Privacy policy
Last updated: 8 November 2026
Smart Agent is an iPhone app that answers a store's Instagram, Facebook and WhatsApp messages and comments with an AI agent. It is run by Doaa Khaled Mohammad Alsafadi, Jordan ("we", "us"). This policy explains what data we handle, why, and what you can do about it. Questions: support@smartagent.social.
Who is responsible for what
- For store owners who use the app, we decide how your account data is used.
- For the customers who message a store, the store is responsible for their data. We process it on the store's behalf, only to answer their messages and record their orders.
Data from store owners
- Account: your email address and password. The password is stored hashed by our login provider; we can't see it.
- Store details: store name, currency, phone, address, working hours, delivery, payment and return details, and how you want the agent to reply.
- Products: names, prices, sizes, colors, stock and the photos you upload.
- Connected accounts: when you connect Instagram, Facebook or WhatsApp, we get access to that business account's messages and comments, so the agent can read and answer them, and to publish posts you ask us to publish.
- Subscription: Apple handles payment. We receive your subscription status (active, renewal date, refunds) through RevenueCat. We never see your card details.
- Usage records: how many AI requests your store used and what they cost, without the message text.
Data about a store's customers
- Messages and comments customers send to the store are read when they arrive, so the agent can reply. Photos a customer sends are passed to the AI to find matching products and are not saved.
- Conversation records: the customer's name and username, when they last wrote, and whether the agent or the store owner is replying.
- Orders placed through the agent: name, username, phone, delivery address, items, notes, and any return request.
- We don't keep a copy of the conversations themselves; they stay on Instagram, Facebook or WhatsApp. Our automation server keeps technical logs, which can include message text, for up to 14 days to fix problems. Its backups are deleted after another 14 days.
How we use data
- To run the app: log you in, show your products, orders, conversations and insights.
- To let the agent answer customers, send product photos, and create orders and return requests.
- To manage your subscription.
- To keep the service secure and fix problems.
We don't sell data, we don't use it for advertising, and we don't use customer conversations to train AI models.
Service providers
These companies process data for us, only to run Smart Agent:
| Provider | What for | Where |
|---|---|---|
| Supabase | Database, login, product photos | Frankfurt, Germany |
| Hetzner | Automation server | Germany |
| Anthropic (Claude) | The AI that writes replies. Anthropic doesn't train its models on this data. | United States |
| Zernio | Connection to Instagram, Facebook and WhatsApp | United States |
| Meta | Instagram, Facebook and WhatsApp, where the conversations live | Worldwide |
| Apple, RevenueCat | Subscription payments and status | United States |
When data goes to a provider outside your country, we rely on that provider's contractual safeguards, such as the EU Standard Contractual Clauses.
How long we keep data
- Account, store, product, order and conversation data: while your account exists.
- Technical logs: up to 14 days, and up to 28 days in backups.
- When you delete your account, its data is deleted at once, and from our providers' backups within 30 days. See how to delete your account.
Your rights
You can ask for a copy of your data, ask us to correct it, or delete it, by emailing support@smartagent.social. Depending on where you live (for example under the EU GDPR, or the data protection laws of Saudi Arabia or the UAE) you may also object to some uses or complain to your data protection authority.
If you're a customer of a store that uses Smart Agent, contact the store first. We'll help the store answer your request.
Security
Data is encrypted in transit (HTTPS) and stored by our providers with encryption at rest. Each store can only see its own data.
Children
Smart Agent is a business tool and isn't meant for anyone under 18.
Changes
If we change this policy, we'll update the date above. If the change is significant, we'll tell you in the app.