Privacy Policy

This distinction matters, because it decides who you should contact about your data.

If you messaged a business through WhatsApp, Instagram or Messenger and want your data removed, contact that business first. You can also contact us and we will route the request to them and support it.

Merchant account data: name, email address, password (stored only as a salted hash, never in readable form), business name, country, plan and billing status, and how the product is used.

Conversation data on the merchant's behalf: message contents, the customer's display name and phone number or platform-scoped ID, timestamps, and any attachments sent in the conversation.

Commerce data: orders, order items, prices, delivery name, phone number and address, and order status.

Derived analysis: we compute signals from conversations, such as apparent purchase intent, price sensitivity and likelihood of a customer going quiet, so the assistant can suggest a better next step. These are estimates, not facts about a person, and they are used only inside the merchant's own workspace.

Technical data: IP address, browser and device information, and log records needed to run the service securely.

When a merchant connects an Instagram, Messenger or WhatsApp business account, we receive only what is needed to carry on the conversation:

We do not access a merchant's followers, private posts, contact lists or advertising data. We do not use Meta platform data to build advertising profiles, and we do not sell it.

A merchant can disconnect at any time from the app settings, or by removing Hudhud from their Instagram or Facebook account. On disconnection the stored access token is deleted, not merely deactivated.

We do not sell personal data. We do not share it with advertisers.

Hudhud uses AI models to understand messages and draft replies. To do that, message content is sent to our AI providers listed below. Those providers process it to return a response.

AI output is a suggestion or an automated reply configured by the merchant. It can be wrong. Merchants remain responsible for what is sent to their customers under their own business name.

We do not use merchant or customer conversation content to train our own foundation models.

We use a small set of infrastructure providers, each handling data only to provide their service to us:

We may also disclose data where we are legally required to, or to protect the rights and safety of users and the public.

Zyrix Technologies Inc. is a United States company, and our providers operate infrastructure in the United States and the European Union. Data handled through Hudhud may therefore be processed outside your country, including in the United States.

Where we transfer data internationally we rely on appropriate safeguards with our providers, including contractual protections.

Conversation, order and analysis data is kept for as long as the merchant's account is active, because it is the merchant's operating record.

When an account is closed, we delete or anonymise its data within 90 days, except where we must keep records longer to meet a legal or accounting obligation.

Access tokens for connected channels are deleted immediately on disconnection.

Passwords are stored only as salted hashes. Channel access tokens are encrypted at rest. Traffic is encrypted in transit using TLS. Access to production systems is restricted.

No system is perfectly secure. If a breach affects your data, we will notify affected users and the relevant authorities where the law requires it.

Depending on where you live, you may have the right to access your data, correct it, delete it, object to certain processing, or receive a copy in a portable format.

To exercise any of these, write to hello@hudhudai.ai. We respond within 30 days.

If you reached us through a merchant's Instagram, Messenger or WhatsApp account, we will pass your request to that merchant, since they are the controller of that data.

You can also trigger deletion of an Instagram connection directly from Instagram, by removing Hudhud from your account. That request reaches us automatically and we act on it immediately.

Hudhud is a business tool and is not directed at children. We do not knowingly collect data from anyone under 16. If you believe a child's data has reached us, contact us and we will delete it.

If we make a material change, we will notify merchants in the application or by email before it takes effect. The date below always reflects the latest version.

Zyrix Technologies Inc.

1007 N Orange St, 4th Floor, Suite 5879, Wilmington, DE 19801, United States

Email: hello@hudhudai.ai