Privacy Policy

We collect what we need to run the service:

• Account data: your name, email address and verified WhatsApp number, and basic profile details from a sign-in provider if you sign in with one.
• Billing data: your plan, balance and usage, and the payment records our payment processor sends us. We do not receive your full card number.
• Business content: what you add about your business, such as products, saved replies and automation settings.
• Customer conversations: messages between your business and its end customers on connected channels, and the contact details tied to them.
• Channel access: the tokens that let us send and receive messages on the channels you connect.
• Requests to us: what you send when you contact us.
• Technical and usage data: IP address, device and browser details, logs, and how you use the website and the product, including recordings of sessions. We collect some of it with cookies and similar tools.

When you connect a WhatsApp, Instagram or Facebook account, you let us access data through Meta's APIs on your behalf, such as the account profile, the messages your end customers send, and the name and id Meta gives for them.

We use this data to provide the messaging features you turn on, and keep it as section 6 describes. We do not sell it, use it for advertising, or use it to train AI models. We share it only with service providers that help run the service, or where the law requires. Disconnecting a channel deletes our access token for it.

The conversations and contacts that come through your business are yours. We process them on your behalf and on your instructions to run the service, apart from the security, legal and record-keeping uses in this policy. We do not sell them or use them to train shared or third-party AI models. Each business's data is kept separate.

You are responsible for having the right to message your end customers. If we learn of a personal-data breach affecting your customer data, we will tell you without undue delay.

• Run the service: deliver messages, draft and send replies, run automations and show reports.
• AI features: write or send replies from your business data when you turn them on. Not every automated reply is reviewed before it is sent.
• Keep it safe: prevent abuse and fraud, fix problems and keep the service running.
• Improve it: understand how the website and the product are used.
• Talk to you: answer requests, follow up on sales requests and send service notices.
• Advertising: measure our own ads, unless you turn this off.
• Legal: meet our legal duties and enforce our Terms.

We do not sell personal data. We share data only with the channels you connect and with service providers that help us run the service, such as hosting, email and message delivery, analytics, advertising measurement, AI models and payments. Some of them work in other countries, including the United States, so your data may be processed outside the country where you live. We may also disclose data when the law requires it or to protect people and the service.

We keep data while it is needed to provide and protect the service, and as long as the law requires.

• Deleting in the app: you can delete a contact, a business or your whole account. The data is then removed from the product; a deleted contact first stays in Trash for a short time.
• Records we keep: after a deletion we may keep a copy of the data and related records on our side, as the law and our legitimate needs allow, for example for billing, security, disputes, preventing misuse of free offers, and understanding and improving our business. These records are not shown in the product.
• Ended plans and inactive businesses: we may delete a business after its plan ends or after a long period without use. We tell the owner in the app first.
• Channels: disconnecting a channel deletes our access token for it. Its conversation history stays until you delete it.
• Service providers: data a provider has already received follows that provider's own rules.

To delete, use the app, remove Otobiz in your Facebook or Instagram settings, or email support@otobiz.ai from your account's address with the subject "Data deletion request". End customers should ask the business they messaged; they can also email us and we will pass the request on. The steps are on our Data Deletion page.

Each business's data is kept separate, data is encrypted in transit, and channel access tokens are encrypted when stored. No system is fully secure, and we will tell you about a serious incident as the law requires.

Depending on where you live, you may have the right to access, correct, export or delete your personal data, to object to or limit some uses, to withdraw consent, and to complain to a data protection authority. Email support@otobiz.ai to use them. End customers should ask the business they messaged first; we will help that business answer.

Privacy choices, in the website footer and in product Settings, turn analytics cookies and advertising measurement off or back on. Both are on until you turn them off, and a Global Privacy Control signal keeps them off. Our servers still record product events to run and improve the service.

Otobiz is a business tool and is not meant for children. We do not knowingly collect children's personal data.

We may update this policy. When we make a material change, we will update the date above and tell you where appropriate.

Questions about this policy or your data? Email us at support@otobiz.ai.