Legal

Privacy Policy

Ahmad AI — The Autonomous Marketing Operating System

Last Updated: March 1, 2026

1Introduction

Welcome to Ahmad AI ("we," "our," or "us"), We are committed to protecting your privacy and ensuring the security of your personal information.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you interact with our services — including our web dashboard, AI marketing agents, and third-party platform integrations (Meta, Instagram, WhatsApp, and Marketing APIs).

By using our services, you consent to the data practices described in this policy.

2Information We Collect

To provide our autonomous marketing and conversational AI services, we may collect and process the following types of information:

  • Account Data: Name, email address, company name, and business information provided during registration.
  • Identity Data: Your WhatsApp Profile Name and Phone Number (for WhatsApp services).
  • Conversation Data: The content of messages processed through our platform, including text, media, and interactions.
  • Platform Data: Business asset information from connected platforms (Facebook Pages, Instagram accounts, ad accounts) that you explicitly authorize.
  • Technical Data: IP addresses, browser type, device information, timestamps, and usage analytics.
  • Marketing Campaign Data: Campaign performance metrics, audience insights, and analytics from connected ad accounts.

3How We Use Your Information

We use the information we collect for the specific purposes of:

  • Service Delivery: Operating our AI marketing agents, processing your inquiries, and delivering automated campaign management.
  • Platform Integration: Connecting to and managing your authorized business assets across Meta, Instagram, and WhatsApp.
  • Campaign Management: Creating, scheduling, and optimizing marketing campaigns through the Meta Marketing API.
  • Communication: Sending requested information, updates, notifications, or marketing messages (only where you have explicitly opted-in).
  • Improvement: Analyzing usage patterns to improve our AI models, user experience, and service quality.
  • Compliance: Fulfilling legal obligations and enforcing our terms of service.

4Meta Platform Data Usage

Facebook Login & OAuth

Ahmad AI uses Facebook Login (OAuth 2.0) to securely authenticate users and connect their business assets. When you connect your account:

  • We request only the specific permissions needed for our services, including pages_manage_posts, pages_read_engagement, pages_show_list, instagram_business_basic, instagram_business_content_publish, and instagram_business_manage_messages.
  • We access only the business assets you explicitly authorize — your Facebook Pages, Instagram Business accounts, and associated ad accounts.
  • We do not access your personal Facebook profile, friends list, personal messages, or any private social data.
  • We do not post automatically without user action, unless you have explicitly enabled and configured autonomous publishing mode in your dashboard settings.

Data We Access from Meta

  • Facebook Page names, IDs, and management access tokens
  • Instagram Business account information and content metrics
  • Page engagement data (post reach, reactions, comments)
  • Ad account information for campaign management

All Meta platform data is used solely for providing our marketing services and is never shared with unauthorized third parties.

5Marketing API Usage

Ahmad AI integrates with the Meta Marketing API to provide campaign management features:

  • We use the Marketing API exclusively for managing campaigns on behalf of authenticated business accounts that you own or administer.
  • Access is limited to the ad accounts and business assets you have explicitly connected and authorized.
  • Campaign data, audience insights, and performance metrics are processed solely to deliver our marketing optimization services.
  • We do not resell, license, or distribute any data obtained through the Marketing API to any third party.
  • All Marketing API usage complies with the Meta Platform Terms and Marketing API policies.

6WhatsApp Cloud API & Meta Platforms

Our service utilizes the WhatsApp Cloud API, provided by Meta Platforms, Inc. ("Meta").

  • Data Processing by Meta: When you message us via WhatsApp, your data passes through Meta's servers to be delivered to our systems. Meta acts as a data processor for these messages.
  • Security: We utilize Meta's secure, encrypted infrastructure to send and receive messages.

For more details on how Meta processes your data, please review the Meta Privacy Policy and the WhatsApp Business Terms.

7Data Encryption & Security

Ahmad AI employs enterprise-grade encryption and security measures to protect your data:

AES-256-GCM Encryption

All sensitive data, including OAuth tokens and API credentials, is encrypted at rest using AES-256-GCM — the gold standard in symmetric encryption.

Encrypted Token Storage

All platform access tokens (Meta, Instagram, WhatsApp) are encrypted before storage and decrypted only at the moment of use in server-side operations.

Server-Side Only Access

Access tokens and sensitive credentials are never exposed to the client-side browser. All API calls are made exclusively from our secure server infrastructure.

TLS 1.3 in Transit

All data transmitted between your browser, our servers, and third-party APIs is protected with TLS 1.3 encryption.

8Data Sharing and Disclosure

We do not sell your personal data. We may share your information only in the following situations:

  • Service Providers: With trusted third-party vendors (such as hosting providers and CRM systems) who assist us in operating our business and serving you, subject to confidentiality agreements.
  • Platform Partners: Data is shared with Meta, Instagram, and WhatsApp APIs solely to provide the services you have requested and authorized.
  • Legal Requirements: If required by law, court order, or government regulation.

9Data Retention

We retain your data according to the following schedule:

  • 1
    Platform Tokens: OAuth access tokens and refresh tokens are deleted immediately upon disconnecting a platform integration.
  • 2
    Business Portfolio Data: All connected business asset data (Pages, Instagram accounts, ad accounts) is permanently removed upon account deletion.
  • 3
    Conversation History: WhatsApp conversation data is retained only for as long as necessary to fulfill the service purpose. You may request deletion at any time.
  • 4
    Audit Logs: Security and compliance audit logs are retained for up to 24 months for legal and security purposes, after which they are securely purged.

10Data Deletion Rights

You have the right to request deletion of your data at any time through the following channels:

In-App Deletion

You can disconnect platform integrations and delete your account directly from your Ahmad AI dashboard under Settings > Account > Delete Account.

Data Deletion Callback

Ahmad AI provides a data deletion callback endpoint compliant with Meta Platform requirements. When you remove our app from your Facebook settings, we automatically receive and process the deletion request.

Email-Based Deletion Request

You may request complete data deletion by emailing privacy@ahmad-ai.com. We will process your request within 30 days and provide confirmation of deletion.

11Your Data Rights

Depending on your location, you may have the following rights regarding your data:

  • Access: The right to request copies of the personal data we hold about you.
  • Correction: The right to request correction of inaccurate information.
  • Deletion: The right to request the deletion of your personal data ("Right to be Forgotten").
  • Portability: The right to request your data in a structured, commonly used, machine-readable format.
  • Restriction: The right to request restriction of processing of your personal data.
  • Opt-Out: You can stop receiving messages from us at any time by replying with "STOP" or "UNSUBSCRIBE" on WhatsApp, or by adjusting your notification preferences in the dashboard.

12Contact Us

If you have questions or comments about this Privacy Policy, or if you wish to exercise your data rights, please contact us at:

Business Name:
Ahmad AI
Website:
https://www.ahmad-ai.com
Email:
support@ahmad-ai.com
Privacy Email:
privacy@ahmad-ai.com
Location:
Ipoh, Perak, Malaysia
Terms of Service|Compliance