell your information, and we do not use it for advertising.
Who can see it
- The stores you order from see the details of your orders with them. They don't see your orders with other stores.
- Zesteh can access data to provide support and keep the service safe.
- Service providers that run parts of Zesteh for us, only for that purpose:
| Provider | What they do for us |
|---|---|
| Supabase | Database and sign-in (servers in Mumbai, India) |
| Cloudflare | Website hosting, security, bot checks (Turnstile) and file storage |
| Oracle Cloud | Application server (Dubai, UAE) |
| Meta (WhatsApp, Instagram) | WhatsApp messaging and, for sellers who connect it, reading Instagram posts |
| Sign in with Google | |
| Resend | Sending sign-in code emails |
| Anthropic | AI that drafts products from Instagram posts and helps with chat ordering |
We may also share information if the law requires it.
How long we keep it
We keep account and store data while your account is open. Order records are kept as long as the seller's store exists and as long as the law requires. Sign-in codes expire after a few minutes and are deleted within a day. When you delete your account, we delete or anonymise your data within 30 days, except where we must keep it by law.
Your choices and rights
- Ask for a copy of your data, or ask us to correct it.
- Ask us to delete your account and data. See Data deletion.
- Sellers can disconnect Instagram at any time, and can export their products and customer list.
Email hassanrazamohammadtufail@gmail.com for any of these. We reply within 30 days.
Cookies
We use essential cookies to keep you signed in and to keep a cart together. We don't use advertising cookies. If we add analytics, they will stay off unless you agree.
Children
Zesteh is not meant for children under 13, and we don't knowingly collect their information.
Security
Data is encrypted in transit. Access to stores' data is restricted by account, and sensitive tokens are stored encrypted. No service is perfectly secure, so please tell us at once if you notice anything wrong.
Changes
If we change this policy, we'll update the date above, and for important changes we'll tell signed-in users before they take effect.