Privacy Policy

Last Updated: September 19, 2026

At Diza AI (accessible from dizaai.com), operated by Dizitalsquare, we prioritize the privacy and security of our users and their customers. This Privacy Policy explains what information we collect, how we process and protect it, and your rights regarding your data when using our platform and integrations.

1. Information We Collect

We collect information necessary to provide, manage, and automate communications across our platform:

Account & Registration Information: Your name, business name, business email address, phone number, and account credentials when you register for Diza AI.
Meta Platform Data (WhatsApp, Instagram & Facebook Messenger): When you connect your WhatsApp Business Account, Facebook Page, or Instagram Professional Account via Meta OAuth, we collect and store:
- Business asset IDs: Facebook Page ID, Page Name, Instagram Business Account ID, WhatsApp Business Account (WABA) ID, and Phone Number ID.
- Access tokens necessary to maintain authorized API connections and deliver webhook events.
- Public profile information of end users who initiate conversations with your connected channels (e.g., Page-Scoped User ID [PSID], Instagram-Scoped ID [IGSID], WhatsApp phone number, and display names where permitted by Meta).
- Conversation content: Inbound customer inquiries and outbound responses transmitted through WhatsApp, Instagram Direct, and Facebook Messenger to power our unified inbox and AI conversational engine.
Knowledge Base & Business Data: FAQs, training documents, website links, catalog items, and service descriptions uploaded to train your custom AI agent.
Technical & Usage Data: IP addresses, browser types, session timestamps, and dashboard activity logs for security, troubleshooting, and analytics.

2. How We Use Your Information

We use collected data solely for legitimate business purposes:

To operate, maintain, and provide the Diza AI multi-channel communication suite.
To automatically process and reply to incoming messages on WhatsApp, Instagram Direct, and Facebook Messenger on behalf of your business using your custom-configured AI agent.
To provide a real-time Unified Inbox allowing human agents to monitor conversations and manually reply to customer inquiries.
To manage subscriptions, billing, authentication, and technical notifications.
To prevent spam, abuse, security threats, and fraudulent activities.
AI Training Isolation: We do NOT sell your customer conversations, and we do NOT use private business messages to train public AI foundation models.

3. Third-Party Service Providers

We integrate with industry-leading technology providers to deliver our services under strict confidentiality and security terms:

Meta Platforms, Inc. (Meta APIs): We utilize the Meta Graph API, WhatsApp Business Cloud API, Instagram Graph API, and Messenger Platform to enable multi-channel messaging. All Meta data handling strictly complies with the Meta Developer Platform Terms and Commercial Terms.
Enterprise AI Infrastructure: Cloud AI services (such as enterprise OpenAI and Google Gemini APIs) used for natural language processing under strict zero-data-retention enterprise terms.
Cloud Hosting & Databases: Secure, encrypted cloud servers adhering to industry security standards.
Payment Processors: PCI-DSS compliant payment gateways (e.g., Stripe, Lemon Squeezy) to process subscriptions securely without storing raw payment card numbers on our servers.

4. Data Retention and Security

We maintain organizational and technical security controls to safeguard data:

All data in transit is encrypted using modern TLS/SSL (HTTPS) protocols.
Access tokens and confidential integration credentials are encrypted and stored in protected databases with strict role-based access.
We retain conversation logs and analytics for as long as your workspace remains active or as required by applicable laws. You may export or purge conversation histories through your dashboard at any time.

5. User Data Deletion Instructions

In accordance with Meta Platform Terms and global privacy regulations (GDPR, CCPA, DPDP), users and business owners have the right to request deletion of their personal data and all Meta-derived platform data. You can request complete deletion at any time through any of the following methods:

Self-Service Disconnect: You can disconnect any Facebook Page, Instagram Account, or WhatsApp number immediately by navigating to Integrations > Disconnect inside your Diza AI dashboard. This instantly revokes tokens and stops all webhook tracking.
Email Deletion Request: Send an email to help@dizaai.com or support@dizaai.com with the subject line "Data Deletion Request". Specify your registered business email and connected Page/Instagram/WhatsApp ID.
Timeline: Upon receipt of a deletion request, all associated conversation logs, access tokens, customer identifiers, and knowledge base files will be permanently purged from our active databases within 7 business days. A confirmation notice will be emailed once completion is verified.

6. Cookies & Tracking Technologies

Diza AI uses necessary session cookies and analytics cookies to authenticate logged-in clients, preserve user sessions, and analyze platform navigation. You can adjust your browser settings to decline cookies, though certain platform features may require cookies to operate correctly.

7. Children's Privacy

Diza AI is a business-to-business (B2B) platform and does not knowingly collect or solicit personal information from individuals under the age of 18.

8. Contact Us & Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or your data, please contact our team:

Email: help@dizaai.com / support@dizaai.com
Entity: Diza AI / Dizitalsquare
Website: https://dizaai.com