Privacy Policy

Botbytesai Automation Agency(“Botbytesai”, “we”, “us”) is an AI automation agency based in Bahawalpur, Pakistan. We build automation, web, and messaging systems for businesses, and we operate OrderFlow, an ordering and delivery platform for restaurants and food businesses.

We collect only what a specific service needs to work:

• Contact details you give us — name, email, phone, business name, and anything you type into our contact form or an assessment.
• Business data from services you connect — if you connect a Meta (Facebook/Instagram) or WhatsApp Business account, we access only the data those permissions cover, and only to operate the features you asked for.
• Messages sent through WhatsApp — for customers of a business using our OrderFlow platform, we process the messages exchanged with that business (order details, delivery address, phone number) so the order can be taken, prepared, and delivered.
• Basic usage data — pages visited and errors encountered, so we can keep the service working. We do not build advertising profiles of individuals.

Where a business connects its WhatsApp Business account to our platform, we act as a service provider to that business. We use the WhatsApp Business Platform to send and receive messages on that business’s behalf — order confirmations, order status updates, delivery notifications, and one-time verification codes.

• We do not sell WhatsApp data, message content, or phone numbers.
• We do not use WhatsApp message content for advertising or to train third-party AI models.
• We do not send unsolicited bulk messages. A business may message a customer only where that customer contacted the business or gave consent.
• Access tokens obtained via Meta are stored encrypted at rest and are used solely to operate the connected features.
• A business may disconnect its Meta or WhatsApp account at any time; we then stop accessing that data and delete the stored tokens.

Our use of information received from Meta APIs adheres to Meta’s Platform Terms and Developer Policies, including their limited-use requirements.

To provide the service you or your business asked for (contract), to keep it secure and working (legitimate interest), to comply with law, and — where required — with your consent, which you can withdraw at any time.

We do not sell personal data. We share it only with the processors needed to run the service — hosting, database, messaging, and payment providers — each bound to protect it and to use it only on our instructions. We also share data where the law requires it.

Only as long as needed for the purpose it was collected for, or as long as the law requires. Order and message records are retained for the operating business’s own records; enquiry data is deleted when it is no longer needed.

Encryption in transit (HTTPS), encryption at rest for access tokens and secrets, scoped least-privilege access keys, and access limited to the people who need it.

You can ask us to access, correct, or delete your personal data, or to stop processing it. Email hello@botbytesai.com and we will respond within 30 days. If a business used our platform to serve you, we may direct your request to that business, who controls that data.

Our services are for businesses. They are not directed at children under 13.

If we change this policy we will update the date above and, where the change is significant, tell you directly.

Questions about this policy or your data: hello@botbytesai.com · contact form