Privacy Policy

1. Introduction

MSEB SOLUTIONS LLC ("we", "us", "our", or "Autosay") operates the Autosay platform at autosay.net. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

2. Information We Collect

We collect information you provide directly to us:

• Account Information: Name, email address, company name, phone number when you create an account.
• Business Data: Product catalogs, customer contact lists, conversation histories uploaded to the platform.
• WhatsApp Data: Messages sent/received through connected WhatsApp Business accounts, phone numbers, and message templates.
• Payment Information: Billing address and payment method details (processed by our payment provider; we do not store full card details).
• Usage Data: Log data, device information, IP address, browser type, pages visited, and feature usage analytics.

3. How We Use Your Information

We use collected information to:

• Provide, maintain, and improve the Autosay platform
• Process WhatsApp messages through the Meta Business API on your behalf
• Train and maintain AI chatbot models specific to your product catalog
• Send service-related communications and updates
• Detect and prevent fraud or abuse
• Comply with legal obligations

4. Data Sharing

We do not sell your personal data. We may share data with:

• Meta/WhatsApp: Message data is transmitted through the WhatsApp Business Platform API.
• AI Providers: Anonymized conversation data may be processed by third-party AI services (e.g., OpenAI) for chatbot functionality.
• Service Providers: Hosting, payment processing, and analytics providers bound by data processing agreements.
• Legal Requirements: When required by law or to protect our rights.

5. Data Security

We implement industry-standard security measures including:

• Industry-standard encryption for data at rest
• Encrypted data in transit using current best practices
• Access control and role-based permissions
• Regular security audits and vulnerability assessments
• Encrypted token storage for WhatsApp API credentials

6. Data Retention

We retain your data for as long as your account is active or as needed to provide services. You may request deletion of your data at any time by contacting us. Upon account termination, we delete your data within 30 days, except where retention is required by law.

7. GDPR Compliance (EU Users)

If you are in the European Economic Area (EEA), you have the right to:

• Access your personal data
• Rectify inaccurate data
• Request erasure of your data
• Restrict or object to processing
• Data portability
• Lodge a complaint with a supervisory authority

8. KVKK Compliance (Turkish Users)

For users subject to Turkish data protection law (KVKK - Kişisel Verilerin Korunması Kanunu), we comply with all obligations including explicit consent requirements, data processing registry notifications, and cross-border transfer safeguards.

Optional first-party website measurement

Optional measurement is off until you enable it through Measurement preferences in the page footer. You can turn it off there at any time. We respect Global Privacy Control and Do Not Track signals.

When enabled, our public marketing pages send a fixed event category (demo view, demo link, trial link, email link or prepared email), page category, page language and broad traffic source to AutoSay. They do not send names, email addresses, message contents, raw referring URLs or visitor identifiers to this measurement endpoint. Page language is not your country.

The dedicated event log excludes IP addresses, user-agent strings, cookies and request headers. Normal hosting and security request logs are separate. Measurement counts are not unique visitors, submitted requests or purchases.

Your allow/deny preference is stored locally for up to 180 days. Only when measurement is allowed, broad source and landing-page categories are stored in this browser tab for up to 30 minutes and may be included in an email draft you choose to send to us. No unique tracking identifier is created, and no third-party analytics service receives these events.

Event logs are size-limited and rotated. Archives older than 14 days are removed when logs rotate; an inactive file may remain longer. Reports use only the last 14 days. Raw logs do not survive gateway replacement. Aggregated counts contain only date and the categories described above and may be retained for comparison. Requests, qualified enquiries and paid customers are recorded separately using actual inbox, sales or billing evidence.

9. Cookies

We use essential cookies to operate the platform and functional cookies to store your preferences. We do not use advertising or tracking cookies. See our Cookie Policy for full details.

10. Children's Privacy

Our Service is not directed to individuals under 18. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

12. Contact Us

For privacy-related inquiries, contact us at [email protected].