1. Introduction
This Privacy Policy describes how CLOUDLINKS SARL (“CloudLinks,” “we,” “us,” or “our”), operating as Cloudlinks ai, collects, uses, discloses, and protects information when you use our mobile applications, web applications, websites, and related services (collectively, the “Apps” and “Services”).
By downloading, accessing, or using our Apps or Services, you agree to this Privacy Policy. If you do not agree, please do not use the Apps or Services.
2. Scope
This Policy applies to:
- Mobile applications published by CloudLinks on the Apple App Store and Google Play
- Web applications and SaaS products we operate (including EXSIR and related platforms)
- Our websites, including cloudlinks.ai and related subdomains
- Customer support, demos, contact forms, and related communications
Client-specific solutions we build for business customers may be governed by a separate agreement or that client's own privacy notice. Where those terms conflict with this Policy for end users of a client-branded product, the applicable client agreement or notice controls for that product.
3. Information We Collect
3.1 Information you provide
- Account details such as name, email address, phone number, and password
- Business information such as company name, role, and preferences
- Content you submit in forms, chat, support tickets, or feedback
- Transaction and billing details when you purchase or subscribe to paid Services
3.2 Information collected automatically
- Device information (model, operating system, unique device identifiers)
- App usage data (features used, screens viewed, crash logs, performance metrics)
- Log data (IP address, access times, browser type, referring pages)
- Approximate location derived from IP address, where permitted by law
3.3 Permissions on mobile devices
Depending on the App and features you enable, we may request access to camera, photos, microphone, contacts, notifications, or location. You can revoke permissions in your device settings. Denying a permission may limit related features.
3.4 Information from third parties
We may receive information from authentication providers, payment processors, analytics partners, app stores, or business partners when you interact with them in connection with our Services.
4. How We Use Information
We use personal information to:
- Provide, operate, maintain, and improve the Apps and Services
- Create and manage accounts, authenticate users, and process transactions
- Respond to inquiries, provide support, and send service-related notices
- Personalize experiences and recommend relevant features
- Monitor performance, diagnose errors, and enhance security
- Comply with legal obligations and enforce our terms
- Send marketing communications where permitted (you may opt out at any time)
5. Legal Bases (Where Applicable)
Where data-protection laws require a legal basis (for example GDPR), we process personal data based on one or more of the following: performance of a contract, legitimate interests (such as securing and improving our Services), consent (where required), and compliance with legal obligations.
6. How We Share Information
We do not sell your personal information. We may share information with:
- Service providers who help us host, analyze, communicate, process payments, or provide support (under confidentiality and data-processing obligations)
- Business partners when you request a connected service or integration
- Authorities when required by law, legal process, or to protect rights, safety, and security
- Parties involved in a merger, acquisition, or asset sale, subject to appropriate safeguards
Data we receive from Meta Platforms is shared only as described in Section 7.4 and is never sold or used for advertising.
7. Data from Meta Platforms (WhatsApp, Facebook, Instagram)
7.1 Who operates the Meta app
The Meta app “cloudlinks-ai”, which businesses see in the Facebook Login and WhatsApp Embedded Signup dialogs, is owned and operated by CLOUDLINKS SARL, operating as Cloudlinks ai. It connects a business's Meta accounts to the EXSIR platform (the AI assistant “Exsir”, shared inbox, chatbots, and campaigns). EXSIR also powers the messaging features that businesses use alongside our StockLens app; StockLens itself does not use Facebook Login. Businesses that use our Services (“clients”) connect their own WhatsApp Business accounts, Facebook Pages, and Instagram professional accounts to EXSIR so that EXSIR can receive and send messages on their behalf, manage their WhatsApp message templates, and run their AI assistant.
The app requests only these permissions: public_profile, whatsapp_business_messaging, whatsapp_business_management, whatsapp_business_manage_events, business_management, pages_show_list, pages_manage_metadata, pages_messaging, instagram_basic, and instagram_manage_messages.
7.2 What we receive
When a business connects an account through Facebook Login for Business or WhatsApp Embedded Signup, and while that connection is active, we may receive:
- Business account and asset identifiers, such as WhatsApp Business Account IDs, phone number IDs, Facebook Page IDs, and Instagram account IDs
- The business name and related account details shown in the connected assets
- The Facebook user ID and name of the business admin who completes Facebook Login for Business or WhatsApp Embedded Signup
- Access tokens that allow EXSIR to act on the business's behalf for the permissions it granted
- Content and media of messages exchanged between the business and its customers on WhatsApp, Messenger, and Instagram
- Customer phone numbers, profile names, and platform-scoped user IDs
- Message delivery and read statuses
- WhatsApp message templates and their review status
7.3 How we use it
We use this data only to provide the features the business asked for: sending and receiving messages, the shared inbox, chatbots and the AI assistant, template management, and campaigns, together with the security, support, and billing that running those features requires. We do not sell this data, we do not use it for advertising, and we do not use it to build profiles of people beyond what is needed to provide the Service to the business.
7.4 Sharing
We share data received from Meta Platforms only with sub-processors we need to run the Service, such as cloud hosting providers and AI model providers that generate assistant replies, under confidentiality and data-processing terms, or where we are required to do so by law.
7.5 Our role
For the customers who message a business through WhatsApp, Messenger, or Instagram, that business is the data controller and CloudLinks acts as its data processor, handling the data on the business's instructions. If you are such a customer, please also review the privacy notice of the business you are messaging.
7.6 Retention
We keep data received from Meta Platforms while the business's account is connected and active. Deactivating a channel in EXSIR stops EXSIR acting on that channel. Removing the “cloudlinks-ai” app in Facebook Business integrations or Meta Business settings revokes our access tokens and stops Meta sending us data for those accounts. Data we already hold is deleted or anonymized within 30 days of a deletion request (see Section 7.8) or, for data a business controls on behalf of its customers, within 30 days of that business's instruction (see Section 7.5), except where the law requires us to keep certain records longer. Backup copies are kept for up to 30 days and are then overwritten, so deleted data is gone from our backups within 30 days after it is deleted from our live systems.
7.7 Platform policies
We handle this data in line with the Meta Platform Terms, the Meta Developer Policies, and the WhatsApp Business policies (including the WhatsApp Business Messaging Policy and WhatsApp Commerce Policy).
7.8 Disconnecting and requesting deletion
A business can deactivate a WhatsApp, Facebook, or Instagram channel inside EXSIR at any time, and can remove the “cloudlinks-ai” app from its Facebook or Meta Business settings to revoke our access. Anyone, whether a business or a customer of one, can ask us to delete their data. Step-by-step instructions are on our User Data Deletion page.
8. Data Retention
We retain personal information for as long as needed to provide the Services, fulfill the purposes described in this Policy, meet legal and accounting requirements, and resolve disputes. When information is no longer required, we delete or anonymize it where reasonably possible. Data received from Meta Platforms follows the specific retention rules in Section 7.6.
9. Security
We implement administrative, technical, and organizational measures designed to protect personal information against unauthorized access, loss, misuse, or alteration. No method of transmission or storage is completely secure; we cannot guarantee absolute security.
10. International Transfers
CloudLinks is based in Beirut, Lebanon. Your information may be processed in Lebanon and in other countries where we or our service providers operate. Where required, we use appropriate safeguards for cross-border transfers.
11. Children's Privacy
Our Apps and Services are not directed to children under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will take appropriate steps to delete it.
12. Your Rights and Choices
Depending on your location, you may have the right to:
- Access, correct, or delete personal information we hold about you
- Object to or restrict certain processing
- Request data portability
- Withdraw consent where processing is based on consent
- Opt out of marketing emails via the unsubscribe link or by contacting us
To exercise these rights, email [email protected]. You may also manage certain mobile permissions in your device settings, and delete your App account through in-app settings where available, or by contacting us. For data received through WhatsApp, Facebook, or Instagram, see Section 7.8 and our User Data Deletion page. We respond to requests within 30 days.
13. Cookies and Similar Technologies
Our websites and web Apps may use cookies, local storage, and similar technologies to keep you signed in, remember preferences, measure performance, and improve the Services. You can control cookies through your browser settings. Disabling cookies may affect some features.
14. Third-Party Links and Services
The Apps and Services may link to or integrate third-party sites, SDKs, or services (for example payment, analytics, messaging, or maps). Those third parties have their own privacy practices. We are not responsible for their content or privacy policies.
15. Changes to This Policy
We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page will reflect the latest revision. Continued use of the Apps or Services after changes become effective constitutes acceptance of the updated Policy. Material changes may also be communicated in-app or by email where appropriate.
16. Contact Us
If you have questions about this Privacy Policy or our data practices, contact us at:
- Company: CLOUDLINKS SARL (Cloudlinks ai)
- Address: Airport Street (main road), Cremino Center, 2nd floor, Beirut, Lebanon
- Data protection contact: Ali Abboud, [email protected]
- Email (support and data deletion requests): [email protected]
- Phone / WhatsApp: +961 71 463 329
- Website: cloudlinks.ai