Table of Contents
1. Who We Are
Irmaya ("we", "our", "us") operates an AI-powered WhatsApp automation platform for businesses. Our services are accessible at irmaya.com and through our dashboard at app.irmaya.com.
By using Irmaya, you agree to the collection and use of information described in this Privacy Policy.
2. Data We Collect
We collect the following categories of data:
- Account information: name, email address, and profile picture from your sign-up method (email, Google, or Facebook)
- Business information: company name, phone numbers, WhatsApp Business Account ID
- Usage data: pages visited, features used, session duration, browser type, IP address
- Communication data: WhatsApp message content processed through our platform on your behalf
- Billing data: subscription plan, payment status (payment card details are handled by Stripe and never stored by us)
- Technical data: API keys you configure, webhook URLs, integration settings
3. How We Use Your Data
We use your data to:
- Provide, maintain, and improve the Irmaya platform
- Authenticate your identity and secure your account
- Process WhatsApp messages through AI models on your behalf
- Send transactional emails (account alerts, billing receipts)
- Detect and prevent fraud, abuse, and security incidents
- Comply with legal obligations
4. WhatsApp & Messaging Data
When you connect a WhatsApp number to Irmaya, messages sent to and from that number are processed through our servers to generate AI responses. This includes:
- Inbound messages from your customers
- Outbound AI-generated replies
- Conversation history stored to provide context to the AI
Message data is stored securely and associated with your tenant account. You can delete conversation history at any time from your dashboard.
We comply with the Meta Platform Terms for data obtained via WhatsApp Cloud API.
5. Facebook & Google Login
We offer sign-in via Facebook and Google through Clerk, our authentication provider. When you sign in using these methods, we receive:
- From Facebook: your public profile (name, profile picture) and email address
- From Google: your name, email address, and profile picture
We do not receive access to your Facebook friends list, posts, or any other data beyond what is listed above. We request only the email and public_profile permissions.
You can revoke Irmaya's access to your Facebook or Google account at any time through your respective account settings.
7. Data Retention
We retain your personal data for as long as your account is active. Conversation history is retained for up to 12 months by default and can be deleted earlier from your dashboard settings.
When you delete your account, we remove your personal data within 30 days, except where we are required to retain it by law (e.g., billing records for tax purposes, retained for up to 7 years).
8. Security
We implement industry-standard measures to protect your data:
- TLS encryption in transit for all API and dashboard traffic
- Encrypted database storage
- Role-based access controls; staff access is logged and audited
- Webhook signature verification (HMAC-SHA256) for all inbound events
No system is completely secure. If you discover a security vulnerability, please report it to [email protected].
9. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Access: request a copy of the data we hold about you
- Correction: update inaccurate or incomplete data
- Deletion: request deletion of your account and associated data
- Portability: receive your data in a machine-readable format
- Objection: object to certain processing activities
To exercise these rights, contact us at [email protected]. We will respond within 30 days.
11. Children's Privacy
Irmaya is a business platform and is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us at [email protected] and we will delete it promptly.
12. Changes to This Policy
We may update this Privacy Policy periodically. When we make material changes, we will notify you by email or by displaying a prominent notice in the dashboard. The "Last updated" date at the top of this page reflects the most recent revision.
Continued use of Irmaya after changes take effect constitutes your acceptance of the updated policy.
13. Contact Us
For privacy-related questions or requests:
- Email: [email protected]
- Website: https://irmaya.com
We aim to respond to all privacy enquiries within 5 business days.