Merbix Privacy Policy

Merbix is an Egyptian SaaS platform that helps merchants and service providers manage Facebook and Instagram comments and messages, organize orders and customers, and run suggested or automated AI-assisted replies according to each workspace’s settings.

The platform is operated by Merbix, operated from the Arab Republic of Egypt (Arab Republic of Egypt). For questions: support@merbix.cloud.

For general service terms, see Terms of Service.

This policy covers:

• Merchant accounts registered on Merbix.
• Public storefronts hosted through Merbix.
• Connected Facebook Pages and linked Instagram professional accounts.
• Meta-originated comments and messages processed inside Merbix.

For end-customer data received from Meta, Merbix acts as a data processor on behalf of the merchant, who remains responsible to their customers.

• Name, email, and phone when you register or update your profile.
• Password and authentication records (stored securely, never displayed).
• Workspace information: brand name, business description, AI and autopilot settings.
• Product/service catalog, orders, customers, leads, and complaints.
• Uploaded logos and media.
• Subscription payment confirmation: InstaPay or Vodafone Cash transaction reference and invoice records.
• Support messages and public contact form submissions.
• In-app activity logs for audit and security.

There is no active credit-card payment gateway for Merbix subscriptions in the current interface.

When you connect a Facebook Page or Instagram professional account, we may receive and process — depending on permissions you approve in OAuth:

• Connected Facebook Page or Instagram professional account information.
• Post or media context when available.
• Comments, message text, platform identifiers, and display names.
• Customer-initiated Messenger or Instagram conversations.
• Meta webhook events.
• Encrypted Page/account access tokens.
• Business asset selection information during connection.

We request only permissions used in our codebase. We do not use them for unrelated purposes:

• Operating accounts and workspaces.
• Displaying comments and messages and drafting or sending approved replies.
• Matching products, creating leads and orders, and providing reports.
• Securing accounts and preventing abuse.
• Processing subscriptions, support, and legal compliance.

We do not sell your personal information.

Merbix may use Groq and/or Google Gemini to classify intent, match products, draft replies, extract structured order information, or generate business insights. Only data needed for the requested feature is processed.

Merbix does not use customer conversations to train a public general-purpose model operated by Merbix. When third-party AI APIs are used, information is processed under the applicable provider terms, privacy commitments, and Merbix’s configured service settings.

• Safe Mode and the Review Center let you review sensitive outputs before they are sent.
• Some replies may be sent automatically according to your settings; merchants remain responsible for approved replies.
• We do not guarantee that AI output is always correct.

Subscription payments may be completed using the payment options displayed in the Merbix billing interface, which may include manual InstaPay or Vodafone Cash transfers. Merbix may store a transaction reference or payment confirmation information for verification. Merbix is not a licensed payment institution.

• HTTPS for connections.
• Meta tokens and AI keys encrypted with AES-256-GCM.
• JWT authentication and session cookies.
• Workspace-level data isolation.
• HMAC signature verification for Meta webhooks.

Merbix stores account and business data in PostgreSQL until you request deletion or your account is removed. Some records may be soft-deleted or disconnected while remaining in the database. Merbix does not run automated purge jobs for all data categories. Backup copies, if any, may persist for a period determined by the hosting provider’s backup lifecycle — confirm with your Merbix operator.

Settings such as AI processing windows or historical import limits control what Merbix processes or imports — they are not automatic deletion periods.

• Inside Merbix: Settings → Integrations → Disconnect.
• Inside Facebook: Settings → Business Integrations → Merbix → Remove.
• Disconnecting stops new collection and revokes or removes tokens where technically supported.
• Historical business records may remain unless you request deletion.

• Access, correction, deletion, and objection where applicable.
• Withdraw connected-platform access.
• Contact us to submit a request.

See Data Deletion Instructions at /data-deletion. Email support@merbix.cloud from your account email with your workspace name to identify your account.

There is no self-service Delete Account button in the current interface.

Merbix is directed to adults (18+) and does not target children.

Data may be processed through hosting or AI providers outside Egypt under their applicable terms.

Last updated: July 22, 2026. We may update this policy and publish it at https://merbix.cloud/privacy.