Privacy Policy

Gahez AI Agent ("Gahez", "we") provides software that lets a business connect its own messaging channels and have an AI agent reply to that business's customers. The business that connects a channel is the data controller for its customer conversations. Gahez acts as a data processor on that business's behalf.

• Account data. The business name, your name, your email address, and a hashed password. Passwords are stored as bcrypt hashes and are never recoverable.
• Channel credentials. Access tokens issued by Meta when you connect a Facebook Page, Instagram account, or WhatsApp Business number, and the access and refresh tokens issued by TikTok when you connect a TikTok Business Account. These are encrypted at rest with AES-256-GCM and are used only to receive and send messages and comment replies on the channel you connected.
• Conversation content. Messages your customers send to your connected channels, the replies produced by the agent or by your team, and the sender's public profile name and picture as provided by Meta.
• Contact details volunteered by customers. When a customer states a name, phone number, or email inside a conversation, the agent records it so your team can follow up.
• Operational logs. Webhook delivery records and error traces. Access tokens and passwords are redacted from all logs.

• To deliver messages to your channel and generate replies on your behalf.
• To send conversation text, and the business information you configured, to our AI model provider so that a reply can be generated: Google's Gemini API by default, or Anthropic's Claude API where a business is configured for it. They process it under their API terms for business customers. We use the paid tiers of both APIs, under which Google and Anthropic do not use this content to train or improve their models.
• To show you an inbox, your leads, and basic usage statistics.
• To detect abuse, debug failures, and keep the service running.

We do not sell personal data, we never use your customers' data or conversations for advertising, and we do not use one business's data to serve another. Each business's data is isolated by tenant and every query is scoped to that tenant.

• Meta Platforms — to receive and send messages on the channels you connect.
• TikTok — to read comments on the videos of a TikTok Business Account you connect and to post the replies, through the TikTok API for Business.
• Google (Gemini API) — to generate agent replies from conversation content. This is the default model provider.
• Anthropic (Claude API) — the same, for businesses configured to use it.
• Google (Sheets and Calendar APIs) — only when you connect them: to write your leads to your spreadsheet and to check and book times in your calendar.
• Our hosting provider — to run the servers and databases that store this data.
• Meta and Google, for measuring our own ads — see the next section. This covers visitors to our website and people who sign up for Gahez, never your customers' conversations.
• Authorities — only where we are legally required to do so.

We advertise Gahez on Facebook and Instagram and measure which ads bring sign-ups. For that, our public pages use Google Analytics and the Meta Pixel, and our server uses the Meta Conversions API. We store a first-party cookie with the ad parameters of your first visit (UTM tags, the Facebook click id and the page you landed on) and keep them with your account so we know which ad brought it.

When you sign up, verify your email or pay, we send Meta the event (for example "CompleteRegistration" or "Purchase" with the amount in EGP), your email address, name and phone number hashed with SHA-256 (never in plain text), your account id (also hashed), your IP address and browser user agent, and Meta's own click and browser cookies (_fbc, _fbp). Meta uses this to match the event to an ad and report it to us. We do not send Meta the content of any conversation, and none of this applies to your customers or the channels you connect.

You can block these cookies in your browser or with an ad blocker without losing any feature of Gahez. To ask us to stop, write to the address below.

بنستخدم Google Analytics و Meta Pixel و Meta Conversions API عشان نقيس إعلاناتنا إحنا على فيسبوك وإنستجرام: أنهي إعلان جاب أنهي تسجيل. لما تسجّل أو تأكد إيميلك أو تدفع، بنبعت لميتا الحدث نفسه، وإيميلك واسمك ورقمك متشفّرين بـ SHA-256 (مش نص صريح)، وعنوان الـ IP ونوع المتصفح، وكوكيز ميتا. مش بنبعت أي محتوى من محادثات عملاءك، والكلام ده مالوش علاقة بعملاءك ولا بالقنوات اللي بتربطها.

A business can connect its own Google account to Gahez for two optional features. Each one uses its own Google consent, separate from "Sign in with Google", and asks only for the access that feature needs.

• Google Sheets (scope drive.file). Gahez can open only the spreadsheet you pick in Google's file picker, or the one it creates for you, and nothing else in your Drive. We use it for one thing: appending a row for each lead the agent captures (date in Cairo time, name, phone, email, channel, note, a link to the conversation). We store the spreadsheet's id and name.
• Google Calendar (scopes calendar.events and calendar.readonly). We read the list of calendars you can write to, so you can choose one, and the busy/free times of that calendar, so the agent never offers a time you are not available. We create an event only when one of your customers books an appointment, and delete it only when you cancel that booking from Gahez. We do not read the titles, descriptions or attendees of your other events, and we never edit or delete events Gahez did not create. We store the bookings we made (time, customer name and phone, conversation) so your team can see and cancel them.

The OAuth refresh token Google issues is encrypted at rest with AES-256-GCM and used only by our servers; it is never sent to your browser. Disconnecting a feature in Gahez revokes the token with Google and deletes it. You can also remove Gahez at any time from myaccount.google.com/permissions.

Limited Use. Gahez's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Data from Google Sheets and Google Calendar is used only to provide the features described above to the business that connected it. It is not used for advertising, not sold, not used to train or improve AI models, not transferred to anyone except as needed to provide these features, comply with law, or as part of a merger with notice, and no person at Gahez reads it unless you ask us to for support, it is needed for security or abuse investigation, or the law requires it.

جوجل شيت وجوجل كالندر اختياريين، وكل واحد ليه موافقة لوحده من جوجل منفصلة عن الدخول بجوجل. في جوجل شيت (صلاحية drive.file) جاهز بيوصل للشيت اللي انت بتختاره أو اللي بيعملهولك بس، مش للدرايف كله، وبيضيف فيه صف لكل عميل محتمل. في جوجل كالندر بنقرا قايمة الكالندرات والأوقات المشغولة بس عشان منعرضش ميعاد انت مش فاضي فيه، وبنضيف حدث لما عميل يحجز، ونمسحه لما انت تلغي الحجز من جاهز. مش بنقرا تفاصيل مواعيدك التانية ولا بنعدّل حاجة احنا ماعملناهاش. توكن جوجل متشفّر عندنا وبيتلغي ويتمسح أول ما تفصل الربط. استخدامنا لبيانات جوجل ملتزم بسياسة Google API Services User Data Policy وشروط Limited Use: مش بنستخدمها في إعلانات، ولا بنبيعها، ولا بندرّب بيها أي ذكاء اصطناعي، ولا حد من فريقنا بيقراها إلا لو انت طلبت دعم أو القانون طلب.

A business can connect its own TikTok Business Account through TikTok's consent screen (TikTok API for Business, TikTok Accounts permissions). With that permission Gahez:

• reads the account's username, display name and profile picture, to show which account is connected;
• lists the account's own recent videos and the comments under them (the comment text, its time, and the commenter's public display name or username as TikTok provides them), and receives TikTok's notifications of new comments;
• posts one public reply, as the business, under a comment the agent answers, and hides a comment when it is spam or abuse or when the business chooses to. Gahez never deletes comments, never comments on other accounts' videos, and never likes, follows or posts videos.

Comment text is sent to our AI model provider (above) only to write the reply. TikTok data is used only to provide this feature to the business that connected the account: it is not sold, not used for advertising, and not used to train AI models. Direct messages on TikTok are read and answered only if the business turns that feature on after TikTok approves it for Gahez, under the same rules, and only inside the 48-hour window TikTok allows after the customer writes.

The access token (valid one day) and refresh token (valid one year) are encrypted at rest with AES-256-GCM and never sent to a browser. Disconnecting TikTok in Gahez revokes the token with TikTok and deletes the channel with its comments. The owner can also remove Gahez at any time from the TikTok app's settings (Security and permissions, then Manage app permissions).

تقدر تربط حساب تيك توك بيزنس بتاعك بجاهز من شاشة موافقة تيك توك نفسها. بعد الموافقة، جاهز بيقرا اسم الحساب وصورته، وآخر فيديوهاتك والكومنتات اللي عليها (نص الكومنت ووقته واسم صاحبه زي ما تيك توك بيديه)، وبيكتب رد واحد علني باسمك تحت الكومنت، وبيخفي الكومنت لو سبام أو إساءة أو لو انت طلبت. جاهز مش بيمسح كومنتات، ومش بيعلّق على فيديوهات حد تاني، ومش بيعمل لايك ولا فولو ولا بينشر فيديوهات. نص الكومنت بيروح لمزوّد الذكاء الاصطناعي بس عشان يتكتب الرد. مش بنبيع بيانات تيك توك، ولا بنستخدمها في إعلانات، ولا بندرّب بيها أي ذكاء اصطناعي. الرسايل الخاصة على تيك توك مش بتتقري ولا بيترد عليها إلا لو انت فعّلتها بعد موافقة تيك توك، وجوه الـ 48 ساعة اللي تيك توك بيسمح بيها. توكنز تيك توك متشفّرة عندنا، وأول ما تفصل الحساب من جاهز بنلغي التوكن عند تيك توك ونمسح القناة والكومنتات بتاعتها.

Conversations and leads are retained while your account is active, so that your team has history and context. When you delete a channel, its access tokens, conversations, messages, and leads are deleted with it. When you delete your account, everything belonging to your business is deleted within 30 days. Backups are purged on their own rolling schedule, not longer than 90 days.

You can access, correct, export, or delete your data from the dashboard, or by writing to us. If one of your customers asks you to delete their conversation, you can delete it from the inbox, or ask us and we will action it. Anyone who used Facebook Login with Gahez can also trigger deletion from Facebook directly, and our callback removes the connected channel and everything under it. See our data deletion page.

Channel access tokens are encrypted at rest with AES-256-GCM. All traffic runs over HTTPS. Every webhook we accept is verified against its HMAC signature (X-Hub-Signature-256 from Meta, TikTok-Signature from TikTok) before it is processed. Tenant data is isolated at the query layer, and secrets are redacted from logs. No system is perfectly secure, and we will notify affected businesses without undue delay if a breach occurs.

Questions about this policy, or a data request: privacy@gahez.space.