Privacy Policy

OmniBiz AI ("OmniBiz", "we", "us", or "our"), operated by Noor Kin, provides an omnichannel AI customer-chat platform that lets businesses ("Merchants") connect their Facebook Messenger, Instagram, WhatsApp, TikTok, and website chat channels and automatically respond to customer messages using AI grounded in the Merchant's own product catalog and business information. This Privacy Policy explains what data we collect, how we use and share it, and the choices available to you.

1. Who this policy covers

Our service involves two groups of people, and we handle their data differently:

• Merchants — the business users who create an OmniBiz account, connect their channels, and use the dashboard.
• End-customers — the people who message a Merchant on a connected channel. We process their messages on behalf of the Merchant so the AI can reply. The Merchant is the primary controller of that conversation data.

2. Information we collect

2.1 Merchant account data

• Name, email address, and a securely hashed password.
• Business details you provide (business name, type, description, and settings).
• Your product catalog and business-knowledge content (entered manually or imported).

2.2 Connected-platform credentials

• Access tokens and account identifiers for the channels you connect (e.g. Facebook Page ID, Instagram account, WhatsApp phone-number ID, TikTok Shop ID). These are stored encrypted and used only to send and receive messages on your behalf.

2.3 End-customer conversation data

• Message content exchanged between an end-customer and the Merchant.
• Basic identifiers the platform provides (platform-scoped user ID, display name), and any contact details a customer chooses to share in a message (such as a phone number or email for an order).

2.4 Usage and technical data

• Log data, device/browser information, and analytics about how the dashboard is used.
• Cookies and similar technologies needed to keep you signed in (see Section 9).

3. How we use information

• To provide the core service: receive messages, generate AI replies, and deliver them.
• To ground AI answers in your data using retrieval (RAG) over your product catalog and business knowledge, and to build lead and CRM records from conversations.
• To show analytics, conversation history, and performance metrics in your dashboard.
• To authenticate you, secure the service, prevent abuse, and provide support.
• To comply with legal obligations and enforce our Terms.

4. AI processing

To generate replies and build the retrieval index, message text and your business/product content are sent to third-party AI model providers via our AI gateway. These providers process the data to return a response or an embedding. We do not permit the use of your content to train third-party models where an opt-out is available, and we send only the content needed to fulfil the request.

5. How we share information

We do not sell personal data. We share data only with:

• Messaging platforms — Meta Platforms (Messenger, Instagram, WhatsApp), TikTok, and similar, to receive and deliver the messages you send through them.
• AI providers — our AI gateway and the underlying model providers, to generate replies and embeddings (Section 4).
• Infrastructure providers — hosting, database, and network/security providers that run the service.
• Legal — where required by law, or to protect our rights, users, or the public.

6. Platform data & compliance

When you connect a Meta channel, our use of information obtained through Meta's APIs ("Platform Data") complies with the Meta Platform Terms and Developer Policies. We use Platform Data solely to provide the OmniBiz service to you, do not sell it, and delete it on request or when you disconnect the channel or delete your account (see Section 8 and ourData Deletion page). WhatsApp messaging is subject to WhatsApp's Business Messaging policies, including the customer-service window rules.

7. Data retention

We retain Merchant account data for as long as your account is active. Conversation and lead data are retained to provide history and analytics until you delete them, disconnect the channel, or close your account, after which they are removed within a reasonable period unless we must retain them to meet a legal obligation.

8. Your rights & data deletion

You may access, correct, export, or delete your data. Merchants can delete conversations, leads, connected channels, or their entire account from the dashboard or by contacting us. End-customers may request deletion of their data by contacting the Merchant they messaged, or us. Full instructions are on our Data Deletion page.

9. Cookies

We use only the cookies and local storage necessary to keep you signed in and to run the dashboard. We do not use advertising cookies.

10. Security

We protect data with encryption in transit, encryption of stored platform credentials, access controls, and tenant isolation. No method of transmission or storage is completely secure, but we work to protect your information and to respond promptly to any incident.

11. International transfers

OmniBiz serves businesses in Bangladesh and South Asia and may process and store data on servers located in other countries. Where data is transferred across borders, we take steps to ensure it remains protected consistent with this policy.

12. Children

The service is intended for businesses and is not directed to children. We do not knowingly collect personal data from children.

13. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above and, where appropriate, by notifying Merchants.

14. Contact us

Questions about this policy or your data? Contact us atprivacy@omnibizchat.com.