The data controller is Digitivia, a company registered in Egypt (Commercial Register 272529, Cairo Investment Court; Tax ID 773-847-731), located at Building No.1, Chillout Lotus Maxim, 3rd Floor, Fifth Settlement, New Cairo, Egypt. For privacy inquiries, contact privacy@digitivia.com.
This policy explains how Digitivia AI Agent collects, uses, stores, and protects personal and operational data processed through the platform, in compliance with Egypt's Personal Data Protection Law (Law 151/2020) and aligned with the EU General Data Protection Regulation (GDPR).
We process: (a) account data — name, email, password hash, organization name; (b) communication data — messages, conversation metadata, contact details from connected channels (WhatsApp, Messenger, Instagram, Telegram); (c) operational data — agent configurations, knowledge base content, CRM leads, orders; (d) usage data — login timestamps, feature usage, platform metrics; (e) billing data — plan selections, payment metadata (card details are processed directly by Stripe and never stored on our servers).
If you connect a Facebook Page or an Instagram professional account, you choose which Page or account to connect and which permissions to grant on Meta's consent screen. We use each permission only for the feature it belongs to. (a) Insights (read_insights, instagram_manage_insights): when you open the Insights page, our servers read the performance figures of your own Page, Instagram account and posts, such as post engagements, Page views, followers, video views, reach, clicks, reactions and interactions, and show them to the members of your workspace. (b) Publishing (pages_manage_posts, instagram_content_publish): when you press Publish or Schedule in Content Studio, our servers publish the post you created to your own Page or Instagram account, immediately or at the time you chose. A scheduled post can be cancelled from Content Studio before it is published.
All calls to Meta are made by our servers using the access token you granted. The token is stored on our servers and is never sent to your browser. For Content Studio we store the text and image of each post you create, its planned time, and the result of publishing (status, a link to the published post, or an error message). We never publish anything you did not create and confirm, we do not use this data for advertising, and we do not sell it or share it with anyone other than the processors listed in this policy. You can disconnect a Page or account at any time in the app, or remove Digitivia AI Agent under Settings, Apps and Websites in your Facebook account, which ends our access. To have this data deleted, use Delete my account in the app, or write to privacy@digitivia.com; we complete deletion within 30 days, as described under Retention and Deletion.
We process data based on: (a) contract performance — to deliver the AI Agent service you subscribed to; (b) legitimate interest — to improve service reliability, prevent abuse, and generate aggregated analytics; (c) legal obligation — to retain invoices and tax records as required by Egyptian law; (d) consent — for optional features such as push notifications and email alerts, which you can withdraw at any time.
Data is used to deliver services, maintain account security, generate analytics, support automations, troubleshoot issues, and comply with applicable legal obligations.
We use the following third-party processors: (a) Supabase Inc. (United States) — database, authentication, file storage, and Edge Functions; (b) OpenAI Inc. (United States) — AI language model processing with 30-day data retention and no model training on customer data; (c) Hostinger International (Lithuania/US) — n8n workflow automation hosting; (d) Meta Platforms (United States/EU) — WhatsApp Business API, Messenger, and Instagram integrations; (e) Stripe Inc. (United States/EU) — payment processing. Where data is transferred outside Egypt, we rely on standard contractual clauses or equivalent safeguards to ensure adequate protection.
Customer-related data is retained for a maximum of one year from the date of collection or last activity, then permanently deleted from active systems and backups. Billing invoices and tax records are retained for five years as required by Egyptian tax law. Upon account deletion, personal data is removed within 30 days, with anonymized aggregated statistics retained for service improvement.
Under applicable data protection laws, you have the right to: (a) access — request a copy of your personal data; (b) rectification — correct inaccurate or incomplete data; (c) erasure — request deletion of your data (subject to legal retention requirements); (d) data portability — receive your data in a structured, machine-readable format; (e) restriction — limit processing in certain circumstances; (f) objection — object to processing based on legitimate interest. To exercise any of these rights, contact privacy@digitivia.com. We will respond within 30 days.
You have the right to lodge a complaint with the Egyptian Personal Data Protection Center (PDPC) if you believe your data rights have been violated. If you are located in the EU, you may also contact your local data protection authority.