Privacy Policy

01Who we are

Macrosbit ("Macrosbit", "we", "us") is a business software company based in Kuwait. We build HR and payroll software, Macrosbit Chatbit (a shared inbox for WhatsApp, Instagram, email and SMS), document management software, websites and apps.

02What this policy covers

This policy applies to:

• our website, macrosbit.com;
• our software and apps, including Macrosbit Chatbit and our Meta app that connects to the WhatsApp Business Platform (Cloud API), the Facebook Graph API and the Instagram API;
• support, sales and demo conversations with us.

Our two roles. When businesses ("customers") use Chatbit to talk to their own clients ("end users") on WhatsApp or Instagram, the business decides what messages are sent and why. For that message data, the business is the controller and Macrosbit acts as a service provider (processor) working on the business's instructions. For our own website visitors, customers' account details and our own marketing, Macrosbit is the controller.

If you are an end user who messaged a business that uses Chatbit, that business's own privacy policy also applies to you, and you can contact it directly about your data.

03Information we collect

Information you give us

• Contact and demo requests: name, company, email address, phone number, the product you are interested in and your message.
• Account information: names, business email addresses, phone numbers, job roles and login details of the people a customer adds to Chatbit.
• Billing information: company name, billing contact and invoice details.
• Support requests: what you tell us when you ask for help.

Information collected automatically

• Technical data: IP address, browser and device type, and pages visited, recorded in standard server logs.
• App usage data: sign-in times, actions taken in the app and error logs, used to run and secure the service.

04Data we receive from WhatsApp and Meta

When a business connects its WhatsApp Business Account, Facebook Page or Instagram professional account to Chatbit, it authorises our Meta app to access data through Meta's APIs. We only request the permissions needed to provide the features the business uses.

05How we use information

• To provide the service: receiving, storing and showing messages in the Chatbit inbox, sending the business's replies and templates through the WhatsApp Cloud API, assigning conversations to team members and showing delivery status.
• AI-assisted features: where a business turns them on, Macrosbit AI processes message content to suggest replies, summarise conversations or route messages. These results are shown only to that business. We do not use one business's message content to serve another business.
• To support and secure the service: answering support requests, fixing problems, preventing abuse and spam, and keeping accounts secure.
• To run our business: answering demo requests, billing, and meeting legal and tax obligations.
• To communicate with customers: service notices and, with permission where the law requires it, product news. You can unsubscribe at any time.

We process information because it is needed to perform our contract with the business, because of our legitimate interest in running and securing the service, because the law requires it, or with consent where consent is required.

06How we share information

We do not sell personal information. We share it only with:

• The business you are talking to: conversations are visible to the authorised team members of the business that owns the connected account.
• Meta Platforms and WhatsApp: outgoing messages and related data go through Meta's APIs so they can be delivered. Meta handles this data under its own terms and privacy policy.
• Service providers: hosting, data storage, email and AI processing providers that work on our instructions, under confidentiality and data protection obligations, and only as far as needed to provide the service.
• Legal and safety: authorities or others when the law requires it, or when needed to protect the rights, safety or property of our customers, end users, Macrosbit or the public.
• Business transfers: a successor if Macrosbit is merged or acquired, under the same protections as this policy.

07How long we keep information

• Messages and contacts are kept for as long as the business's Chatbit account is active, or for a shorter period the business chooses.
• When a business disconnects its WhatsApp, Facebook or Instagram account, we stop receiving new data from it and revoke the stored access tokens straight away.
• When an account is closed or deletion is requested, we delete or anonymise the related data within 30 days, except where the law requires us to keep certain records, such as invoices.
• Server logs are kept for up to 90 days.
• Backups are overwritten on a rolling basis, and deleted data is cleared from them within a further 30 days.

08Data deletion instructions

You can ask us to delete your data at any time.

If you are a business using Chatbit

• Disconnect your WhatsApp, Facebook or Instagram account in Chatbit settings, or remove the Macrosbit app in Meta Business Settings under Integrations › Business integrations. This stops our access straight away.
• To delete all data we hold for your business, email info@macrosbit.com from an account admin's address with the subject "Data deletion request" and your business name.

If you messaged a business that uses Chatbit

• Contact that business first, since it controls your conversation with it.
• You can also email info@macrosbit.com with the subject "Data deletion request", the phone number or Instagram username you used, and the name of the business. We will pass your request to that business and help it carry out the deletion.

09Security

We protect information with measures that include encryption in transit (HTTPS/TLS), encrypted storage of access tokens, access limited to authorised staff by role, regular updates and monitoring. No system is completely secure. If a breach affects your data, we will inform the affected business and, where the law requires it, the people affected and the authorities, and we will tell Meta where its terms require it.

10Your rights

Depending on where you live, you may have the right to:

• see the personal information we hold about you;
• correct it if it is wrong;
• have it deleted;
• object to or limit how we use it;
• receive a copy in a portable format;
• withdraw consent where we rely on consent.

To use any of these rights, email info@macrosbit.com. We reply within 30 days. If we hold your data on behalf of a business, we will pass your request to that business and help it respond.

11International transfers

We and our service providers, including Meta, may process information outside your country. Where we transfer it, we take steps to keep it protected as this policy describes and as the law requires.

12Children

Our products are business tools and are not meant for children. We do not knowingly collect information from children under 13, or under the minimum age set by local law. If you think a child has given us information, contact us and we will delete it.

13Changes to this policy

We may update this policy as our products or the law change. We will change the "Last updated" date at the top and, for important changes, tell customers by email or in the app before the change takes effect.

14Contact us

For privacy questions, requests or complaints: