Privacy Policy
Last Updated: January 2025
1. Introduction
Welcome to AudienceJet ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our WhatsApp Business automation platform and related services.
By using AudienceJet, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our services.
This policy applies to:
- Business Users: Restaurants, cafes, cloud kitchens, and other food businesses who use our platform to automate their WhatsApp ordering.
- End Users (Customers): Individuals who interact with businesses through WhatsApp chatbots powered by AudienceJet.
2. Who We Are
Company Name: AudienceJet
Registered Address:
Compass Building, Al Shohada Road,
AL Hamra Industrial Zone-FZ,
Ras Al Khaimah, United Arab Emirates
Contact Email: privacy@audiencejet.com
AudienceJet is an official Meta Business Partner utilizing the WhatsApp Business API to provide automated ordering and customer engagement solutions for food businesses in the GCC region and beyond.
3. Data We Collect
3.1 Information from Business Users
When you register as a business on our platform, we collect:
- Account Information: Business name, contact name, email address, phone number, password (encrypted)
- Business Details: Business type, address, operating hours, logo, business registration documents
- WhatsApp Business Account: WhatsApp Business Account ID (WABA), phone number ID, access tokens (securely stored)
- Payment Information: Billing address, payment method details (processed by Stripe - we do not store full card numbers)
- Product Catalog: Menu items, product names, descriptions, prices, images, categories
- Payment Gateway Credentials: MyFatoorah or Tap API credentials for processing customer payments
3.2 Information from End Users (Customers)
When customers interact with businesses through our WhatsApp chatbots, we collect:
- Contact Information: WhatsApp phone number, name (as provided in WhatsApp profile or during chat)
- Communication Data: Messages exchanged with the chatbot, language preferences
- Order Information: Items ordered, delivery address, special instructions, order history
- Payment Information: Transaction IDs, payment status (actual payment details are processed by MyFatoorah/Tap)
- Device Information: Device type, operating system (as provided by WhatsApp API)
3.3 Automatically Collected Information
- Log Data: IP addresses, browser type, pages visited, time and date of visits
- Analytics: Usage patterns, feature engagement, error logs
- Cookies: Session cookies, preference cookies (see Section 9)
4. How We Use Your Data
4.1 For Business Users
- To create and manage your AudienceJet account
- To connect your WhatsApp Business Account through Meta's Embedded Signup
- To create and manage message templates and chatbot flows
- To sync and display your product catalog on WhatsApp
- To process orders and facilitate payments
- To send you service notifications, updates, and support communications
- To bill your account and process subscription payments
- To provide customer support and respond to inquiries
- To improve our platform and develop new features
- To comply with legal obligations
4.2 For End Users (Customers)
- To facilitate automated ordering through WhatsApp chatbots
- To process and fulfill food orders
- To send order confirmations, updates, and delivery notifications
- To enable communication between customers and businesses
- To process payments through integrated payment gateways
- To maintain order history for reordering convenience
- To send promotional messages (only with consent, where applicable)
4.3 Legal Basis for Processing (GDPR)
We process personal data based on:
- Contract Performance: Processing necessary to fulfill our service agreement
- Legitimate Interests: Improving services, preventing fraud, ensuring security
- Consent: Marketing communications, optional features
- Legal Obligation: Compliance with applicable laws and regulations
5. WhatsApp & Meta Permissions
AudienceJet uses Meta's official WhatsApp Business API. During onboarding, business users grant the following permissions through Meta's Embedded Signup:
Important Notes:
- You can revoke these permissions at any time through your Meta Business Suite
- Revoking permissions will disable the associated AudienceJet features
- We only access data necessary to provide our services
- We never sell your WhatsApp data to third parties
- All API access complies with Meta's Platform Terms and Policies
6. Data Sharing & Disclosure
6.1 Service Providers
We share data with trusted third-party service providers who assist us in operating our platform:
- Meta Platforms, Inc.: WhatsApp Business API for messaging services
- Stripe, Inc.: Processing subscription payments from businesses
- MyFatoorah / Tap Payments: Processing customer payments (as configured by businesses)
- Cloud Hosting Providers: Secure data storage and server infrastructure
- Analytics Providers: Understanding platform usage and performance
6.2 Business to Customer Data
End user (customer) data is shared with the respective business they are ordering from. Each business is responsible for their own use of customer data in compliance with applicable laws.
6.3 Legal Requirements
We may disclose information if required by law, regulation, legal process, or governmental request, including:
- Court orders or subpoenas
- UAE regulatory authorities
- Law enforcement agencies (when legally obligated)
6.4 Business Transfers
If AudienceJet is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify affected users of any change in ownership or control.
6.5 We Do NOT
- Sell personal data to third parties
- Share data for third-party advertising purposes
- Use WhatsApp data for purposes other than providing our services
7. Data Storage & Security
7.1 Data Location
Your data is stored on secure servers. We may use cloud service providers with data centers in various locations. By using our services, you consent to the transfer and storage of your data in these locations.
7.2 Security Measures
We implement industry-standard security measures including:
- Encryption: All data is encrypted in transit (TLS 1.2+) and at rest (AES-256)
- Access Controls: Role-based access with multi-factor authentication
- Regular Audits: Security assessments and vulnerability testing
- Secure APIs: OAuth 2.0 authentication for all API communications
- Data Backup: Regular encrypted backups with disaster recovery procedures
7.3 Data Retention
- Business Account Data: Retained while your account is active and for 2 years after closure
- Order Data: Retained for 7 years for tax and legal compliance
- Message Logs: Retained for 90 days for support purposes
- Analytics Data: Aggregated and anonymized after 24 months
7.4 Data Breach Procedures
In the event of a data breach that affects your personal information, we will:
- Notify affected users within 72 hours
- Report to relevant supervisory authorities as required by law
- Take immediate steps to mitigate any damage
- Provide information about steps you can take to protect yourself
8. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
8.1 For All Users
- Right to Access: Request a copy of your personal data
- Right to Rectification: Correct inaccurate or incomplete data
- Right to Erasure: Request deletion of your data ("right to be forgotten")
- Right to Portability: Receive your data in a structured, machine-readable format
- Right to Object: Object to processing based on legitimate interests
- Right to Withdraw Consent: Withdraw consent at any time for consent-based processing
8.2 For Business Users
- Access and export your account data from the dashboard
- Update business information at any time
- Delete your account (subject to outstanding balances)
- Revoke Meta permissions through Meta Business Suite
8.3 For End Users (Customers)
- Request data deletion by contacting the business or us directly
- Opt-out of promotional messages
- Block the business's WhatsApp number to stop communications
8.4 Exercising Your Rights
To exercise any of these rights, please contact us at:
Email: privacy@audiencejet.com
We will respond to your request within 30 days. We may need to verify your identity before processing your request.
10. Children's Privacy
AudienceJet is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected data from a child, please contact us immediately at privacy@audiencejet.com.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by:
- Posting the new policy on this page with an updated "Last Updated" date
- Sending an email notification to business users
- Displaying a prominent notice in the dashboard
Your continued use of our services after changes constitutes acceptance of the updated policy.
12. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
AudienceJet
Compass Building, Al Shohada Road,
AL Hamra Industrial Zone-FZ,
Ras Al Khaimah, United Arab Emirates
Email: privacy@audiencejet.com
General Inquiries: support@audiencejet.com
Complaints
If you believe we have not addressed your privacy concerns satisfactorily, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.