Privacy Policy

Meridia Labs Ltd ("247Rep", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered business automation platform and related services (collectively, the "Services").

By accessing or using our Services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your information as described herein.

Important: 247Rep is not a Meta Business Service Provider (BSP). We process data on behalf of our customers, who maintain their own relationships with Meta and other third-party platforms.

Personal Data: Any information relating to an identified or identifiable natural person.

Customer: The business or individual who creates an account and uses our Services.

End User: The customers or contacts of our Customers who interact with AI assistants powered by our Services.

Data Controller: The entity that determines the purposes and means of processing Personal Data. For Customer Data and End User Data, you (the Customer) are the Data Controller.

Data Processor: The entity that processes Personal Data on behalf of the Data Controller. 247Rep acts as a Data Processor for Customer Data and End User Data.

We use the collected information for the following purposes:

3.1 To Provide and Maintain Services:

• Process AI-powered conversations between your business and End Users
• Maintain and improve platform functionality
• Process credit purchases and manage your account
• Provide customer support

3.2 To Improve and Develop Services:

• Analyze usage patterns and trends
• Train and improve AI models (only with aggregated, anonymized data)
• Develop new features and functionality
• Conduct research and development

3.3 For Security and Compliance:

• Detect and prevent fraud, spam, and abuse
• Monitor compliance with our Terms of Service and Acceptable Use Policy
• Protect the security and integrity of our Services
• Comply with legal obligations

3.4 For Communication:

• Send service-related notifications and updates
• Respond to inquiries and provide support
• Send marketing communications (with your consent, where required)

4.1 247Rep as Data Processor:

For Customer Data and End User Data processed through the Services, you (the Customer) are the Data Controller, and we act as the Data Processor. This means:

• You determine the purposes and means of processing
• You are responsible for ensuring lawful processing and obtaining necessary consents
• We process data only on your instructions and as necessary to provide the Services
• We implement appropriate security measures to protect the data

4.2 247Rep as Data Controller:

For your account information and platform usage data, we act as the Data Controller and process this information for our legitimate business interests in providing and improving the Services.

4.3 Your Responsibilities as Data Controller:

• Obtain necessary consents from End Users before processing their data
• Ensure compliance with applicable privacy laws (NDPR, GDPR, etc.)
• Provide appropriate privacy notices to End Users
• Handle End User data rights requests (access, deletion, etc.)
• Maintain appropriate records of processing activities

We may share your information in the following circumstances:

5.1 Service Providers: We engage third-party service providers to perform functions on our behalf:

• Cloud hosting and infrastructure (Firebase, Google Cloud)
• Payment processing
• Analytics and monitoring services
• Customer support tools

These providers have access to Personal Data only as necessary to perform their functions and are obligated to maintain confidentiality.

5.2 Third-Party Platforms: When you connect third-party services (like Meta/WhatsApp) using your own API credentials, data may be transmitted to these platforms as necessary to provide the Services. Your use of these platforms is subject to their own terms and privacy policies.

5.3 Legal Requirements: We may disclose information if required by law or in response to:

• Legal process (subpoenas, court orders)
• Government or regulatory requests
• Protection of our rights, property, or safety
• Prevention of fraud or illegal activity

5.4 Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

5.5 With Your Consent: We may share information with third parties when you provide explicit consent.

6.1 Retention Periods:

• Account information: Retained while your account is active and for a reasonable period thereafter
• Conversation data: Retained as necessary to provide analytics and support, or as required by law
• Payment records: Retained for tax and accounting purposes as required by law
• Technical logs: Typically retained for 90 days

6.2 Data Deletion: Upon account termination, we will delete or anonymize your data within 90 days, except where retention is required by law or for legitimate business purposes (e.g., fraud prevention, dispute resolution).

6.3 Backup Retention: Data may persist in backup systems for up to 90 days after deletion from production systems.

We implement appropriate technical and organizational security measures to protect your information:

• Encryption of data in transit (TLS/SSL) and at rest
• Access controls and authentication mechanisms
• Regular security assessments and monitoring
• Employee training on data protection
• Incident response procedures

7.1 Web Widget Security:

• All web widget communications encrypted via HTTPS/TLS
• Voice recordings (if enabled) processed securely and encrypted in transit and at rest
• Widget conversations isolated per visitor session
• No third-party tracking or cookies used by widget
• Visitor data processed only for conversation purposes

However, no method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

Depending on your location, you may have the following rights:

8.1 Access and Portability: You may request access to your Personal Data and receive a copy in a structured, commonly used format.

8.2 Correction: You may request correction of inaccurate or incomplete Personal Data.

8.3 Deletion: You may request deletion of your Personal Data, subject to certain exceptions (e.g., legal obligations, legitimate interests).

8.4 Objection and Restriction: You may object to or request restriction of certain processing activities.

8.5 Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time.

8.6 Marketing Communications: You may opt out of marketing emails by clicking the unsubscribe link or contacting us.

8.7 Exercising Rights: To exercise these rights, contact us at hello@247rep.co. We will respond within 30 days.

8.8 End User Rights: If you are an End User seeking to exercise privacy rights regarding data processed through a Customer's use of our Services, please contact that Customer directly. We process End User Data on behalf of our Customers.

Our Services are operated from Nigeria, and data may be processed in Nigeria or other countries where we or our service providers maintain facilities. By using our Services, you consent to the transfer of your information to countries outside your country of residence, which may have different data protection laws.

We implement appropriate safeguards (such as standard contractual clauses) to ensure that your Personal Data remains protected in accordance with this Privacy Policy.

Our Services are not intended for individuals under 18 years of age. We do not knowingly collect Personal Data from children. If we learn that we have collected information from a child without parental consent, we will delete that information promptly.

We use cookies and similar technologies to:

• Maintain your session and remember your preferences
• Analyze usage patterns and improve our Services
• Provide personalized content and features

You can control cookies through your browser settings. However, disabling cookies may affect your ability to use certain features of our Services.

As a Nigerian company, we comply with the Nigeria Data Protection Regulation (NDPR). We process Personal Data lawfully, fairly, and transparently, and collect only data that is adequate, relevant, and necessary for the specified purposes.

You have the right to file a complaint with the Nigeria Data Protection Bureau (NDPB) if you believe we have violated your data protection rights.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and updating the "Last Updated" date. Your continued use of the Services after changes constitutes acceptance of the updated Privacy Policy.