Privacy Policy

1. Who we are

NEXWAI ("we", "us") is a software service that lets businesses answer customer messages received through Telegram and Instagram with the help of artificial intelligence and manage the resulting conversations and customer requests. NEXWAI is operated by "THE WATER" MCHJ, a limited liability company registered in the Republic of Uzbekistan, which is the controller of the data described in this policy. Contact: nexwaiuz@gmail.com.

2. Data we process

• Business users (our customers): name, email, business name and an encrypted (hashed) password.
• Customers of our business users: when a person writes to a business Instagram account that has been connected to NEXWAI, we receive, through the Instagram API with Instagram Login, the message text, the sender's Instagram-scoped ID, and the sender's public profile name/username, together with the phone number or address if the person writes it in the conversation.
• Connected Instagram business account: account ID, username and an access token (stored on our servers and used only to read and send messages for that account).

3. Instagram permissions we use

• instagram_business_basic — to identify the connected business account (ID, username) and show it in the dashboard.
• instagram_business_manage_messages — to receive direct messages that customers send to the business, and to send replies (automatic AI replies and replies typed by the business's staff) in the same conversation.

We only use this data to provide the messaging service to the business that connected the account. We reply only to people who have messaged the business first and only within the messaging window allowed by Meta.

4. How we use data

• to generate AI replies based on the knowledge base the business entered;
• to create customer requests (leads) and notify the business's staff;
• to let the business view, search and answer conversations in the NEXWAI dashboard;
• to secure accounts and fix technical problems.

We do not sell data, and we do not share it with third parties for advertising. We do not use Instagram data to train AI models.

5. Service providers

• OpenAI — conversation text is sent to generate replies.
• Meta (Instagram) and Telegram — to receive and send messages.
• Resend — to send email verification codes.

6. Retention and deletion

Data is kept while the business account is active. A business can disconnect Instagram at any time in the dashboard (Channels → Disconnect); the access token is then removed. You can request deletion of your data, or of your Instagram conversation data, at any time — see Data deletion instructions. We delete requested data within 30 days.

7. Security

Passwords are hashed and all traffic is protected with HTTPS. No method of transmission over the internet is 100% secure.

8. Your rights

You may ask to access, correct or delete your data by emailing nexwaiuz@gmail.com.

9. Changes

We may update this policy; the date at the top shows the latest revision.