Privacy Policy

This policy explains how Acamatic Ltd handles personal data when you message a business that uses Shyanim AI (our app on Meta is called “Acamatic AI Messaging”) and when you visit acamatic.com.

Who we are

The controller is Acamatic Ltd, a private limited company registered in England and Wales, company number 15068064, registered office 2nd Floor College House, 17 King Edwards Road, Ruislip, London, HA4 7AE, United Kingdom. Privacy contact (we have not appointed a statutory Data Protection Officer; this mailbox is read by the person responsible for data protection): munim@acamatic.com.

The business you message (a clothing shop or a service business, for example) keeps its own order records and is a separate controller of them. We are the controller of the data we process to run the assistant.

What we collect

• Messages you send to a business on Messenger, Instagram, WhatsApp or its web chat, and the assistant’s replies.
• Sender identifiers supplied by the channel: a page-scoped ID (PSID) on Messenger, an Instagram-scoped ID (IGSID), or your phone number on WhatsApp.
• Details you give for an order: name, contact details and delivery address.
• Order and payment status (for example placed, paid, refunded). We never receive or store card details; Stripe handles payment.

Why we use it, and our lawful bases

• Purpose: orders for the business you message — goods and services, not food ordering.
• To answer your messages and take and fulfil an order for the business you messaged: performance of a contract (taking steps you ask for before an order) and our legitimate interest in running a reliable service.
• To prevent fraud and abuse and keep the service secure: legitimate interest.
• To meet legal obligations: legal obligation.

Data we receive from Meta is used only to respond to the person who messaged. We do not sell personal data, and we do not use it for advertising.

Meta platforms

We use the Meta Platform APIs (Messenger, Instagram messaging and the WhatsApp Business Platform) under Meta’s terms and policies. Meta processes messages on its own platform under its own privacy policy.

Who processes data for us

• Meta Platforms (message delivery on Messenger, Instagram and WhatsApp)
• Stripe (payments)
• Microsoft Azure OpenAI and Azure AI (model inference to write replies)
• DigitalOcean (hosting)
• Vercel (website hosting)

How long we keep it

Conversation history is kept in the AI server for 7 days and then removed. Orders are kept in the business’s records for as long as that business needs them for its own legal and accounting obligations.

International transfers

We are based in the UK. Some providers process data in the EU or the United States. Where data leaves the UK we rely on UK adequacy regulations (including the UK–US data bridge for certified recipients) or the UK International Data Transfer Agreement / Addendum to the EU standard contractual clauses.

Your rights

Under UK GDPR you can ask for access to your data, correction, erasure, restriction, portability, and you can object to processing based on legitimate interest. Email munim@acamatic.com; we reply within one month. To delete your data see Data deletion. You can complain to the Information Commissioner’s Office (ico.org.uk, 0303 123 1113).

Children

The service is not intended for anyone under 16, and Meta’s channels require users to be at least 13. We do not knowingly collect data from children; tell us and we will delete it.

Cookies

The web chat sets one strictly necessary httpOnly session cookie to keep your conversation together. It is not used for tracking or advertising. acamatic.com itself sets no cookies.

Changes

If we change this policy we will update the date above. Questions: munim@acamatic.com or +44 7446 358267.