Last updated: 14 June 2026 · Effective: 14 June 2026
This Privacy Policy explains how Frasassi (Pvt.) Ltd. ("Frasassi", "we", "us") handles personal data when you visit frasassi.co, contact us, or use any of our products and services. We act as the data controller for the personal data described here, except where we process data on behalf of a business customer, in which case we act as a data processor and that customer is the controller.
1. Who we are
Frasassi (Pvt.) Ltd. is a private limited company registered in Pakistan.
- Registered office: 6&7, Wasil Plaza, Blue Area, Islamabad, Pakistan
- Email: info@frasassi.co
- Phone: +92 339 0100715
2. What we collect
We only collect what we need to provide and improve our services. Depending on how you interact with us, this may include:
| Category | Examples |
|---|---|
| Identity & contact | Name, email address, phone number, company name |
| Account data | Username, hashed password, plan tier, account settings (for product accounts) |
| Enquiry data | Project briefs, messages you send us through forms or the Zaviqo assistant |
| Content & uploads | Files, documents, field boundaries, business records you choose to upload to a product |
| Location data | Approximate or precise location when you use Mapzari's mapping features (only with your permission) |
| Technical data | IP address, browser type, device information, pages viewed, timestamps |
| Communications | Emails and messages exchanged with our team |
We do not intentionally collect special-category data (such as health, religion, or biometric data). Please don't submit such data through our forms unless it is strictly necessary for a service you've engaged us for.
3. How we use your data
- To respond to your enquiries and provide written project plans and quotes.
- To create and operate your product account and deliver the features you use.
- To provide AI-assisted answers through the Zaviqo assistant and our products' AI features.
- To process payments and manage subscriptions (when billing is enabled).
- To secure our systems — rate limiting, spam filtering, fraud prevention and abuse detection.
- To improve our products and understand which features are useful.
- To comply with legal, tax and regulatory obligations.
We do not sell your personal data, and we do not use your private uploads or account content to train third-party AI models.
4. Legal bases
Where data-protection law (such as the EU/UK GDPR) applies, we rely on these legal bases: performance of a contract (to deliver services you request), legitimate interests (to secure and improve our services), consent (for optional cookies and precise location), and legal obligation (for tax and compliance). You can withdraw consent at any time.
5. Product-specific data
Zaviqo (lead engine & assistant)
Captures leads and messages submitted through forms and the chat assistant. Conversations are processed by our AI provider to generate replies. Operators using Zaviqo are the controllers of the leads they collect.
Mapzari (GIS & agronomy)
Processes field boundaries and location coordinates you provide to retrieve satellite imagery (Copernicus / Sentinel-2), weather data and land-use context. Satellite and weather providers receive only coordinates, never your identity.
Qarzio (remote financing portal)
Handles financing applications and supporting documents. Uploaded documents are encrypted at rest using AES-256-GCM. Each operator only sees applications submitted to their own portal.
Marqlo (marketing analytics)
Stores the campaign and performance data you enter to generate analytics. This data is scoped to your account.
Sitezari (web builds)
A delivery service; any personal data is handled under the relevant project agreement.
6. Who we share data with
We share data only with service providers who help us run Frasassi, under contracts that require them to protect it:
- Hosting & infrastructure — our cloud hosting provider, where our application and databases run.
- AI processing — Anthropic (Claude), to generate assistant and product AI responses.
- Mapping & environmental data — Copernicus Data Space (Sentinel-2 satellite), OpenStreetMap / Nominatim (geocoding) and Open-Meteo (weather). These receive coordinates only.
- Payments — our payment processors (e.g. Paddle and Safepay) when billing is enabled. They handle card and payment details directly; we don't store full card numbers.
- Professional & legal — advisors, auditors or authorities where required by law.
7. International transfers
We operate globally, so your data may be processed in countries outside your own, including outside Pakistan and the EU/EEA. Where required, we use appropriate safeguards (such as standard contractual clauses) with our providers.
8. How long we keep data
We keep personal data only as long as needed for the purposes above: enquiry data for up to 24 months after last contact; account and product data for as long as your account is active and for a reasonable period afterwards; and financial records for as long as tax and accounting law requires. You can ask us to delete your data sooner (see your rights).
9. How we protect data
Security is built in by default. Measures include: HTTPS/TLS everywhere, HSTS, a strict Content-Security-Policy, passwords hashed with bcrypt, session cookies that are httpOnly and SameSite-strict, CSRF protections, rate limiting, per-account data isolation, and AES-256-GCM encryption of sensitive uploaded documents. No system is perfectly secure, but we work continuously to protect your data.
10. Your rights
Subject to applicable law, you may have the right to: access your data; correct it; delete it; restrict or object to processing; receive a copy in a portable format; and withdraw consent. To exercise any right, email info@frasassi.co and we'll respond within the timeframe the law requires (and within 30 days where no specific period applies). If you're in the EU/UK you may also complain to your local data-protection authority.
11. Cookies
We use a small number of cookies — essential ones to keep you signed in and secure, and optional ones only with your consent. See our Cookie Notice for details.
12. Children
Our services are intended for businesses and adults. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us data, contact us and we will delete it.
13. Changes to this policy
We may update this policy as our services evolve. We'll change the "Last updated" date above and, for material changes, give prominent notice. Continued use after an update means you accept the revised policy.
14. Contact us
Questions, requests, or concerns about privacy? Reach us at info@frasassi.co or by post at Frasassi (Pvt.) Ltd., 6&7, Wasil Plaza, Blue Area, Islamabad, Pakistan.