Privacy Policy
How we collect, use, and protect your information.
Effective Date: January 1, 2025
Introduction
Munshi AI ("we", "us", "our") operates munshi-theta.vercel.app — a WhatsApp AI automation platform for small and medium businesses. This Privacy Policy explains what data we collect, how we use it, and your rights regarding that data. By using our services, you agree to the practices described here.
Information We Collect
Account Information: When you sign up, we collect your name, email address, and business details.
WhatsApp Data: We process incoming and outgoing WhatsApp messages, customer phone numbers, message timestamps, and conversation history to deliver our service.
Training Data: Website content, PDFs, and text you upload to train your AI bot.
Usage Data: Pages visited, features used, message counts, and performance metrics collected automatically to improve the platform.
Payment Data: Subscription plan and payment reference numbers. We do not store full card details — payments are processed by our payment partner, Paddle.com.
How We Use Your Data
- Service Delivery: To operate your AI bot, process WhatsApp messages, and maintain your knowledge base.
- Account Management: To manage your subscription, billing, and account settings.
- Platform Improvement: To analyze usage patterns and improve features. We never use your customer conversations to train shared AI models.
- Security: To detect fraud, abuse, and unauthorized access.
- Legal Compliance: To comply with applicable laws and regulations in Pakistan and internationally.
Data Sharing & Third Parties
We do not sell your data. We share data only with trusted service providers necessary to operate the platform:
- Meta (WhatsApp Business API): Message delivery and WhatsApp integration.
- Supabase: Secure database storage and authentication infrastructure.
- Groq: AI inference for bot responses. Your data is processed but not stored or used for training by Groq.
- Vercel: Application hosting and delivery.
- Paddle.com: Payment processing and billing, as our Merchant of Record.
Data Security
We implement industry-standard security measures:
- All data transmitted over TLS/HTTPS encryption
- Database access restricted via role-based permissions
- API keys stored as environment variables, never in code
- Regular security reviews and dependency updates
Data Retention
- Conversation history: Retained for the duration of your subscription
- Account data: Retained until account deletion is requested
- Billing records: Retained for 7 years as required by Pakistani tax law
When you delete your account, all personal data is permanently deleted within 30 days, except where legally required.
Your Rights
- Access: Request a copy of your personal data
- Correction: Request correction of inaccurate data
- Deletion: Request deletion of your account and data
- Portability: Request your data in machine-readable format
- Objection: Object to certain processing activities
Contact Us
For privacy questions or data requests, contact our team: