1. Who we are
KOORMEX (“KOORMEX”, “we”, “us”) is a software platform that lets businesses build, deploy and manage AI employees — for example a Social Media Manager and a WhatsApp Auto Follow-up assistant. KOORMEX is a product of MSP Groups, #5/310, Thenur, Perambalur, Tamil Nadu 621716, India.
This Privacy Policy explains what personal data we process, why, how long we keep it, and the choices you have. It applies to our website, the KOORMEX application at prod.koormex.com, and our use of data received from Meta Platforms (Facebook, Instagram and WhatsApp).
Where a business uses KOORMEX to talk to its own customers, that business decides why and how its customers’ data is used and KOORMEX acts as its service provider (data processor). For account, billing and website data, KOORMEX is the controller.
2. Information we collect
Information you give us
- Account details: name, email address, mobile number and a password (stored only as a salted hash).
- Business details: business name, the systems you connect (for example ERP, WhatsApp, social accounts), and the instructions, rules and autonomy levels you set for each AI employee.
- Content: posts, captions, images, message templates and other content you create or approve through KOORMEX.
- Support messages: anything you send us by email, phone or WhatsApp.
Information we receive from connected platforms
When you connect a Meta account, we receive only the data covered by the permissions you approve. See section 3 for the details.
Information collected automatically
- Log and device data such as IP address, browser type, pages viewed and timestamps.
- An activity trail of actions taken by your AI employees, shown to you inside the app.
- Cookies or similar technologies needed to keep you signed in and keep the service secure.
3. Data we receive from Meta (Facebook, Instagram, WhatsApp)
KOORMEX connects to Meta only after you explicitly authorise it. Depending on the features you switch on, we may request the following, and use each one only for the purpose shown:
- Facebook Pages (page access, posting): the list of Pages you manage and a Page access token, so KOORMEX can create, schedule and publish posts on the Pages you choose.
- Instagram professional accounts (publishing): the Instagram business or creator account linked to your Page, so KOORMEX can publish photos, videos and captions you have created or approved.
- WhatsApp Business Platform: your WhatsApp Business Account and phone-number IDs, message templates, and the messages exchanged between your business and your customers, so an AI employee can send follow-ups, answer enquiries and hand conversations to a human.
- Basic profile: your name, profile ID and email, used to identify your KOORMEX account and to show which account is connected.
How we use Meta data. We use data from Meta solely to provide the features you asked for to you and your business. We do not sell it, share it with data brokers, use it for advertising or profiling unrelated to your account, or use it to train general-purpose AI models. We do not combine it with data from other customers.
Access tokens. Tokens are stored encrypted, used only to act on your behalf, and deleted when you disconnect the account or delete your KOORMEX account.
Autonomy controls. You choose whether an AI employee publishes or sends on its own or waits for your approval, and every action appears in your activity trail.
Our use of information received from Meta APIs adheres to the Meta Platform Terms and Developer Policies, including the Limited Use requirements. You can revoke KOORMEX’s access at any time from your Facebook settings under Business Integrations or from Instagram’s Apps and Websites settings.
4. How we use your information
- To create and operate your account and the AI employees you configure.
- To publish posts and send messages through the accounts you connect, exactly as you instruct or approve.
- To process payments, send invoices and provide customer support.
- To keep the service secure, prevent abuse and fix problems.
- To send service emails (activation links, billing and security notices). Marketing emails are sent only where you have agreed, and every one has an unsubscribe link.
- To meet legal and tax obligations.
5. AI processing
To draft posts, replies and summaries, the relevant content is sent to third-party AI model providers under contracts that restrict them to processing it on our behalf. We send only what is needed for the task. Content from your business and from Meta platforms is not used to train those providers’ models.
6. Who we share data with
We do not sell personal data. We share it only with:
- Service providers who host our infrastructure, process payments, deliver email and SMS, and provide AI models, bound by confidentiality and data-protection terms.
- Meta Platforms, when we publish or send on your behalf through its APIs.
- Authorities, where required by law or to protect rights, safety and security.
- A successor, if KOORMEX is involved in a merger or sale, with notice to you.
7. Retention
- Account and business data: kept while your account is active.
- Meta access tokens: deleted immediately on disconnect or account deletion.
- Content and messages processed for you: deleted within 30 days of account deletion.
- Billing records: kept for the period required by Indian tax and accounting law (generally up to 8 years).
- Security and backup logs: rolled off within 90 days.
8. Your rights and how to delete your data
You may access, correct, export or delete your personal data, withdraw consent, or object to certain processing, subject to applicable law. You can:
- Disconnect any Meta account inside KOORMEX at any time.
- Delete your account from Settings in the app.
- Request deletion by following the steps on our Data Deletion page, or by emailing privacy@koormex.com.
We act on verified requests within 30 days. If you are in the EU/UK you may also lodge a complaint with your local data-protection authority.
9. Security
We use encryption in transit (HTTPS), encryption of secrets and access tokens at rest, role-based access, and logging. No system is perfectly secure; if a breach affects you we will notify you and the relevant authorities as the law requires.
10. Children
KOORMEX is a business service and is not directed to children under 18. We do not knowingly collect their data; contact us if you believe we have and we will delete it.
11. International transfers
We are based in India and our providers may process data in other countries. Where we transfer personal data, we rely on contractual safeguards that require an equivalent level of protection.
12. Changes to this policy
We may update this policy. We will change the date above and, for material changes, notify you by email or in the app before they take effect.
13. Contact us
Questions or requests: privacy@koormex.com · +91 82708 59655
MSP Groups, #5/310, Thenur, Perambalur, Tamil Nadu 621716, India