Privacy Policy

Mujib (“Mujib”, “we”, “us”) is a software service operated by AL-Mujib Smart Information Technology Co., a company registered in Jordan and located at Amman, Jordan. You can reach us at info@dev-abdalrahman.com.

Mujib provides businesses with an AI customer-service agent that replies to their customers on WhatsApp, Facebook Messenger, and Instagram Direct Messages. When you message a business that uses Mujib, that business is the controller of your personal data, and Mujib processes that data as a service provider (processor) strictly on the business’s behalf and instructions.

To deliver the service, we process the following on behalf of the business:

• Message content — the text of messages exchanged between end customers and the business.
• Contact identifiers — phone numbers and social media handles or user IDs used on the messaging platform.
• Display names — the profile or display name shown by the messaging platform.
• Conversation history — the record of prior messages used to keep conversations coherent.
• Media — images and voice notes sent in a conversation, and any transcripts derived from voice notes.
• Business account data — for the staff who operate the business account: name, email, and authentication credentials.

We use the information above only to operate the service, specifically to:

• Generate automated customer-service replies on the business’s behalf.
• Retrieve relevant answers from the business’s knowledge base to ground those replies in accurate information.
• Capture and organize leads (e.g. interested customers) for the business.
• Produce analytics and reporting about conversations and service performance.
• Operate, secure, debug, and improve the service.

We do not sell personal data. We share data only with the infrastructure and AI providers needed to run the service, and only to the extent necessary:

• OpenRouter (United States) — large language model inference that generates replies, and the optional text-to-speech voice used for voice replies when a business enables it.
• Groq (United States) — speech-to-text transcription of voice notes.
• Hostinger (France) — hosting of our application servers and database on a virtual private server.
• Meta Platforms, Inc. — delivery of messages on WhatsApp, Facebook Messenger, and Instagram.
• Backblaze B2 (United States) — storage of our encrypted off-site backups. Backups are encrypted before they leave our servers, and Backblaze holds only the encrypted copy.

Each provider processes data only to perform its function for us. We may also disclose information where required by law or to protect our rights and the safety of users.

We retain conversation data, media, and derived data (such as voice-note transcripts) for as long as the business account is active and the data is needed to provide the service. When a business closes its account, or when an end user requests deletion, we delete the associated personal data as described in our Data Deletion Instructions. We may retain limited records where required for legal, security, or accounting purposes.

We apply technical and organizational measures to protect data. Authentication tokens — including WhatsApp session credentials and social platform OAuth tokens — are encrypted at rest using AES-256-GCM. Data is transmitted over encrypted connections (HTTPS), and each business’s data is logically isolated from other tenants. No method of transmission or storage is completely secure, but we work to protect your information.

Depending on your location, you may have the right to access, correct, or delete your personal data, or to restrict or object to certain processing. Because the business you contacted is the controller of your data, you can exercise these rights by contacting that business directly, or by contacting us at info@dev-abdalrahman.com and we will route your request appropriately. To request deletion, see our Data Deletion Instructions.

Our servers and database are hosted in France. The AI providers listed in section 4 process data in the United States, and our encrypted off-site backups are stored with Backblaze B2 in the United States as well. If you are located elsewhere, your data is therefore transferred outside your country, and we rely on those providers’ safeguards for such transfers.

The service is intended for businesses and their customers, and is not directed to children. We do not knowingly collect personal data from children.

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above. Material changes will be communicated through the service where appropriate.

For any privacy question or request, contact AL-Mujib Smart Information Technology Co. at info@dev-abdalrahman.com, Amman, Jordan.