Privacy Policy

1. Who we are

Metal Jungle ("we", "us", "our") provides a customer engagement platform that connects a business's WhatsApp Business Account, Instagram professional account, and Facebook Page into a single inbox, with AI agents, automated bot flows, a CRM, and campaign tools built on top. This Privacy Policy explains what data we collect when a business ("you", "the workspace owner") and their customers use our platform, and how that data is handled.

2. Data we collect

We collect and process the following categories of data:

• Account & business data: your name, email, phone number, and business details provided when you sign up or connect a channel.
• Channel connection data: access tokens and identifiers Meta issues when you connect a WhatsApp Business Account, Instagram account, or Facebook Page — stored encrypted, used only to send and receive messages on your behalf through Meta's official APIs.
• Customer conversation data: messages, media (images, documents, voice notes), and metadata (timestamps, delivery status) exchanged between your customers and your workspace on WhatsApp, Instagram, and Facebook Messenger.
• Customer profile data: a customer's name and phone number or platform-scoped user ID, as made available by Meta's APIs when they message you — used to identify them as a contact in your inbox and CRM.
• Usage & analytics data: message volumes, response times, AI agent tool usage, and similar aggregate metrics generated from your workspace's own activity.

3. How we use this data

Data is used solely to operate the platform on your behalf:

• Delivering and receiving messages across WhatsApp, Instagram, and Facebook Messenger.
• Generating AI-assisted replies — your customer's message and recent conversation history are sent to your configured AI provider (e.g. OpenAI or another model provider you connect) solely to produce a reply; this data is not used by us to train any model.
• Running the bot flows and automations you configure (welcome messages, keyword replies, payment collection, and similar).
• Maintaining your CRM records, contact tags, and pipeline stages.
• Sending campaigns and sequences you create to your own contacts.
• Computing the analytics dashboards shown inside your workspace.

We do not sell customer or business data to any third party, and we do not use it for advertising.

4. How data is shared

Data is shared only as necessary to provide the service:

• Meta Platforms, Inc. — every message sent or received passes through Meta's WhatsApp Business Platform, Instagram Messaging, or Messenger Platform APIs, subject to Meta's own data policies.
• Your chosen AI provider — only if you enable an AI agent, and only the conversation content needed to generate that specific reply.
• Infrastructure providers — our database, file storage, and hosting providers, who process data solely to run the platform and are contractually bound to protect it.

We never share data with third parties for their own marketing purposes.

5. Data retention

Conversation and contact data is retained for as long as your workspace remains active, so your inbox, CRM, and analytics stay accurate and complete. If you close your workspace or request deletion, we delete your data within a reasonable period, except where we're required to keep it for legal or accounting purposes.

6. Your rights & data deletion

You can request access to, correction of, or deletion of your business's data, or a customer's data, at any time by contacting us using the details below. We will act on verified requests within a reasonable timeframe. A customer can also stop a conversation from being processed further by no longer messaging the connected WhatsApp number, Instagram account, or Facebook Page.

7. Security

Channel access tokens and other secrets are stored encrypted at rest. Access to workspace data within our platform is restricted to authenticated users belonging to that workspace — one workspace can never see another's data.

8. Children's privacy

Our platform is intended for business use and is not directed at children. We do not knowingly collect data from children under 13 beyond what a customer may incidentally include in a message to a connected business.

9. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision.

10. Contact us

Questions about this Privacy Policy or a data request can be sent to privacy@metaljungle.in.