Privacy Policy

AutoBikri ("AutoBikri", "we", "us") provides an AI sales-assistant platform that helps businesses in Bangladesh reply to customers and manage orders across messaging channels such as WhatsApp and Facebook Messenger. This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using AutoBikri you agree to this policy.

1. Information we collect

• Account & business data — your name, email, phone number, business name, products, prices, and settings you enter.
• Customer conversations — messages exchanged on channels you connect (e.g. WhatsApp Business, Facebook Page/Messenger), including the customer's name, phone number or page-scoped ID, message content, and photos or documents the customer sends, so the AI assistant can reply and orders can be created.
• WhatsApp Business app data (if you choose to connect it) — when you connect a number you keep using in the WhatsApp Business app, Meta shares, at your request, your contact names and up to the last 6 months of one-to-one chat history, plus messages you later send from the app, so those conversations appear in your AutoBikri Inbox. Group chats are not included.
• Message templates — WhatsApp message templates you create in AutoBikri and their approval status from Meta.
• Leads & bookings (service businesses) — when a business that provides a service uses AutoBikri, the AI notes people who show interest in a chat: their name, phone number, what they are interested in, any booking time, and a fee transaction ID (TrxID) the customer sends, so the business can call back or confirm. The AI only notes a TrxID; it never tells a customer a payment was received — the business checks it. These records belong to the business, are shown only to its team, and are covered by the same export, deletion and retention rules as other customer data below. Customers should not share health details or other sensitive personal information in chat; a clinic, chamber or parlour should ask for those in person.
• Order & payment references — order details and bKash transaction IDs you submit for subscription billing. We do not collect or store card numbers or bKash PINs.
• Usage & device data — log data, IP address, and basic analytics used to operate and secure the service.
• Advertising measurement on this website — our public website (autobikri.com) may use the Meta Pixel and Google Ads tag to measure whether our own adverts lead to visits and account requests. They record page visits and a successful request submission; we do not pass them the details you type into the form. They are not used inside the AutoBikri app, and never touch your customers' data.

2. Meta platform data (WhatsApp, Messenger, Facebook)

When you connect a Meta channel, we access only the data needed to deliver the service — Page/WhatsApp messages, the connected Page, WhatsApp Business Account and phone-number details, message templates, and access tokens. We use this data solely to:

• show your customer conversations in your Inbox and send replies you or the AI assistant write on your behalf;
• send order updates (confirmation, shipping and tracking, delivery, cancellation, refunds) to the customer who placed the order, using Meta-approved templates when required;
• create and manage the WhatsApp message templates you set up;
• record orders and customer details for your business.

We do not send bulk or promotional messages on your behalf. We handle Meta platform data in accordance with Meta's Platform Terms and Developer Policies, access tokens are encrypted at rest (AES-256) and never shown in the app, and we do not sell Meta platform data or use it for advertising. You can disconnect a channel at any time from Settings → Channels. A number connected together with the WhatsApp Business app can also be disconnected in the app (Settings → Account → Business Platform → Disconnect). Disconnecting stops AutoBikri using the channel and deletes the access tokens we stored; to remove the app's access on Meta's side as well, remove AutoBikri under Business integrations in your Meta Business settings. See Data Deletion for the steps and for removing stored data.

3. How we use information

• To generate AI replies to your customers and operate the assistant.
• To send order updates to your customers on the channel they used.
• To create and manage orders, inventory, and reports for your business.
• To process subscription billing and verify payments.
• To secure, maintain, and improve the service.

4. AI processing & subprocessors

To produce replies and other AI features, message content and relevant business context may be sent to third-party AI providers acting as our processors — currently OpenAI, Anthropic, and Google (Gemini) for language models, and Voyage AI for text embeddings. They process the data only to return results to us and under their respective data-processing terms; we do not permit them to train on your data where that option is available to disable.

5. Sharing & service providers

We share data only with providers that help us run AutoBikri, including:

• Meta (to send/receive messages on your connected channels);
• the AI providers listed above;
• cloud hosting and database (MongoDB Atlas) and email delivery (Amazon SES);
• bKash, for payment reference verification.

We do not sell your personal information.

6. Data retention

We retain account and business data for as long as your account is active, and conversation/order data as needed to provide the service and meet legal or accounting obligations. A shop deleted from its settings is closed and its channels are disconnected; its data is kept so it can be restored on request. When you ask us to delete your data, we confirm your request within 14 days; once confirmed, it is removed from the service right away, held in a locked, encrypted archive for 90 days so a mistake can be undone, and then erased permanently — names, phone numbers, message text, photos, access tokens and channel data. Our backups are kept for at most 30 days, so every backup copy, including the encrypted archive's, is gone within 120 days of the confirmed request. Invoices, payments and order amounts are kept with personal details removed. See our Data Deletion page.

7. Security

We use encryption in transit, encryption at rest for channel access tokens and app secrets, access controls on our database and servers, and tenant isolation so each business sees only its own data. Our servers and providers may process data outside Bangladesh. No method of transmission or storage is 100% secure, but we work to protect your information.

8. Your rights

You may access, correct, export, or delete your data, and request that we stop processing it, by emailing us. Connecting customers' data is done on your behalf as a business; you are responsible for having any consent required under applicable law.

9. Children

AutoBikri is for businesses and is not directed to children under 13.

10. Changes

We may update this policy; material changes will be posted on this page with a new "Last updated" date.

11. Contact

AutoBikri is operated by Auto Bikri, a sole proprietorship registered in Bangladesh, which is the data controller for the personal data described in this policy. Questions or data requests: info@autobikri.com.