Privacy policy

Template notice: this policy is a starting draft for ADAK Fintech Ltd. Have it reviewed by a lawyer familiar with the DIFC Data Protection Law (DIFC Law No. 5 of 2020), the GDPR and other laws that apply to your customers before publishing.

Who we are

TalkNaut is operated by ADAK Fintech Ltd, Dubai International Financial Centre (DIFC), Dubai, UAE ("we", "us"). We act as a processor for the conversation data our customers (businesses) collect from their own customers, and as a controller for account and billing data about our customers.

What we collect

• Account data: name, email, password hash, workspace details and team membership.
• Customer content: messages exchanged through connected channels, contact details customers share, knowledge you upload, leads and tickets.
• Integration credentials: access tokens for channels and stores, stored encrypted.
• Usage and billing data: AI usage metrics, subscription status and invoices (payment card data is handled by our payment processor, Stripe).
• Technical data: IP address and browser information for security, rate limiting and audit logs.

How we use it

• To provide the service: route conversations, generate AI replies, index knowledge and show analytics.
• To secure the platform and prevent abuse.
• To bill for subscriptions and communicate about your account.

We do not sell personal data and do not use customer content to train our own models. Your agents learn from your own conversations (short written lessons, see Learning in your dashboard); those lessons stay inside your workspace and are never shared with other customers.

Sub-processors

• OpenAI (AI model inference and embeddings)
• Meta Platforms (WhatsApp Business Platform, Instagram APIs) and Telegram, when you connect those channels
• Stripe (payments)
• Our hosting and database providers

Retention and deletion

Workspace data is kept while your subscription is active, or for the shorter period a business chooses in its settings (30 days to 2 years). Businesses can export all customer data, delete one customer's data, or delete the whole workspace at any time; deletion is permanent and backups roll off within 30 days. To ask for your data to be deleted, contact the business you messaged, or write to [email protected].

Security

Messages, notes and customer contact details are encrypted at rest (AES-256), all traffic uses https, channel credentials are encrypted, and access is limited to members of each business's workspace. Accounts can use two-step sign-in.

Your rights

Depending on where you live you may have rights to access, correct, delete or port your data, and to object to processing. End customers of our customers should contact the business they messaged; we will assist that business. Contact us at [email protected].

International transfers

Data may be processed outside the UAE by the sub-processors above, under appropriate safeguards.