Privacy Policy
At NairoChat (“we,” “our,” or “us”), protecting the confidentiality and integrity of consumer and merchant data is our foundational commitment. This Privacy Policy details how we access, process, store, and safeguard data across our conversational AI sales infrastructure.
01. Introduction & Scope
NairoChat provides autonomous conversational AI sales software for merchants selling across Facebook Messenger, Instagram Direct, and WhatsApp Business API. By installing our applications, integrating your social media business accounts, or interacting with a merchant running NairoChat, you consent to the data collection and operational practices described herein.
NairoChat acts as a Data Processor on behalf of merchants who use our platform to manage customer conversations and book orders, and as a Data Controller regarding merchant account credentials and billing records.
02. Information We Collect
A. Merchant Account Information
When merchants sign up, we collect full name, business email address, phone number, store name, billing details, and login authentication tokens.
B. Social Channels & Meta Platform Data
When channels are connected via Meta OAuth: Facebook Page IDs, Instagram Business Account IDs, WhatsApp Business Phone Numbers, and incoming message payloads required to process conversational sales.
C. End-Consumer Transaction Data
When consumers converse with an agent to place an order: delivery recipient name, shipping address, contact phone number, items ordered, size/color variant choices, and Cash on Delivery (COD) amount.
03. How We Use Information
- Autonomous Natural Language Processing: Parse customer inquiries regarding catalog stock, sizing, pricing, and order status in Bangla, English, and Banglish.
- Cash on Delivery (COD) Booking: Confirm customer shipping addresses and phone numbers to create verified sales orders.
- Automated Courier Dispatch: Forward shipping details directly to merchant courier APIs (such as Pathao and Steadfast) for consignment generation.
- Human Agent Handoff: Allow human support staff to view conversation history and collaborate in real-time when an escalation is triggered.
04. Meta Platform & Social Channel Data
NairoChat complies with the Meta Platform Terms and Developer Policies. In particular:
- We only request Facebook and Instagram permissions essential to the functioning of our AI sales agent (e.g.,
pages_messaging,instagram_manage_messages,pages_show_list). - We do not sell, rent, or monetize any Meta user data or customer conversation contents to data brokers or advertising networks.
- We do not use customer conversation content for independent advertising targeting.
- All access tokens are stored in encrypted form and used solely to route incoming webhooks and dispatch merchant-authorized replies.
05. Data Storage, Security & Isolation
We implement multi-layered physical and software security measures:
End-to-End Encryption
Data in transit is encrypted using TLS 1.3. Sensitive database columns and API tokens are encrypted at rest with AES-256.
Tenant Isolation
Strict database row-level security prevents one merchant from accessing or querying any other merchant’s chats or orders.
06. Third-Party Service Providers
We share data with third parties solely to execute core platform operations:
- Meta Platforms, Inc.: To receive webhooks and dispatch chat responses via Facebook Messenger, Instagram Direct, and WhatsApp Cloud APIs.
- Courier Partners (Pathao, Steadfast): Consignment order details (recipient name, address, phone number, COD amount) are shared only when the customer confirms an order.
- Infrastructure Providers: Encrypted hosting and cloud infrastructure located in secure, SOC 2 compliant data centers.
07. Data Retention
We retain conversation records and order transactions for as long as the merchant’s account is active to facilitate order management, customer service records, and accounting audits. Upon merchant cancellation or upon receipt of a valid consumer deletion request, records are securely expunged within 30 days.
08. Your Privacy Rights
Regardless of your location, you have the right to:
- Request a copy of the personal data we hold about you.
- Request rectification of incomplete or inaccurate data.
- Request the complete deletion of your personal data.
- Withdraw consent for automated message processing at any time.
09. User Data Deletion Instructions
Required by Meta Platform Policy & GDPRAccording to the Facebook Platform rules, users have the right to request deletion of their activities and personal data associated with NairoChat. If you wish to delete your data from our systems, you can do so through either of the following methods:
Method 1: Via Facebook Account Settings
- Go to your Facebook Profile’s Settings & Privacy > Settings.
- Select Apps and Websites from the left sidebar.
- Find NairoChat in the list of connected apps.
- Click Remove.
- Check the option to delete your posts, videos, or events, and confirm. This triggers an automated callback to our servers to expunge your linked credentials.
Method 2: Direct Deletion Request via Email
Send an email to privacy@nairochat.com or support@nairochat.com with the subject line: Data Deletion Request - [Your Name / Page Name].
Our engineering team will verify your identity, purge your records within 48 hours, and email you a confirmation notice.
10. Contact Us
If you have questions, feedback, or concerns regarding this Privacy Policy or our data handling practices, please contact our Data Protection Officer: