Privacy Policy
Badawi for Atmata (“B-Atmata”, “we”, “us”, “our”)
Website: https://www.b-atmata.com
Last updated: October 1, 2026
This Privacy Policy explains how we collect, use, share, and protect personal information when you visit our website, create an account, sign in with Facebook or Google, or use our services, including the WhatsApp Sales Agent and related AI automation tools (together, the “Services”).
By using the Services, you agree to the practices described here.
1. Information We Collect
a) Information you give us
- Account details: name, email address, password (stored hashed), business name, and phone number.
- Business content you upload or configure: product catalogs, pricing rules, sales preferences, and messaging settings.
- Messages and support requests you send us.
b) Information from Facebook and Google Sign-In (OAuth)
You can create an account or sign in using Facebook Login or Google Sign-In. These services are used only to authenticate you and create or access your user account on our website. They are not used to connect, configure, or operate the AI messaging features.
When you use them, we receive only the basic information you authorize:
- From Facebook: your name, email address, and profile picture.
- From Google: your name, email address, profile picture, and a unique Google account identifier.
We do not receive your Facebook or Google password. We do not access your contacts, friends list, emails, files, calendar, posts, or any other data from these accounts, and we do not post or act on your behalf.
c) Information from connected business channels
The WhatsApp Business connection and the AI messaging configuration are set up separately from sign-in. Connecting your WhatsApp Business account is a distinct step in your dashboard, and your Facebook or Google sign-in data is never used for it. Where you connect it, we process the access credentials and account identifiers needed to run the integration, along with the messages exchanged between your business and your customers.
d) Your customers’ data (processed on your behalf)
When the WhatsApp Sales Agent talks with your customers, we process their phone numbers, names or profile names, message content, and conversation metadata (timestamps, delivery status). For this data, you are the data controller and we act as a data processor, handling it only to provide the Services to you.
e) Automatically collected information
IP address, browser type, device information, pages visited, and cookies or similar technologies needed for login, security, and analytics.
2. How We Use Information
We use information to:
- Create and manage your account and authenticate you (including via Facebook or Google sign-in).
- Provide, operate, and improve the Services, including AI-generated replies, lead qualification, scoring, and analytics.
- Hand conversations off to your human team when needed.
- Provide customer support and send service-related notices.
- Detect, prevent, and investigate fraud, abuse, and security incidents.
- Comply with legal obligations and enforce our Terms of Service.
We do not sell personal information.
Information received through Facebook or Google Sign-In is used only to identify you, create and secure your account, and communicate with you about the Services. We do not use it for advertising, we do not sell or share it with data brokers, and we do not use it to train AI models.
3. AI Processing
The Services use artificial intelligence models to understand and generate messages. Conversation content may be sent to third-party AI model providers solely to produce responses and analytics for your account. We do not permit these providers to use your data to train their models where our agreements and their settings allow us to prevent it. AI replies can occasionally be inaccurate, so businesses should review important conversations.
5. Data Retention
We keep personal information only as long as needed to provide the Services and for legitimate legal or business purposes. Account data is kept while your account is active. Conversation data is kept for the period you configure or, by default, 12 months, and then deleted or anonymized. After you request deletion, we remove or anonymize your data within 30 days, except where the law requires us to keep it longer.
6. Your Rights and Choices
Depending on where you live, you may have the right to access, correct, delete, export, or restrict the use of your personal information, to object to processing, and to withdraw consent at any time. To exercise these rights, email us at ammar@b-atmata.com. We will respond within a reasonable time and in line with applicable law.
7. Deleting Your Data (Facebook and Google Sign-In)
To request deletion of your account and the data we hold about you, including data received through Facebook or Google Sign-In, email us at ammar@b-atmata.com with the subject “Delete my data”. Please send the request from the email address linked to your account, or include the email address or name used to sign in, so we can verify and locate your account.
We will delete your data within 30 days of verifying your request and confirm by email once it is complete.
You can also revoke our access to your Facebook or Google account at any time, without deleting your account:
- Facebook: Settings & Privacy > Settings > Apps and Websites > remove B-Atmata.
- Google: go to myaccount.google.com/permissions and remove B-Atmata.
After you revoke access, you can still request deletion of your data using the email steps above.
8. Customer Messages and Consent
If you are a business using the WhatsApp Sales Agent, you are responsible for having a lawful basis, including any required consent or opt-in, to message your customers, and for complying with the WhatsApp Business and Meta Commerce policies. If you are a customer who chatted with a business that uses our Services and want your data accessed or deleted, please contact that business directly. You may also email us and we will help route the request.
9. Security
We use reasonable technical and organizational measures to protect your information, including encryption in transit, access controls, and hashed passwords. No system is completely secure, so we cannot guarantee absolute security. Please use a strong, unique password and keep your credentials confidential.
10. International Data Transfers
Your information may be processed in countries other than your own, including where our service providers operate. Where required, we use appropriate safeguards for such transfers.
11. Children’s Privacy
The Services are intended for businesses and are not directed to anyone under 18. We do not knowingly collect personal information from children. If you believe a child has provided us data, contact us and we will delete it.
13. Third-Party Links and Services
Our site may link to third-party sites or services. We are not responsible for their privacy practices, so please review their policies.
14. Google API Services Disclosure
B-Atmata’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
15. Changes to This Policy
We may update this policy from time to time. We will post the new version here with a new “Last updated” date and, for material changes, notify you by email or through the Services.
16. Contact Us
Badawi for Atmata (B-Atmata)
Email: ammar@b-atmata.com
Website: https://www.b-atmata.com