1. Who this policy covers
Amam Enterprises (we, us or our) operates Amam WhatsApp CRM (the Platform). This policy covers visitors to this website, business account users and information handled through the Platform. The Platform is currently an owner-managed pilot; data processing depends on the features a business enables.
We handle account and service information to operate the Platform. Where we process customer contacts, conversations or other business records on behalf of a business using the Platform, that business determines its use of the records and is responsible for appropriate notices, permissions and instructions. If you have communicated with one of those businesses, you can contact it directly or ask us to help direct your request.
2. Information we handle
- Account and business information: names, email addresses, company details, memberships, roles, authentication records and settings.
- Customer and CRM records: contact names and phone numbers, leads, notes, assignments, sales stages, follow-up activity and communication records entered by a business or received through connected services.
- Technical and usage information: service logs, access events, IP addresses where recorded, browser or device information, errors, provider usage estimates and spending settings.
- Enquiries: information you choose to send by email or telephone. The public contact page links to your email or phone application; it does not submit an enquiry form to our server.
3. Meta and WhatsApp information
When an authorized business connects through Meta or supplies WhatsApp Business credentials, we process the identifiers and access credentials needed for that connection. These can include WhatsApp Business Account IDs, phone-number IDs, business profile details and authorization tokens. We use granted access to provide the connected functionality selected by the business.
Through WhatsApp APIs and webhooks, we may receive or process customer names and phone numbers, message content, timestamps, media or documents, message template information, delivery/read/failure status and connection events. These records support conversations, contact management, approved messaging and troubleshooting.
Embedded Signup and Coexistence availability depend on Meta permissions and account eligibility. Complete mobile-message and historical-chat synchronization are not currently offered as a finished Platform feature. We do not promise that all information in a mobile WhatsApp account is imported.
Meta and WhatsApp operate their own services under their own terms and privacy policies. Review Meta’s privacy policy and WhatsApp’s privacy policy for their independent processing. Disconnecting a Meta integration does not by itself delete records already stored in the Platform; see data-deletion instructions.
4. How we use information
We use information to provide and maintain requested services: authenticate users, manage company access, show conversations, send and receive authorized messages, manage contacts and leads, support configured workflows, provide requested AI assistance, record usage, respond to enquiries and troubleshoot problems. We also use relevant information to maintain security, prevent misuse and meet applicable obligations.
A business must obtain appropriate permissions before contacting recipients or uploading information. Having access to the Platform does not establish consent for marketing messages. Production campaign sending and live phone calling are currently unavailable.
5. Optional AI features and recordings
When a business uses AI assistance, the relevant request, message context, business knowledge or CRM information may be sent to its configured OpenAI or Google Gemini service to generate the requested output. Provider terms and data practices apply to that processing.
Recording analysis sends an authorized uploaded recording to ElevenLabs for transcription and uses the selected OpenAI or Gemini provider for assessment of the transcript. Recordings and transcripts can contain personal or sensitive information. The uploading business must have appropriate permission for recording, uploading and processing that content.
AI output can be inaccurate and should be reviewed by a person. Businesses should assess whether the configured providers are suitable for their information before using these features.
8. Retention and security
We keep information as needed to provide the service, follow the relevant business’s instructions, maintain security and meet applicable recordkeeping requirements. Retention varies by record type and purpose; this policy does not set a single retention period for all records.
Deletion from active systems may not immediately remove copies from backups. Backup copies are subject to rotation and access restrictions; legal or security requirements may also require limited retention. Contact us for the scope and timing applicable to a specific request.
Controls include authentication, company-scoped access checks, administrator two-step login and encrypted storage of connected-service credentials. These measures reduce risk but cannot guarantee absolute security. Provider and account configuration also affect protection.
9. Your choices and requests
You may contact us about access, correction, deletion or other applicable privacy rights, or withdrawal of consent where relevant. We may need to verify your identity and authority before acting. Where a business customer controls the requested records, we may refer the request to that business or assist it in responding.
For a deletion request, follow our data-deletion instructions. Requests are handled manually; we do not currently provide an automatic Meta deletion callback. You can separately manage or remove granted access in your Meta account’s business integration settings. Removing access stops the relevant authorization but is not a request to delete every existing CRM record.
10. Children’s information
The Platform is a business service and is not directed at children. Businesses should not upload children’s information without addressing applicable requirements and permissions.
11. Policy changes
We may update this policy as our services and processing change. The revised policy and its updated date will be published on this page. Contact us if you have questions about a change.
12. Contact Amam Enterprises
Privacy contact: virajtolia30@gmail.com
A-301, RK Iconic, Shital Park, 150ft. Ring Road, Rajkot, Gujarat, India
Business enquiries: amam_enterprises@yahoo.com