Privacy Policy

This Privacy Policy explains how ASQUAREI.AI (PRIVATE) LIMITED, operating as Asquarei ("Asquarei," "we," "us," or "our"), collects, uses, shares, and protects personal data in connection with the A²I Sales Agentplatform, the asquarei.ai website, and related services (the "Services").

It covers two categories of people:

• Clients — businesses (and their team members) that create an account and use the Services; and
• End Customers — the leads and customers of our Clients whose conversations and contact details are processed through the Services.

Important: for End Customer data, our Client is the data controller and Asquarei acts as a data processor, handling that data only on the Client's instructions. If you are an End Customer, the business you communicated with is responsible for how your data is used; please direct requests to them first. We will assist them in fulfilling your requests.

1. Data We Collect

1.1 From Clients

• Account data: name, business name, email address, phone number, password (hashed), role, and billing details;
• Business configuration data: knowledge base content (including content fetched from your website at your direction), agent settings, workflows, pipelines, templates, business hours, and connected channel credentials/tokens;
• Usage and log data: feature usage, credit consumption, device and browser information, IP address, and diagnostic logs;
• Communications with us: support requests and feedback.

1.2 From End Customers (processed on behalf of Clients)

• Contact data: name, phone number, email address, social messaging identifiers (e.g., WhatsApp number, Messenger/Instagram ID), and details submitted through website forms or Facebook Lead Forms;
• Conversation data: message content, call audio and transcripts, chat history, and email content exchanged with the Client's AI agent or team;
• Engagement data: appointment bookings, pipeline stage, conversation outcomes, and consent/opt-out records.

We do not intentionally collect data from children under 18, and the Services are not directed at them.

2. How We Use Data

We use personal data to:

• Provide, operate, and secure the Services — including running AI-powered conversations, transcribing calls, creating contacts from forms and lead submissions, booking appointments, and delivering payment links on the Client's behalf;
• Set up and maintain connections to third-party channels the Client enables (WhatsApp, Facebook Messenger, Instagram, email, voice);
• Meter usage, process billing, and prevent fraud and abuse;
• Provide support and communicate service updates;
• Monitor, troubleshoot, and improve the reliability and quality of the Services;
• Comply with legal obligations, including maintaining consent and opt-out logs.

AI processing.Conversation data is processed by AI models to generate responses, summaries, classifications, and actions. We do not use our Clients' End Customer conversation data to train generalized AI models available to other customers without the Client's agreement. Model providers we use are contractually restricted from using data submitted through our Services to train their models, where such options are available.

3. Legal Bases (EEA/UK and similar jurisdictions)

Where applicable law requires a legal basis, we rely on: performance of a contract (providing the Services to Clients); legitimate interests (securing and improving the Services, preventing abuse); consent (where required, e.g., certain marketing or cookies); and legal obligation (tax, accounting, compliance records). For End Customer data we process as a processor, the Client is responsible for establishing the legal basis.

4. How We Share Data

We do not sell personal data. We share data only with:

• Subprocessors and service providers that help us operate the Services — including cloud hosting and databases, AI model providers, Twilio (voice and telephony), SendGrid (email delivery), Meta Platforms (WhatsApp Business Platform, Messenger, Instagram messaging, Facebook Lead Ads), and Google (Calendar and Meet) — in each case only as needed to provide the features the Client has enabled;
• The Client's connected services, at the Client's direction (e.g., CRM sync on the Business plan);
• Professional advisers and authorities, where required by law, legal process, or to protect rights, safety, and the integrity of the Services;
• A successor entity, in connection with a merger, acquisition, or sale of assets, subject to this Policy.

4.1 Meta Platform data

Where the Services access data through Meta's APIs (including the WhatsApp Business Platform and Facebook Lead Ads), we use that data solely to provide the messaging and lead-management features the Client has enabled, in accordance with the Meta Platform Terms and WhatsApp Business policies. We do not use Meta platform data for advertising, profiling unrelated to the Services, or resale.

4.2 Google user data

Where a Client connects Google Calendar/Meet, we access only the scopes needed to check availability, create events, and generate meeting links. Use of Google user data complies with the Google API Services User Data Policy, including its Limited Use requirements.

5. International Transfers

We may process data in countries other than where you are located. Where required, we use appropriate safeguards for cross-border transfers, such as standard contractual clauses or equivalent mechanisms.

6. Data Retention

• Client account data: retained for the life of the account and up to 90 days after closure, except where longer retention is required (e.g., billing and tax records);
• End Customer contact and conversation data: retained while the Client's account is active or until the Client deletes it, subject to plan storage limits;
• Consent and opt-out logs: retained as required to demonstrate compliance;
• Backups and logs: purged on a rolling basis within 35 days.

See our Data Deletion Policy for how to request deletion.

7. Security

We use administrative, technical, and physical safeguards appropriate to the risk, including encryption in transit, access controls and role-based permissions, credential hashing, environment isolation, and logging. No system is perfectly secure; if we become aware of a breach affecting your personal data, we will notify affected parties as required by applicable law.

8. Your Rights

Depending on your jurisdiction, you may have rights to access, correct, delete, restrict, or port your personal data, and to object to certain processing.

• Clients can exercise most of these directly in the app (account settings, contact book) or by contacting us at info@asquarei.ai;
• End Customers should contact the business they communicated with (our Client), who controls their data; we will support the Client in fulfilling the request. You may also contact us and we will route the request to the relevant Client;
• You may also lodge a complaint with your local data protection authority.

To opt out of messages sent by a business using our platform, reply with an opt-out request (e.g., "STOP" or "unsubscribe") on the relevant channel or contact the business directly. Opt-outs are logged and honored.

9. Cookies and Website Analytics

The asquarei.ai website uses cookies and similar technologies for essential functionality, preferences, and analytics. You can control cookies through your browser settings; where required, we obtain consent for non-essential cookies.

10. Changes to This Policy

We may update this Policy from time to time. Material changes will be announced via the Services or email before they take effect. The "Last updated" date above reflects the latest revision.

11. Contact

ASQUAREI.AI (PRIVATE) LIMITED (Asquarei)

Office # 216, Park Avenue, Shahrah-e-Faisal, PECHS Block 6, Karachi, Pakistan

Email: info@asquarei.ai

Website: https://asquarei.ai

If you have unresolved concerns, you may contact your local supervisory authority.