Privacy Policy

This Privacy Policy explains how SAV Group, LLC, the company behind Merkoria ("we", "us", or "our"), collects, uses, stores, and protects information when you use our messaging and customer-engagement platform (the "Service"). The Service helps businesses manage conversations and content across messaging channels — including WhatsApp Business, Instagram, and Facebook — from a single workspace. By using the Service, you agree to the practices described in this policy.

1. Information We Collect

We collect the following categories of information:

• Account information — name, email address, and workspace details you provide when creating an account.
• Connected channel data — when you connect a WhatsApp Business, Instagram, or Facebook account, we access information you authorize, such as your business profile, connected accounts and pages, and channel identifiers.
• Conversations and content — messages, comments, and related media exchanged between your business and your customers through connected channels, so they can be displayed and managed in your unified inbox.
• Profile information of connected accounts — public profile details such as username, display name, profile picture, follower counts, and biography, where the relevant platform makes them available.
• Usage and technical data — log data, device and browser information, and basic analytics used to operate and secure the Service.

2. How We Use Information

• To provide, operate, and maintain the Service, including routing messages and comments into your unified inbox.
• To enable features you configure, such as automated replies, comment moderation, and analytics.
• To authenticate users and secure access to workspaces.
• To communicate with you about service updates, security notices, and support.
• To comply with legal obligations and enforce our terms.

3. Data from Meta Platforms

When you connect an account through Meta (WhatsApp Business, Instagram, or Facebook), we access and process data only with your authorization and only as needed to provide the features you enable. Our use of information received from Meta APIs adheres to the Meta Platform Terms and applicable developer policies. We do not sell this data, and we do not use it for advertising or for purposes unrelated to the Service.

4. How We Share Information

We do not sell your personal information. We share information only in these limited circumstances:

• Within your workspace — with team members you invite, according to the roles you assign.
• Service providers — with trusted vendors who process data on our behalf (for example, hosting and infrastructure) under appropriate confidentiality and security obligations.
• Platform providers — with Meta and the relevant messaging platforms, as required to deliver messages and perform the actions you request.
• Legal requirements — when required by law, regulation, or valid legal process, or to protect the rights, property, or safety of our users or others.

5. Data Retention

We retain information for as long as your account is active or as needed to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. When information is no longer needed, we delete or anonymize it.

6. Your Rights and Data Deletion

You may access, correct, export, or request deletion of your information at any time. You can disconnect any channel from within the Service, which deactivates its access and removes the associated access tokens. To request deletion of data associated with a connected account, contact us at the address below, or use the platform's app-removal flow — we honor deletion requests received through Meta's data-deletion callbacks.

7. Cookies

We use strictly necessary cookies and similar technologies to keep you signed in, remember your preferences (such as language), and secure your session. We do not use cookies for third-party advertising.

8. Security

We use technical and organizational measures designed to protect your information, including encryption in transit, access controls, and workspace-level isolation. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Children's Privacy

The Service is intended for businesses and is not directed to individuals under the age of 18. We do not knowingly collect personal information from children.

10. International Transfers

Your information may be processed and stored in countries other than your own. Where required, we take steps to ensure appropriate safeguards are in place for such transfers.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, provide additional notice.

12. Contact Us

If you have questions about this Privacy Policy or how your information is handled, contact us at support@savdev.online.