Privacy Policy - munimjee.ai

1. Who We Are

munimjee.ai is an AI-powered conversational commerce platform built for sellers in India using Instagram and WhatsApp. We provide tools that handle customer inquiries, negotiate prices, verify payments, and manage order fulfilment on behalf of our sellers. For any privacy-related concerns contact us at tech@munimjee.in

2. What We Access on Instagram

When you connect your Instagram Business account to munimjee.ai, you grant us permission to:

• Read incoming Direct Messages sent to your Instagram Business account by your customers
• Send replies to customers on your behalf through your Instagram account
• Receive comments on your connected account's media and send configured public acknowledgements or private replies
• Access your Instagram Business account profile information (username, account ID)
• Receive real-time message delivery and read receipt notifications

We access your Instagram messages exclusively through Meta's official Instagram Messaging API using permissions you explicitly grant via OAuth. We do not use any unofficial methods, scraping, or automation that violates Meta's platform policies.

We only read and respond to messages sent to your account. We never access the personal Instagram accounts of your customers beyond what is included in their interactions with your connected business account.

2a. WhatsApp Business Services

When a seller connects a WhatsApp business account, we use Meta's official WhatsApp Business Platform APIs to provide the enabled messaging and template features. Depending on those features, we process:

• Business account and phone-number identifiers, display numbers and authorisation tokens.
• Customer phone numbers and profile names supplied by WhatsApp, message text, message identifiers, timestamps and delivery or read status.
• Media metadata and captions, quoted-message references, and referral information included in incoming webhook events.
• Message template names, text, languages, categories, sample variable values and Meta review status.
• Consent and opt-out records, configured reply rules, and product links used to answer enquiries.

We use this information to display conversations in the seller's inbox, send manual or configured automated replies, manage templates, and provide relevant order updates. Free-form replies are limited to the customer service window. Template sending requires an approved supported template and the relevant customer consent.

If a customer shares an Instagram post or reel URL through WhatsApp, we can match its identifier to a product linked by the seller. A subsequent message can use recent or quoted-message context to refer to that product. Sellers can resolve unmatched links in their dashboard. This matching uses the shared URL and catalogue records; it does not analyse the video to identify a product.

Current WhatsApp catalogue replies use seller-provided product data and configured rules. We do not send WhatsApp conversation content to an AI provider for response generation in this flow. Sellers should use fictional values when providing template examples for Meta's review.

3. Information We Collect

• Seller account information: Your account email, business details, connected Instagram and WhatsApp account identifiers, and authorisation tokens
• Customer message content: Customer messages and comments, contact identifiers and context needed to display conversations, provide replies and manage enquiries
• Order and transaction data: Product details, agreed prices, payment screenshots, transaction reference numbers
• Delivery information: Shipping details, tracking IDs, parcel photos
• Usage data: Logs of bot activity and platform analytics

4. How We Use Your Information

• Display customer conversations and send manual or configured automated replies on your behalf through connected channels
• Verify UPI payment screenshots to protect you from fraud
• Create and manage orders in your delivery dashboard
• Send relevant order notifications through enabled channels, subject to their messaging rules and the required consent
• Build a personalised communication style profile that makes the bot sound like you
• Provide analytics and insights about your orders and bot performance

We do not use your messages or customer data for advertising. We do not sell your data to any third party.

5. How We Share Your Information

We do not sell, rent, or trade your personal information. We share data only in these limited circumstances:

• AI providers: Message content from enabled Instagram AI features is processed by the configured provider, Anthropic (Claude) or Sarvam AI, to generate responses. WhatsApp catalogue replies described above do not use these AI providers.
• Meta: Replies, business account identifiers and message template content, including sample values, are sent to Meta to operate the connected Instagram and WhatsApp services and review templates.
• Network infrastructure: Cloudflare processes traffic for the dashboard and webhook endpoint.
• Cloud infrastructure: We use AWS hosted in Asia Pacific (Mumbai) region
• Shipping partners: Order details shared with courier APIs solely to create shipments
• Legal requirements: We may disclose information if required by Indian law

6. Data Retention

• Your Instagram access token is immediately revoked and deleted upon disconnection
• Conversation history is deleted within 30 days of account closure
• Order records retained for 90 days for dispute resolution, then permanently deleted
• You may request immediate deletion by emailing tech@munimjee.in

Disconnecting WhatsApp removes its saved authorisation token from the integration and disables sending in Munimjee. It does not automatically delete conversation history, orders or consent records, or revoke a token issued by Meta. Deletion of stored data is handled separately through our support process.

7. Human Escalation

Customers using the Instagram assistant can request a human; the assistant can pause and alert the seller for manual handling. Sellers can also reply from the WhatsApp inbox or disable WhatsApp automation. WhatsApp customers can send STOP or UNSUBSCRIBE to block further sends through our WhatsApp integration. Opting out does not delete historical records.

8. Your Rights

You have the right to:

• Access the data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and all associated data
• Disconnect your connected Instagram or WhatsApp integration
• Opt out of persona building by not uploading your DM history

To exercise these rights contact: tech@munimjee.in

For a deletion request, identify your seller account, or the seller and customer account or phone number involved. We may need to verify your identity before acting. Do not send passwords, API tokens or one-time codes. See our data deletion instructions.

9. Security

We implement industry-standard security measures including encrypted data transmission (TLS), hashed credential storage, and access controls. WhatsApp authorisation tokens are encrypted in our application storage. Access to connected-account credentials is restricted to operating the integrations.

10. Children's Privacy

munimjee.ai is intended for business owners and is not directed at individuals under the age of 18. We do not knowingly collect data from minors.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or in-app notification.

Contact Us

For any questions about this Privacy Policy:

Email: tech@munimjee.in
munimjee.ai, Bengaluru, Karnataka, India