1. Who we are
Merdigit AI is a product of Merdigit ("we", "us"). For your account, billing and workspace data we decide how the data is used, so we are responsible for it. For the conversations your Agents have with your customers, you decide why that data is collected and we process it on your behalf and on your instructions (see section 6).
2. What we collect
- Account data: your name, work email, company name and password (stored only as a one-way hash), and the people you invite to your workspace with their roles.
- Billing data: the package you choose, orders, amounts, and the payment proof you upload. We do not store card numbers.
- Workspace content: your company profile, Knowledge Base, business description, Agent and action settings, and the websites you allow for Web Chat.
- Conversation data: the messages your customers send and receive on WhatsApp and Web Chat, their WhatsApp number or anonymous visitor ID, and the leads and appointments your Agent records from those conversations.
- Integration data: connection details for systems you connect (such as Odoo). API keys are stored encrypted.
- Usage and technical data: AI usage counts, logs, IP addresses and security events, used to run, bill and protect the service.
- Cookies: our web app uses a session cookie to keep you signed in, and one that remembers the language you choose. The Web Chat widget on your website sets no cookies; it keeps only a chat session token in the visitor's browser storage. We use no advertising or tracking cookies.
3. How we use it
- To run the service: answer your customers, record leads and appointments, hand conversations to your team and alert them.
- To manage your subscription, usage limits, trials and payments.
- To keep the service secure, prevent abuse, and investigate problems.
- To contact you about your account, service changes and support. We send marketing only if you agree, and you can opt out at any time.
We do not sell your data or your customers' data, and we do not use it to advertise to anyone.
4. AI processing
To write a reply, the relevant part of the conversation, your Knowledge Base and your Agent's instructions are sent to an AI model provider (currently OpenAI and Anthropic) through their business APIs. The same applies when we turn your business description into draft Knowledge Base answers. We do not use your data or your customers' data to train AI models, and we use these providers under API terms that do not allow them to train on it.
AI replies can be wrong. Your Agent answers only from what you give it, but you remain responsible for checking your Knowledge Base and for your team's follow-up.
6. Your customers' data
When your customers message you, you are responsible for having a lawful reason to process their data and for telling them how you use it, for example in your own privacy policy. The Web Chat widget tells visitors that replies are AI-assisted and links to this policy. We process your customers' data only to provide the service to you, never for our own purposes, and we help you answer their requests to access or delete their data.
7. Retention and deletion
We keep your data while your account is active. You can delete Knowledge Base entries at any time. You can ask us to delete a conversation, a customer's data, or your whole workspace, and we will do so within 30 days, except for records the law requires us to keep, such as invoices. Copies in backups are removed as the backups expire.
If you connected a Facebook Page or Instagram account with "Connect with Facebook", see Data Deletion for how to remove it and its data.
8. Security
Each workspace is isolated from every other: one company can never see another's data or conversations. Data travels over encrypted connections, passwords are hashed, integration keys are encrypted, access inside your workspace follows roles (Admin, Analyst, Viewer), and administrative actions are logged. No system is perfectly secure; if a breach affects your data, we will tell you without undue delay.
9. Your rights
You can access, correct, export or delete your data, object to or restrict how we use it, and withdraw any consent you gave. Most of this you can do in your workspace; for the rest, contact us. Merdigit AI is for businesses and is not meant for anyone under 18.
If we change this policy in a meaningful way, we will update the version above and tell account owners before the change takes effect.
10. Contact
For privacy questions or requests, reach us through the Contact page or on WhatsApp at +20 151 506 2674.