Privacy Policy

Adash ("we", "our", "us") is an AI-powered business automation platform that helps businesses automate customer communication. Our AI agent knows your business, handles incoming messages from clients, qualifies leads, and notifies you — so you never miss a customer while you're busy.

This Privacy Policy explains how we collect, use, store, and protect personal information in connection with our service. By using Adash, you agree to the practices described in this policy.

2.1 Business Account Information

When you register, we collect:

• Business name and industry (niche)
• Email address and password (stored as a secure hash — we never store plaintext passwords)
• Telegram Bot token and owner Telegram chat ID
• WhatsApp Business phone number and access credentials (when WhatsApp integration is enabled)
• Instagram Business Account ID and access token (when Instagram integration is enabled)

2.2 Messaging Data

To operate the automated response service, we process:

• Incoming messages from your customers via Telegram (and WhatsApp or Instagram DMs when those integrations are enabled)
• AI-generated outgoing replies sent on behalf of your business
• Conversation history per customer — used to maintain context so the agent gives coherent answers
• Telegram user IDs and display names
• Customer phone numbers and WhatsApp user IDs (when WhatsApp integration is enabled)
• Instagram user IDs and display names (when Instagram integration is enabled)

We do not sell or share your customers' messages with any third parties, except as strictly necessary to operate the service (see Section 4).

2.3 Knowledge Base Content

Text and documents you upload to configure your AI agent (product descriptions, FAQs, pricing, etc.) are stored and converted to vector embeddings to generate accurate, contextually relevant responses on your behalf.

2.4 Usage & Billing Data

We track the number of conversations processed each month to enforce subscription plan limits, calculate overage charges ($0.03 per dialogue over the monthly quota), and monitor platform health. No individual message content is used for billing calculations — only conversation counts.

4.1 Meta Platforms — WhatsApp, Instagram & Threads

Adash is integrating the WhatsApp Business Cloud API and the Instagram Graph API (Messaging scope), both provided by Meta Platforms, Inc. These integrations are currently pending Meta platform approval. Once enabled, messages will transit Meta's infrastructure in accordance with Meta's Privacy Policy.

We request only the permissions strictly required to receive incoming customer messages and send replies on behalf of a connected business. We do not access profile data, follower lists, media content, or any other data beyond direct messages in the connected business inbox.

4.2 Anthropic — AI Processing

Customer messages and relevant knowledge-base context are processed by Claude, an AI model developed by Anthropic, PBC, to generate replies. We use Anthropic's API under terms that do not permit your data to be used for training AI models. Data sent to Anthropic is governed by Anthropic's Privacy Policy.

4.3 Voyage AI — Embeddings

Knowledge base documents are converted to vector embeddings using Voyage AI. Only the text content of your uploaded knowledge base files is sent for embedding — no customer message data is processed by Voyage AI.

4.4 Infrastructure

The platform runs on a VPS with Docker Compose. Customer data is stored in a PostgreSQL database and Redis cache on our servers. All data in transit is encrypted with TLS 1.2+. Access tokens and credentials are encrypted at rest using AES-256.

Adash is a B2B platform. Our customers are business owners who connect their own WhatsApp Business accounts and/or Instagram Business accounts to automate their customer service. Adash acts as a data processor on behalf of the business (the data controller) — we process messages only at the instruction of and for the benefit of the connected business.

Permissions requested

What we do with message data

• Receive the incoming customer message via Meta webhook
• Retrieve relevant business context from the knowledge base (via vector search)
• Pass the message and context to our AI agent to generate a contextual, on-brand reply
• Send the AI-generated reply back through the WhatsApp Business Cloud API, Instagram Graph API, or Threads API
• Store the exchange in our database to maintain conversation continuity for future messages
• Display the conversation to the business owner in their admin dashboard
• Optionally send the business owner a real-time lead notification via Telegram

What we do NOT do

• We do not use message content for advertising or to build advertising profiles
• We do not sell or license message data to third parties
• We do not use message content to train or fine-tune AI models
• We do not access messages from accounts we are not authorised to serve
• We do not store messages beyond what is necessary for the automated response service

This usage complies with the Meta Platform Terms, WhatsApp Business Policy, and Meta's Data Use Policy for Messaging APIs.

• Access tokens and credentials are encrypted at rest with AES-256
• All data in transit is encrypted with TLS 1.2+
• Passwords are stored as bcrypt hashes — we never store or transmit plaintext passwords
• Production database access is restricted to the application server and authorised team members only
• JWT tokens are short-lived and verified on every request

No method of Internet transmission is 100% secure. We cannot guarantee absolute security, but we take reasonable steps to protect your information at all times.

• Access — request a copy of the personal data we hold about your business
• Correction — update inaccurate information directly in the Settings page
• Deletion — request full deletion of your account and all associated data
• Portability — request an export of your conversation history in machine-readable format
• Revoke channel access — disconnect WhatsApp or Instagram at any time from the Settings page; this immediately stops all message processing and deletes the corresponding access token

To exercise any of these rights, contact us at the address in Section 10. We will respond within 30 days.

Adash is a B2B platform intended for business owners and their teams. We do not knowingly collect personal information from individuals under the age of 18. If you believe we have inadvertently collected such information, please contact us immediately and we will delete it.

For questions about this Privacy Policy, data access requests, or to exercise your rights, please contact us:

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For material changes, we will notify connected business accounts via the admin panel or by email. Continued use of Adash after changes constitutes acceptance of the updated policy.