Privacy Policy

JawabEx ("we", "us", or "our") operates the JawabEx platform (jawabex.mowork.me), a SaaS product that enables businesses to build and deploy AI-powered chatbot agents across WhatsApp, Facebook Messenger, Instagram, and websites. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

We collect the following categories of information: Account Information: Name, email address, phone number, and business details provided during registration. Workspace Data: AI agent configurations, knowledge base content, conversation histories, and analytics data created within your workspace. Channel Data: When you connect messaging channels (WhatsApp, Facebook Messenger, Instagram), we receive and process messages, media files, sender identifiers (phone numbers, Page-Scoped IDs, Instagram-Scoped IDs), and profile information from end users who message your connected channels. Payment Information: Billing details processed securely through our payment provider (Creem). We do not store full credit card numbers. Usage Data: Log data, IP addresses, browser type, device information, and platform usage patterns for analytics and improvement purposes. Voice Data: When voice features are enabled, audio messages are transcribed and processed. Generated voice responses are temporarily stored for delivery.

We use collected information to: - Provide, maintain, and improve the JawabEx platform - Process and route messages between your AI agents and end users - Generate AI responses using third-party language models (via OpenRouter) - Transcribe and generate voice messages using third-party TTS/STT services - Process payments and manage subscriptions - Send service-related notifications and updates - Monitor platform performance and prevent abuse - Comply with legal obligations

We integrate with the following third-party services to deliver our platform: Meta Platforms (Facebook/Instagram/WhatsApp): We use Meta's APIs to send and receive messages on your behalf. Data shared with Meta is subject to Meta's Data Policy. OpenRouter: AI language model requests are processed through OpenRouter. Message content is sent for AI response generation. Fish Audio / Deepgram / Groq: Used for voice synthesis and audio transcription. Supabase: Our database and authentication provider. All data is stored with Row Level Security. Sentry: Error monitoring for platform stability. Langfuse: Optional LLM observability for quality monitoring. Resend: Email delivery for notifications and invitations. Each third-party service has its own privacy policy governing their use of data.

We do not sell your personal information. We may share data: - With third-party service providers as described above, solely to operate the platform - When required by law, legal process, or government request - To protect our rights, privacy, safety, or property - In connection with a merger, acquisition, or sale of assets (with prior notice) - With your explicit consent

We retain your data for as long as your account is active or as needed to provide services. Conversation data is retained according to your workspace settings. You may request deletion of your data at any time (see Data Deletion section). Upon account deletion, we remove your data within 30 days, except where retention is required by law.

We implement industry-standard security measures including: - Encryption in transit (TLS/SSL) and at rest - Row Level Security (RLS) ensuring workspace data isolation - Role-Based Access Control (RBAC) within workspaces - HMAC signature verification for all webhook communications - Regular security monitoring via Sentry No method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

Depending on your jurisdiction, you may have the right to: - Access the personal data we hold about you - Request correction of inaccurate data - Request deletion of your data - Object to or restrict processing of your data - Data portability (receive your data in a structured format) - Withdraw consent at any time To exercise these rights, contact us at privacy@mowork.me.

Your data may be processed in countries other than your country of residence. We ensure appropriate safeguards are in place for such transfers in compliance with applicable data protection laws.

JawabEx is not intended for use by individuals under 18 years of age. We do not knowingly collect personal information from children.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our platform and updating the "Last updated" date. Continued use after changes constitutes acceptance.

If you have questions about this Privacy Policy, contact us at: Email: privacy@mowork.me Platform: JawabEx by MoWork