Privacy Policy

1. Who we are

AlbTech Agents (the "Service"), available at agents.albtechsolutions.com and albtechagents.com, is operated by AlbTech Solutions Group SHPK, a company registered in Albania with NIPT M51909507Q, located at Durana Tech Park, Tirana, Albania ("AlbTech", "we", "us").

The Service lets businesses create a workspace, connect their own WhatsApp Business Account through Meta's Embedded Signup, and deploy AI agents that handle specific business tasks such as reservations, orders and customer support.

For any privacy question or request, write to info@albtechsolutions.com or to the postal address above.

2. Our two roles

We handle personal data in two different capacities, and this policy explains both.

• As controller for data about the businesses that use the Service and their team members: account, billing, support and website data. We decide why and how this data is used.
• As processor for data about the customers of those businesses ("End Customers"), mainly the WhatsApp messages they exchange with a business. The business is the controller of that data and decides how its agents use it. We process it only on the business's documented instructions, under our Data Processing Agreement.

If you are an End Customer and want to exercise your rights, contact the business you were messaging. We will help that business respond, and you can also write to us directly at info@albtechsolutions.com.

3. What we collect

Account and business data

• Name, work email, phone number, job role and password (stored only as a salted hash).
• Company name, legal details, tax number, country and billing address.
• Workspace settings, team members, roles and invitations.
• Invoices and payment status. Card details are handled by our payment provider; we never store full card numbers.

Data we receive from Meta when you connect WhatsApp

When a business completes Embedded Signup and grants permissions to the Service, Meta shares with us:

• The Meta business portfolio ID, WhatsApp Business Account ID, phone number ID and display phone number.
• The verified business name and the WhatsApp business profile (description, address, website, profile picture).
• Message templates, their approval status, phone number quality rating and messaging limits.
• An access token that lets the Service act on that WhatsApp Business Account, limited to the permissions granted.
• The name and Facebook user ID of the person who completed the signup, and the permissions they granted.

End Customer data (processed for the business)

• WhatsApp phone number, or the WhatsApp username and business scoped user ID where the number is not shared, and the profile name.
• Messages and media sent to or by the business, with timestamps and delivery and read statuses.
• Opt in and opt out records for business initiated messages.
• Details the agent collects to complete its task, for example a reservation time, party size or order lines.

Content the business provides

Menus, catalogs, price lists, opening hours, documents, rules and integration settings used to configure agents.

Technical data

Log data such as IP address, browser type, pages visited, timestamps and error reports, collected to run and secure the Service. We use only strictly necessary cookies, for example to keep you logged in. We do not use advertising cookies.

4. How and why we use it

5. How we treat data received from Meta

Data we receive through Meta's platform, including WhatsApp Business Account data and message content, is used only to provide the Service to the business that connected it, and only as permitted by the Meta Platform Terms, the Meta Developer Policies, the Meta Terms for WhatsApp Business Platform and the WhatsApp Business Messaging Policy. We keep each business's data separate from every other business. In particular:

• We do not sell, license or rent this data, and we do not buy data about End Customers.
• We do not use it for advertising, for building profiles of End Customers, or for any purpose of our own.
• We do not use it to train or fine tune AI models, and our AI model providers are not permitted to use it for training.
• We do not use it to make decisions about anyone's eligibility for credit, employment, housing, insurance or similar.
• We share it only with the service providers listed in section 7, under written contracts, or where the law requires.
• We delete it when the business disconnects WhatsApp or deletes its workspace, when it is no longer needed, or when Meta or the person concerned asks us to, as described in section 9 and on our Data Deletion page.

6. How the AI agents work

When an End Customer writes to a business, the message, the recent conversation and the business's own configuration (for example its menu or catalog) are sent to an AI model to draft a reply. The reply is limited to the task and the information the business has set up. Agents tell End Customers that they are talking to an AI agent, and a member of the business's team can take over any conversation. End Customers can ask for a person at any time.

Agents do not make decisions that have legal or similarly significant effects on End Customers. They complete routine tasks such as booking a table or recording an order, which the business can review and change.

7. Who we share data with

We use a small number of service providers (sub processors) who process data only on our instructions:

The current list of sub processors is kept in our Data Processing Agreement. We may also disclose data if required by law, to protect the rights and safety of people, or as part of a merger or acquisition, in which case this policy continues to apply.

8. Where data is stored and transferred

The Service is hosted in the European Union. Our team works from Albania, and some providers are located in the United States. When personal data of people in the European Economic Area is accessed from or transferred to a country without an adequacy decision, we use the European Commission's Standard Contractual Clauses or another valid transfer mechanism, together with technical safeguards such as encryption.

9. How long we keep data

10. Security

• Each workspace is isolated at the database level, so one business can never read another's data.
• Data is encrypted in transit with TLS and at rest. Meta access tokens are additionally encrypted with separate keys.
• Access for our staff is limited to people who need it, protected with multi factor authentication, and logged.
• We monitor the Service for abuse and will notify affected businesses and authorities of a personal data breach as the law requires.
• Found a vulnerability? Report it as described on our Security page. We answer every report.

11. Your rights

Depending on where you live, you can ask us to access, correct, delete, restrict or export your personal data, object to processing based on legitimate interests, and withdraw consent at any time. Write to info@albtechsolutions.com. We reply within one month and may ask you to confirm your identity first.

You can also complain to a supervisory authority: in Albania, the Information and Data Protection Commissioner (Komisioneri për të Drejtën e Informimit dhe Mbrojtjen e të Dhënave Personale), or the data protection authority of your country in the European Union.

12. Deleting your data

You can delete your workspace from the Service, disconnect the app from your Meta Business settings, remove it from your Facebook settings, or email info@albtechsolutions.com. Every option is explained step by step on the Data Deletion page.

13. Children

The Service is for businesses and is not directed at children. We do not knowingly collect data from anyone under 16 for our own purposes.

14. Changes to this policy

We will post any change on this page and update the date at the top. If a change is significant, we will tell account owners by email at least 30 days before it takes effect.

15. Contact

AlbTech Solutions Group SHPK
Durana Tech Park, Tirana, Albania
Email: info@albtechsolutions.com
Phone: +355 69 568 1721