Privacy Policy

1. Introduction

Welcome to AMBER AI ("we", "us", or "our"). We respect your privacy and are committed to protecting your personal data. This Privacy Policy outlines how we collect, process, and safeguard information when you use our WhatsApp Automation and AI Agent platform.

By registering an account and connecting your WhatsApp Business API configurations to AMBER AI, you consent to the data collection and processing methods described herein.

AMBER AI is an independent software service. We are not affiliated with, endorsed by, or sponsored by Meta Platforms, Inc. WhatsApp® is a registered trademark of Meta Platforms, Inc.

2. Information We Collect

To provide our multi-tenant SaaS services, we collect:

• User Profile Data: Name, business name, email, and password hashes.
• WhatsApp Configurations: Meta WhatsApp Business Account tokens, Webhook signing secrets, verified phone numbers, and phone ID settings.
• AI Engine Settings: Prompts, training datasets, FAQs, catalog items, and third-party AI keys (OpenAI, Gemini, Claude, Groq) provided by you.
• Messaging Data: Incoming and outgoing WhatsApp message payloads, including user phone numbers, texts, media, metadata, and message timestamps.

3. Meta Platform Data

As part of our service, AMBER AI integrates with Meta's WhatsApp Business API and Business Management API. In doing so, we may receive Meta Platform Data, which includes:

• WhatsApp user phone numbers and display names of end customers
• Incoming and outgoing WhatsApp message content
• Meta WhatsApp Business Account (WABA) IDs and associated metadata
• Meta Business Manager IDs connected by our business clients
• Media files (images, documents, audio) sent via WhatsApp

Meta Platform Data is processed and stored on servers hosted by Render.com (United States, Singapore, Germany). All data in transit is protected by SSL/TLS encryption. Access tokens are stored in encrypted form using AES-256 encryption at rest.

Our use of Meta Platform Data complies with Meta's Platform Terms and Developer Policies.

4. How Data Is Used & Processed

We process information for the following specific purposes:

• To route and match incoming WhatsApp webhook payloads to your AI rules engine.
• To generate automated replies using the configured AI Models or regex keyword rules.
• To keep live message records so you can audit and take over chats manually in the Dashboard.
• To compile usage and token analytics to calculate your billing quotas.
• To manage and authenticate connections to Meta Business accounts on behalf of our business clients.

5. Third-Party Data Transfer & Security

In order to generate responses, message texts may be sent to third-party AI providers (e.g., OpenAI, Google Gemini, Anthropic, Groq) according to the AI configurations you set up. These transmissions do not contain account passwords. We employ standard database encryption and SSL/TLS transmission channels to keep webhook tokens secure.

We do not sell, trade, or rent user or client data lists to external third parties.

Our infrastructure service provider, Render.com, processes data solely on our behalf for hosting and infrastructure purposes. They are bound by data processing agreements consistent with applicable privacy laws.

6. Data Retention & Deletion

We retain your account data and message logs for as long as your account is active or as needed to provide services. Upon account cancellation:

• Your account credentials and configuration data are deleted within 30 days of account closure.
• Message logs and conversation records are deleted within 90 days.
• Meta Platform Data (including WhatsApp tokens and customer message data) is deleted within 30 days of account closure or upon disconnection of the WhatsApp Business Account, whichever comes first.

To request early deletion of your data, contact us at support@ambrion.in. We will process deletion requests within 14 business days.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Correction: Request correction of inaccurate or incomplete data.
• Right to Deletion: Request deletion of your personal data and Meta Platform Data associated with your account.
• Right to Restrict Processing: Request that we limit how we process your data in certain circumstances.
• Right to Data Portability: Request your data in a machine-readable format.

To exercise any of these rights, contact us at support@ambrion.in.

8. Changes to This Policy

AMBER AI reserves the right to modify this Privacy Policy. We will notify you of material changes by updating the last modified date on this page or via email notifications.

9. Contact Us

If you have any questions about this Privacy Policy, how we handle your data, or to exercise your data rights, please contact us: