Alapi (“Alapi”, “we”, “us”) is a conversational-commerce platform operated by Prime Focus Agency Ltd that lets businesses (“Merchants”) connect their Facebook Page, WhatsApp and website chat to an AI assistant that answers customer messages and helps place Cash-on-Delivery orders. This policy explains what we collect, how we use it, and your choices.
Merchant account data: business name, owner name, email address, phone number, password (stored hashed), subscription / plan status, and the content a Merchant adds (products, prices, photos, bot instructions, staff accounts).
Facebook data (only when a Merchant connects a Page). We use Facebook Login and request these permissions, each for a single purpose:
Alapipages_show_list — to show the list of Pages you manage so you can pick which one to connect.pages_messaging — to receive messages sent to your Page and send replies on your behalf.pages_manage_metadata — to subscribe your Page to our webhook so new messages reach Alapi in real time.When a Page is connected we store its Page ID, Page name, and a Page access token. We never ask for or store your Facebook password.
WhatsApp data (only when a Merchant connects a WhatsApp Business account). Alapi is a Meta Tech Provider. A Merchant connects their own WhatsApp Business Account (WABA) through Meta’s Embedded Signup, and we request only the permissions needed to run the assistant, each for a single purpose:
whatsapp_business_messaging — to receive messages sent to the Merchant’s WhatsApp number and send replies on their behalf.whatsapp_business_management — to read the connected WABA / phone-number setup and register the number so incoming messages reach Alapi.When a WhatsApp number is connected we store its WABA ID, phone-number ID, display name and an access token. For each WhatsApp conversation we process the customer’s WhatsApp phone number, WhatsApp profile name, and the message content, so the assistant and the Merchant can read and reply. WhatsApp message content is treated exactly like Messenger content — sent to Google Gemini only to generate a reply, and never used for advertising, profiling, or AI-model training. We use WhatsApp data only to provide the messaging service, in line with the WhatsApp Business Terms.
End-customer conversation data: when a customer messages a connected Page, we process the message content, the page-scoped user ID (PSID), and the public display name and profile picture that the Messenger Platform provides — so the assistant and the Merchant can read and reply to the conversation.
Order data: for Cash-on-Delivery orders, the customer provides their name, phone number and delivery address, which we use to create the order in the Merchant’s store.
Website & app usage data: when Merchants or visitors use alapi.chat or the Alapi Android app, we use cookies and the Meta Pixel / Conversions API to measure sign-ups and improve our own advertising of Alapi. This sends Meta page views, events (for example a sign-up), a hashed account identifier, and device / browser information. Message content and end-customer data are never sent for this purpose.
Alapi Android app (Google Play): the app shows the same Merchant dashboard as alapi.chat, so it collects the same data described in this policy. It asks for no extra device permissions beyond notifications. Plans and payments are not available inside the app.
We do not sell personal data, and we never use Page, Messenger or WhatsApp conversation data, or end-customer data, for advertising or profiling.
We keep conversation data only as long as needed to provide the service. A Merchant can disconnect a Page or a WhatsApp number at any time from the dashboard, which stops processing and revokes the stored token. Anyone may request deletion of their data — see our Data Deletion page for instructions and our automated Facebook data-deletion callback. Removing Alapi from your Facebook Settings → Business Integrations also triggers our deauthorization callback, which halts processing and revokes tokens.
Deleting a Merchant account: a Merchant can request deletion of their Alapi account and all associated data from the app or the website (Account → “āĻ ā§āĻ¯āĻžāĻāĻžāĻāĻ¨ā§āĻ āĻ āĻĄā§āĻāĻž āĻŽā§āĻā§ āĻĢā§āĻ˛āĻž”, or alapi.chat/data-deletion/#account). The account is closed within 7 days and its data is permanently deleted within 30 days, except records we must keep by law (such as payment receipts).
Access tokens and secrets are stored on secured servers, all traffic is served over HTTPS, and every webhook payload is verified with Facebook’s signed (HMAC‑SHA256) signature before it is processed.
Alapi is a business tool for adults. It is not directed to children (under 18) and we do not knowingly collect their data.
We may update this policy from time to time; the “Last updated” date above always shows the current version.
Prime Focus Agency Ltd (Alapi)
đ āĻ¨ā§āĻ° āĻŽāĻ¸āĻāĻŋāĻĻ, āĻŦāĻžāĻĻāĻžāĻ˛āĻĻā§ āĻ°ā§āĻĄ, āĻŦāĻžāĻāĻ¨āĻŋāĻ¯āĻŧāĻž āĻŦāĻāĻ¤āĻ˛āĻž, āĻāĻ¸ā§āĻŽāĻāĻĻā§āĻĻāĻŋāĻ¨, āĻāĻ¤ā§āĻ¤āĻ°āĻž, āĻĸāĻžāĻāĻž ā§§ā§¨ā§Šā§Ļ
đ +880 1793-118588 · đŦ WhatsApp +880 1354-310364 · support@alapi.chat · alapi.chat