Privacy Policy — Unlockify AI

Official Customer Data & AI Privacy Framework

Unlockify AI ("we", "our", or "us") provides a multi-tenant conversational AI sales and customer service platform integrating Meta WhatsApp Cloud API and Google Gemini multimodal intelligence. This Privacy Policy explains how we collect, process, store, and protect information when you or your clients use our services.

1. Information We Collect

Business Organization Account Information: Organization name, administrator email, authenticated user credentials, and tenant configuration settings.
WhatsApp Business Account (WABA) Data: WABA ID, Phone Number ID, display phone number, verified business name, and OAuth authorization tokens.
Customer Messaging & Conversational Data: Inbound and outbound WhatsApp messages, timestamps, customer phone numbers, customer names, interaction history, and lead qualification attributes.
Multimodal Media Data: Voice notes, audio clips, images, PDF documents, and video attachments sent during customer service interactions.
AI Usage & Analytics: Token consumption, response latency, prompt metadata, and conversation summaries.

2. How We Process and Use Information

To provide automated conversational AI support and human-agent live chat.
To generate contextual sales and support replies via Google Gemini Gateway under strict tenant isolation.
To transcribe customer voice notes and analyze document/image attachments for lead routing.
To enforce WhatsApp 24-hour customer service window policies and template message delivery.
To record audit trails for security and administrative compliance.

3. Token Security and Encryption Standards

All Meta WhatsApp OAuth access tokens and sensitive credentials are encrypted using industry-standard AES-256-GCM authenticated encryption before database persistence. Decryption keys are stored strictly server-side in secure environment configurations and are never exposed to browser frontends, client-side scripts, or logs.

4. Third-Party Service Integrations

Meta Platforms, Inc. (WhatsApp Business Platform / Cloud API): Used to deliver and receive WhatsApp messages and manage WABA webhook subscriptions.
Google Cloud (Gemini Multimodal AI): Used strictly server-side to generate natural language understanding and multimodal reasoning. Customer data is processed confidentially.

5. Data Retention and Deletion

Message transcripts and CRM customer records are retained according to the tenant organization's active subscription. Multimodal media files are automatically purged after the configured retention window (default: 72 hours). Users and businesses may request data deletion at any time by visiting our Data Deletion Instructions.

6. Contact Us