MITR.AI

Privacy Policy

Last Updated: June 30, 2026

At MITR.AI, we take your privacy and data security with absolute seriousness. This Privacy Policy outlines the specific mechanisms, boundaries, and security measures we employ to process, store, and safeguard data when you interact with our website, our corporate platform, or when your customers engage with our communication pipelines.

1. Scope of Data Processing

MITR.AI operates as an Adaptive Proactive Conversational AI Platform and is classified as a **Data Processor** under standard regulatory frameworks. We process customer metadata, phone numbers, email addresses, order histories, fee details, and conversational text turns strictly on behalf of, and under the explicit instructions of, our registered business clients (e.g., schools, merchants, clinics, and enterprises).

2. Information We Collect & Intercept

  • WhatsApp Metadata & Phone Numbers: To deliver real-time support tickets, automated fee notifications, and commerce carts, we process the user's phone number and the user identifiers provided by Meta's WhatsApp Business APIs.
  • Conversational Ingestion: Chat logs, support queries, leave-of-absence descriptions, and voice audio are processed so our AI can understand requests and respond accurately on behalf of your business.
  • Platform Administration Data: When prospective merchants register via our Embedded Signup SDK, we securely retrieve WABA ID and company registration scopes.

3. How We Use and Share Data

We strictly **do not sell, rent, or lease** customer database profiles, transaction logs, or chat turns to third parties. All data processing is strictly limited to:

  • Fulfilling automated business workflows (such as synchronizing parent payments to local ERP systems or dispatching leave exceptions to class teachers).
  • Generating secure, single-use sign-in links to enable passwordless dashboard logins.
  • Executing merchant-initiated notifications and campaigns.

4. Encryption and Storage Boundaries

All collected information is encrypted **both in transit and at rest**. Each client's conversational data is isolated using strict tenant-level access boundaries in our secure databases. Real-time voice calls use direct, encrypted connections with no intermediate disk storage of the audio.

5. WhatsApp Business Data

We process WhatsApp message content and metadata solely to provide conversation services to the businesses we act for — displaying chat history, powering automated replies and notifications, and managing message templates. WhatsApp data is never sold, rented, or shared with third parties, and is never used for advertising. Businesses retain full ownership of their WhatsApp Business Account and phone number; disconnecting the app (or a data-deletion request) revokes our stored credentials and erases the associated data per this policy. See our Data Deletion page.

6. Your Rights and Compliance

Merchants and individual subscribers retain full rights to request the deletion or retrieval of their historical conversational transcripts and registered contact records. Such inquiries can be formally raised by contacting our data protection officer at contact@mitrai.co.in.