Privacy Policy

1. Introduction

Majesta ("we," "our," or "us") operates a messaging automation platform that enables businesses to manage automated customer interactions through WhatsApp Business, Instagram Direct Messages, and Facebook Messenger. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

2. Information We Collect

2.1 Information You Provide

• Account Information: Email address, password, phone number, business name
• Business Information: Business details, inventory data, product information
• Platform Connections: When you connect your messaging accounts, we receive:
  • WhatsApp Business Account ID and phone number
  • Instagram Business Account ID and username
  • Facebook Page ID and information
  • Access tokens (stored encrypted)

2.2 Information from Messaging Platforms

When you authorize our app to connect with WhatsApp/Instagram/Messenger, we collect:

• Messages: Direct messages sent to your business accounts
• User Information: User IDs of people who message your business (we do NOT collect personal information about your customers)
• Message Metadata: Timestamps, message status, delivery information

2.3 Inventory Data

• Product names, descriptions, prices
• Stock quantities and availability
• Product categories and attributes
• This data is used to generate accurate automated responses

2.4 Mobile Application Permissions

When you use the Majesta mobile app, the app may request the following device permissions:

• Contacts: The app accesses your device's contact list locally on your device only to suggest phone numbers when adding customers. Your contacts are never uploaded to our servers or transmitted anywhere. This data stays entirely on your device. You can revoke this permission at any time in your device Settings.
• Push Notifications: We send push notification tokens to our servers solely to deliver service alerts and message notifications. You can disable notifications at any time in your device Settings.
• Device Identifiers: We may store push notification tokens associated with your account to deliver notifications. These identifiers are never used for advertising or shared with third parties for marketing purposes.

2.5 Sign-In Providers

When you sign in using a third-party identity provider, we receive limited profile information to create and manage your account:

• Sign in with Apple: We receive your name (if you choose to share it) and an email address (which may be Apple's private relay address). We never receive your Apple ID directly.
• Sign in with Google: We receive your name, email address, and profile picture from your Google account.
• Sign in with Facebook/Meta: We receive your name and email address from your Facebook account.

In all cases, this information is used only to authenticate you and manage your Majesta account. We do not share sign-in provider data with third parties beyond what is described in Section 4.

3. How We Use Your Information

3.1 Primary Uses

• Provide Service: Operate your messaging bots, receive and respond to messages
• Inventory Integration: Query your inventory in real-time to generate accurate responses about availability and pricing
• Message Processing: Use AI to generate intelligent responses based on customer questions and your inventory
• Account Management: Verify your identity, manage your subscription
• Communication: Send service updates, respond to support requests

3.2 We Do NOT

4. How We Share Your Information

4.1 Third-Party Services

We share limited data with these services to operate:

5. Data Security

5.1 Security Measures

• Encryption: All access tokens are encrypted at rest (AES-256)
• HTTPS: All data transmission uses SSL/TLS encryption
• Access Control: Limited employee access to user data
• Isolated Storage: Each business's data stored in separate containers
• Regular Audits: Security assessments and updates

6. WhatsApp/Instagram/Messenger-Specific Privacy

6.1 Message Data

• We only access messages sent to YOUR business accounts
• We do NOT access messages from other users' accounts
• We do NOT store personal information about your customers beyond what's necessary (user IDs)

6.2 Customer Data

Your customers' data (messages to your business):

• Used ONLY to provide automated responses
• NOT shared with other businesses
• NOT used for marketing
• NOT sold to third parties

7. Your Rights

7.1 Access and Control

You have the right to:

• Access: Request a copy of your data
• Correction: Update incorrect information
• Deletion: Request deletion of your account and data
• Export: Download your data in a portable format
• Disconnect: Revoke platform access at any time

7.2 How to Exercise Rights

Contact us at: privacy@majestaenterprise.com

We will respond within 30 days.

8. Contact Us

9. Privacy Promise