Privacy Policy

Last updated: 29 July 2026

1. Who we are

SamurAI is a conversational AI platform operated by Murad Logistics LLC (Общество с ограниченной ответственностью «Мурад Логистикс»), registration number 308582-3301-ООО, Tax ID (ИНН) 01909202410621, registered at 1 Kalyk Akiev Street, Sverdlovsky District, Bishkek, Kyrgyz Republic (ул. Калык Акиева 1, Свердловский район, г. Бишкек, Кыргызская Республика).

In this policy, "we", "us" and "SamurAI" mean Murad Logistics LLC. You can reach us at Murad@muradlogist.com or +996 500 888 240.

2. Two kinds of people this policy covers

Business Customers. Businesses that hold a SamurAI account and connect their own messaging channels to our platform.

End Users. People who send messages to a Business Customer through a connected channel and receive replies generated by SamurAI.

For End User data, the Business Customer is the data controller and SamurAI acts as the data processor on their instructions.

3. Data we collect from Business Customers

• Account details: name, email address, phone number, company name, password hash
• Billing details: plan, invoices, payment status. Card numbers are handled by our payment processor and never stored by us.
• Configuration you create: agent instructions, business documents, FAQs and policies you upload as knowledge for your agent
• Technical logs: IP address, browser type, timestamps, error traces

4. Data we receive through the WhatsApp Business Platform, Instagram and Messenger

When you connect a channel, we receive from Meta only what is needed to deliver the service:

WhatsApp Business Platform (via our provider Twilio):

• Your WhatsApp Business Account (WABA) ID and business phone number ID
• Your business display name and profile details
• Message content, timestamps and delivery status for conversations in that account
• End User phone numbers and WhatsApp profile names

Instagram Messaging (instagram_business_basic, instagram_business_manage_messages, human_agent):

• Connected Instagram Business account username, account ID and profile picture
• Direct message content, timestamps and message IDs
• Sender username and Instagram-scoped ID

Facebook Messenger (pages_messaging, pages_show_list, pages_manage_metadata, business_management):

• Connected Page ID and Page name
• Message content, timestamps and message IDs
• Sender Page-scoped ID and public profile name

We use this data for exactly one purpose: routing incoming messages to the correct Business Customer's AI agent, generating a reply, and displaying the conversation in that customer's inbox. Nothing else.

5. What we never do

• We never sell, rent or trade personal data.
• We never use Meta platform data for advertising, ad targeting or audience building.
• We never use your business documents, conversations or End User messages to train AI models. Our AI providers process your data on a zero-retention basis and are contractually barred from training on it.
• We never scrape Instagram, WhatsApp or Facebook, and we never send unsolicited or cold messages. SamurAI only replies inside conversations an End User has started, or sends messages a Business Customer is permitted to send under Meta's policies.
• We never share data between Business Customers. Every account is logically isolated.

6. Automated replies and AI disclosure

Replies are generated by artificial intelligence. Every SamurAI agent discloses that it is an automated assistant at the start of a conversation, and every conversation offers a route to a human. Business Customers cannot disable this disclosure.

7. How long we keep data

When an End User deletes a message on WhatsApp, Instagram or Messenger, we receive a deletion event from Meta and remove our stored copy of that message within 24 hours.

8. Who else processes your data

• Twilio Inc. — WhatsApp message delivery
• Meta Platforms, Inc. — WhatsApp, Instagram and Messenger delivery
• Vercel Inc. — application hosting
• Our AI model provider — reply generation, on a zero-retention basis
• Our database and storage provider — encrypted data at rest
• Our payment processor — billing

Each is bound by a data processing agreement. We do not add processors that would use your data for their own purposes.

9. Where data is processed

Data is processed on servers outside the Kyrgyz Republic, including in the European Union and the United States. Transfers rely on the standard contractual protections offered by each processor.

10. Security

Encryption in transit (TLS 1.2+) and at rest. Access tokens are stored encrypted. Access to production data is limited to named personnel and logged. Passwords are hashed and never recoverable.

11. Your rights

You may request access to your data, correction of it, export of it, restriction of processing, or deletion of it. Email Murad@muradlogist.com and we will respond within 30 days.

End Users: contact the business you were messaging, since they control that conversation. If you cannot reach them, email us and we will act on your request or route it to them.

Deletion instructions are on our Data Deletion page.

12. Children

SamurAI is not for anyone under 16. We do not knowingly collect data from children. If you believe we have, email us and we will delete it.

13. Changes

We will post any change on this page and update the date above. Material changes are emailed to Business Customers at least 14 days before they take effect.

14. Contact