Privacy Policy

Last updated: 14 May 2026

1. Introduction

MYÜTIK (“we”, “us”, or “our”) is a trading name of PABCR Enterprises Ltd, a company registered in England and Wales (Company No. 17129483). We operate the myutik.com website and platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

For data protection enquiries, contact us at support@myutik.com.

2. Information We Collect

We may collect the following types of information:

  • Account information: Name, email address, and password when you create an account.
  • Platform credentials: OAuth tokens for ad platforms (Meta, Google, TikTok, Snapchat, Pinterest, LinkedIn) that you choose to connect.
  • Lead data: Information about leads received from your connected ad platforms, including names, contact details, and form responses.
  • Usage data: Log data, device information, and analytics about how you interact with our platform.
  • Conversation data: Records of AI agent conversations with your leads for quality and optimisation purposes.

3. How We Use Your Information

  • To provide, maintain, and improve our platform and services.
  • To process leads from your connected ad platforms and facilitate AI-driven conversations.
  • To run swarm simulations and build knowledge trees for your brand.
  • To operate the Oracle optimisation engine and improve agent performance.
  • To communicate with you about your account, updates, and support.
  • To comply with legal obligations and enforce our terms.

4. Meta Platform Data and WhatsApp Business

When clients connect their Meta Business accounts (including Facebook Pages, Instagram Business Accounts, WhatsApp Business Accounts, and Meta Lead Ads) to MYÜTIK, we receive data from Meta’s APIs (“Platform Data”). This may include:

  • WhatsApp messages, contact phone numbers, and message metadata
  • Lead form responses submitted through Meta Lead Ads
  • Page and account metadata required to operate the integration

We use Platform Data solely to provide our service to the client whose account it relates to. Specifically:

  • To route incoming messages to AI agents or human team members
  • To send replies through the client’s WhatsApp number, Facebook Page, or Instagram account
  • To display conversation history, lead records, and analytics to the client

We do not use Platform Data to build advertising profiles, do not share Platform Data across clients, and do not sell Platform Data. We act as a data processor on behalf of our clients, who remain the data controllers for their end customers’ data.

Clients can revoke MYÜTIK’s access to their Meta and WhatsApp accounts at any time through Meta Business Suite → Business Settings → Integrations, which terminates our ability to process their Platform Data. Platform Data is deleted within 90 days of disconnection, except where retention is required by law.

5. Data Sharing

We do not sell your personal data. We may share information with:

  • Service providers (sub-processors): Third-party services that help us operate our platform, including:
    • Hosting infrastructure: Vercel Inc. (United States) for web application hosting, and Fly.io Inc. (United States) for API hosting (servers in London, UK)
    • Database: Neon Inc. (United States) for managed PostgreSQL hosting
    • AI model providers: Anthropic PBC (United States) and Together AI Inc. (United States) for language model inference
    • Payments: Stripe Payments Europe Ltd (Ireland) for subscription billing

    All sub-processors are bound by data processing agreements consistent with our obligations to you and applicable data protection law. A current list of sub-processors is available on request via support@myutik.com.

  • Ad platforms: Only the data necessary to maintain your connected integrations.
  • Legal requirements: When required by law, regulation, or legal process.

6. Data Security

We implement appropriate technical and organisational measures to protect your data, including encryption at rest and in transit, access controls, and regular security reviews. However, no method of transmission over the Internet is 100% secure.

7. Data Retention

We retain account information for as long as your account is active. Lead data and conversation records are retained for 24 months by default, or for a shorter period if configured in your account settings. Platform Data received from Meta is deleted within 90 days of you disconnecting the relevant integration, except where retention is required by law. You may request deletion of your data at any time — see our Data Deletion Policy for details.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access the personal data we hold about you.
  • Request correction of inaccurate data.
  • Request deletion of your data.
  • Object to or restrict processing of your data.
  • Data portability.
  • Withdraw consent at any time.

9. Cookies

We use essential cookies to operate the platform and optional analytics cookies to understand usage patterns. You can control cookie preferences through your browser settings.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the “Last updated” date.

11. Contact Us

If you have questions about this Privacy Policy, please contact us at support@myutik.com.