Privacy Policy

The data controller for customer accounts is Ahvan Digital, operating the NudgeDesk service. You can reach us about any privacy matter at hello@nudgedesk.io.

Account data. Name, business name, email address, and login credentials when you create an account.

Billing data. Billing contact and the payment details needed to charge your subscription. Card numbers are handled by our payment processor, not stored on our servers.

Platform data. When you connect your Instagram and WhatsApp Business accounts, we access the messages, conversation history, contact profile information and business catalog needed to reply to and manage those conversations on your behalf.

Usage data. Log data, device and browser information, and analytics about how the dashboard is used, so we can keep the service secure and working.

We use the data above to:

• Provide the service: read, draft and send replies, qualify leads and route conversations.
• Set up and maintain your account and billing.
• Keep the service secure, prevent abuse and debug problems.
• Communicate with you about your account and support requests.
• Improve the product in aggregate. We do not sell personal data, and we do not use the content of your end users’ messages to train models for other customers.

NudgeDesk connects to the Meta platforms (Instagram and WhatsApp) through the official Meta APIs. Our use of information received from those APIs follows the Meta Platform Terms and Developer Policies. We only request the permissions required to deliver the features you enable, we use platform data solely to provide and improve those features for you, and we do not transfer it to data brokers or use it for unrelated advertising. If you disconnect a Meta account or delete your NudgeDesk account, we stop accessing that platform data and delete it in line with the retention section below.

We share data only with service providers who help us run NudgeDesk, under contracts that require them to protect it. These include cloud hosting, our payment processor, error and analytics tooling, and the Meta APIs themselves. We may also disclose data where required by law. We do not sell personal data.

We keep account and conversation data for as long as your account is active. When you close your account or ask us to delete data, we remove it within 90 days, except where we must keep records to meet legal, tax or security obligations.

Depending on where you live, you may have the right to access, correct, export or delete your personal data, to object to or restrict how we use it, and to withdraw consent. To exercise any of these, email hello@nudgedesk.io. If you are an end user who messaged a business, please contact that business first, since they control your data; we will help them respond.

We protect data in transit and at rest, restrict internal access to what is needed, and review our security practices regularly. No system is perfectly secure, but we work to keep the risk low and will notify affected users and regulators of a breach where the law requires it.

We may process data in countries other than yours. Where we do, we rely on appropriate safeguards, such as standard contractual clauses, to protect it.

We may update this policy as the product changes. We will post the new version here and update the date at the top. If a change is significant, we will tell account holders directly.

Questions about this policy or your data? Email hello@nudgedesk.io.