VYRR AI (SMC-PRIVATE) LIMITED Privacy Policy

VYRR AI (SMC-PRIVATE) LIMITED is a B2B conversational commerce and communications software provider. Businesses that subscribe to the Service ("merchants" or "business customers") use Vyrr AI to communicate with their own customers ("End Customers").

Merchants remain the sellers of record for products and services they offer to End Customers. VYRR AI (SMC-PRIVATE) LIMITED provides software tools; we do not buy or sell merchant products to End Customers.

For End Customer personal data that merchants submit to or process through the Service:

• The merchant is typically the controller (or equivalent) and decides why and how End Customer data is processed for the merchant's business.
• VYRR AI (SMC-PRIVATE) LIMITED acts as a processor (or equivalent) and processes that data on the merchant's behalf to provide the Service.
• When a merchant connects Meta platforms such as WhatsApp, Instagram, or Messenger, those platforms also process relevant data under their own terms and privacy policies. Merchant compliance obligations for connected platforms are set out in our Terms and Conditions.

VYRR AI (SMC-PRIVATE) LIMITED may use information to:

• Create and manage business customer accounts
• Provide, operate, secure, and maintain the Service
• Process conversations, catalogues, orders, and business workflows
• Connect and operate supported integrations, including Meta platforms (WhatsApp, Instagram, and Messenger) where enabled
• Provide customer support and service communications
• Authenticate users and protect accounts
• Detect and prevent abuse, fraud, spam, unauthorized access, or security incidents
• Enforce our Terms, Acceptable Use rules, and applicable Meta platform policies
• Process subscriptions and payments
• Perform limited quality review of AI-assisted conversations as described in this Policy
• Diagnose technical problems and improve reliability
• Comply with applicable legal obligations

We do not use End Customer conversation content to train or fine-tune our own artificial-intelligence models.

VYRR AI (SMC-PRIVATE) LIMITED does not use customer data, product data, or End Customer conversations to train or fine-tune its own AI models.

We may use third-party AI providers to generate or assist with responses when a merchant uses those features. That processing is for delivering the Service and does not authorize VYRR AI (SMC-PRIVATE) LIMITED to train shared models on merchant or End Customer data.

When merchants connect Meta platforms—including WhatsApp, Instagram Direct Messages, Messenger, or other Meta messaging integrations—VYRR AI (SMC-PRIVATE) LIMITED processes message and account data through Meta platform APIs to provide the Service.

Meta Platforms, Inc. and its affiliates also process relevant data under their own terms and privacy policies. VYRR AI (SMC-PRIVATE) LIMITED's use of Meta platform APIs is subject to Meta's Developer Policies and Platform Terms.

The categories of data shared with or received from Meta depend on the features enabled and the permissions granted by the merchant. For merchant obligations when using these integrations—including messaging rules, commerce restrictions, and acceptable use—see our Terms and Conditions, Sections 5, 6, and 9.

VYRR AI (SMC-PRIVATE) LIMITED may restrict or disable integrations where processing would violate applicable Meta platform requirements or create compliance risk. VYRR AI (SMC-PRIVATE) LIMITED is not responsible for Meta, WhatsApp, Instagram, or Messenger decisions to restrict, suspend, or terminate accounts, APIs, or messaging capability.

Merchants are typically the data controller for End Customer information processed through the Service. Merchants should maintain and publish a clear, accessible privacy notice for End Customers that explains, as applicable:

• What information the merchant collects from End Customers
• How that information is used
• How VYRR AI (SMC-PRIVATE) LIMITED and connected channels (including WhatsApp, Instagram, and Messenger) process that information
• Any applicable sharing or disclosure
• That an AI assistant or automated system may reply
• That End Customers may interact with an automated or AI-assisted system on connected channels (including WhatsApp, Instagram Direct Messages, and Messenger)
• That authorized VYRR AI (SMC-PRIVATE) LIMITED personnel may review conversations for quality assurance
• Any other disclosures required by law or Meta platform policies (including WhatsApp, Instagram, and Messenger)

Merchants remain responsible for providing lawful notices and obtaining required consents. Contractual requirements for merchant disclosures, sales terms, and End Customer communications are set out in our Terms and Conditions.

Automated and AI-assisted responses. The Service may use automated systems, including AI assistants and bots, to receive, process, and respond to End Customer messages on connected channels such as WhatsApp, Instagram Direct Messages, and Messenger. End Customers may interact with an automated system rather than a human agent.

To assess quality, safety, and reliability, authorized VYRR AI (SMC-PRIVATE) LIMITED personnel may review conversations from the preceding 60 days. Such access:

• Is limited to the minimum information reasonably necessary for quality assurance, safety, or reliability
• Is subject to access controls and audit logging
• May include masking of phone numbers or identifiers where reasonably practicable
• Is limited to authorized personnel with a legitimate business need
• Is subject to confidentiality obligations
• Is not used for marketing to End Customers
• Is not used to train or fine-tune artificial-intelligence models

Quality review is a condition of using AI features and is not subject to an individual merchant opt-out. Merchants should include this in their End Customer privacy notice. Merchant obligations regarding automation disclosure and human escalation are set out in our Terms and Conditions.

We may use infrastructure, hosting, AI, payment, communication, analytics, and integration providers. They process information only as needed to serve VYRR AI (SMC-PRIVATE) LIMITED, under their terms and any agreements with us. When merchants connect Meta platforms (WhatsApp, Instagram, Messenger), Shopify, Google, or similar services, those providers' terms also apply.

VYRR AI (SMC-PRIVATE) LIMITED takes reasonable technical and organizational measures to protect information against unauthorized access, alteration, disclosure, loss, or destruction. No internet service is completely secure.

We retain information as reasonably necessary to:

• Provide the Service
• Maintain business and account records
• Meet contractual obligations
• Resolve disputes
• Prevent abuse or fraud
• Comply with legal or regulatory requirements
• Enforce our agreements

Retention periods vary by data type and purpose. Opt-in and compliance records may be retained as needed to demonstrate Meta platform compliance (including WhatsApp, Instagram, and Messenger) and defend against abuse claims.

Direct message and conversation logs.Conversation and direct message data (including WhatsApp messages, Instagram Direct Messages, and Messenger conversations) are retained for as long as the merchant's account remains active and the integration is connected, and as needed to provide the Service.

Unless a shorter period is required by law or requested through a valid deletion request, VYRR AI (SMC-PRIVATE) LIMITED generally retains active conversation logs for up to 24 months from the date of the message. After account termination or disconnection of an integration, Vyrr AI will delete or anonymize available message data within a reasonable period, typically within 90 days, except where retention is required for legal compliance, dispute resolution, abuse prevention, or demonstration of Meta platform policy compliance (including opt-in and messaging records).

Authorized quality review may access conversations from the preceding 60 days, as described in Section 8.

How to request deletion. Merchants may request deletion or export of account data, including direct message logs, by contacting VYRR AI (SMC-PRIVATE) LIMITED at contact@vyrrai.com or admin@vyrrai.com. Please include your business name, account email, the integration concerned (for example WhatsApp, Instagram, or Messenger), and the scope of the request.

Our process. Upon receiving a valid and verifiable request, VYRR AI (SMC-PRIVATE) LIMITED will confirm the identity of the requesting merchant or authorized representative; acknowledge the request within a reasonable time; delete or anonymize applicable data from active systems within a reasonable period, typically within 30 days, unless a longer period is permitted or required by law; and retain only information we are legally required or reasonably permitted to keep (for example billing records, fraud-prevention logs, or compliance evidence).

Deleted data may remain temporarily in encrypted backups until those backups are overwritten through normal cycles.

End Customer requests.End Customers who wish to delete personal data should generally contact the merchant first, as the merchant is typically the data controller. VYRR AI (SMC-PRIVATE) LIMITED will assist merchants with deletion requests as reasonably required and in accordance with Meta's data-deletion requirements for connected apps.

Meta-connected data. Where WhatsApp, Instagram, Messenger, or other Meta integrations are enabled, VYRR AI (SMC-PRIVATE) LIMITED will handle deletion requests in a manner consistent with applicable Meta platform terms and developer policies.

Subscription payments may be processed by third-party payment providers. VYRR AI (SMC-PRIVATE) LIMITED generally does not store full payment-card numbers; card data is handled by the payment provider under its own privacy practices.

We may contact merchants regarding:

• Account activity
• Service updates
• Security matters
• Billing and subscription matters
• Technical issues
• Important changes to the Service or our policies
• Customer support requests

The Service is intended for businesses and is not directed at children. We do not knowingly collect personal information from children to create accounts. Merchants who process children's data remain responsible for compliance with applicable law.

VYRR AI (SMC-PRIVATE) LIMITED and its providers may process or store information in countries other than Pakistan, including countries where cloud or AI providers operate. We take reasonable steps appropriate to the circumstances to protect information.

We may update this Privacy Policy to reflect changes to the Service, practices, technology, or law. Material changes may be notified through the Service, website, or email. The updated Policy is effective when posted unless a later date is stated.

For questions, requests, or complaints about this Privacy Policy or how VYRR AI (SMC-PRIVATE) LIMITED handles information:

This Privacy Policy describes VYRR AI (SMC-PRIVATE) LIMITED's general practices and does not replace any specific data-processing agreement between VYRR AI (SMC-PRIVATE) LIMITED and a merchant.