Privacy Policy

1. Introduction

Welcome to AutoReplyZ.com ("we", "our", or "us"). We provide a no-code SaaS platform designed to automate customer support and sales conversations over Meta WhatsApp Cloud API and Facebook Messenger. Respecting the privacy and security of your business data and your customers message content is at the core of our technical architecture.

2. Information We Collect

To provide instant chatbot automation and team inbox services, we collect:

• Account & Profile Data: Business name, owner name, email address, password hash, phone number, and billing currency.
• Meta API Integration Credentials: WhatsApp Business Account ID (WABA ID), Phone Number ID, Access Tokens, and Webhook verification tokens.
• Messaging & Customer Conversations: Inbound and outbound messages, customer phone numbers, contact names, message timestamps, and delivery statuses.
• Media Files & Attachments: Images, videos, audio notes, and documents exchanged during active chats are stored securely in isolated tenant storage.

3. How We Use Your Information

We strictly process collected data for the following operational purposes:

• Executing automated chatbot triggers, visual flows, and keyword matches in real time.
• Routing messages to your support agents in the Unified Team Inbox.
• Managing subscription plans, invoices, and payment gateways safely via Paymob.
• Sending system status updates, security notifications, and critical platform notices.

4. Data Isolation & Meta Cloud API Compliance

Our architecture incorporates strict Multi-Tenancy database isolation (Global Scopes). Your conversation data, FAQs, and contact lists are programmatically segregated and can never be accessed, viewed, or shared with other tenants or unauthorized third parties.

We comply with Meta Platform Terms and Meta WhatsApp Business Messaging Policies. We do NOT sell, rent, or monetize your customer chat data or phone lists to advertisers.

5. Data Retention & Account Deletion Rights

We retain your customer chat records and media files for as long as your account subscription remains active. You reserve the right to request a full wipe of your data or account deletion at any time by contacting our support team.

6. Cookies & Local Session Security

We use secure, HTTP-only session cookies and CSRF tokens strictly for user authentication, maintaining active logins, and storing your bilingual language preference (Arabic or English).