Privacy Policy.

Who we are

NasrLabs is a sole proprietorship registered in India under Udyam, operated by Aqil Rasheed. NasrLabs is the entity responsible for the data described in this policy.

NasrLabs
Aqil Rasheed, 12, Ambalakunnummal
Koodathai Bazar, Thamarassery
Kozhikode, Kerala 673573, India
aqil@nasrlabs.com

What this service does

NasrLabs builds and operates automated Instagram and WhatsApp messaging systems on behalf of business clients. When a customer messages a client's Instagram business account, our system replies automatically, answers product questions, and takes orders.

This means that if you message a business whose account we operate, your message is processed by our system in order to reply to you and, if you place an order, to record it for that business.

Data we collect

When someone messages a connected Instagram account, we collect:

• Instagram-scoped sender ID, username and display name
• The content of messages sent to the business account, including text and captions of shared posts
• Images sent in the conversation, such as payment screenshots and product photos
• Order details the customer provides: name, phone number, delivery address, pincode, items ordered, order total, and payment status

How we use it

We use this data solely to operate the messaging and order-taking service for the business the customer chose to message.

We do not sell personal data. We do not use it for advertising. We do not use it to train AI models.

Third parties who process this data

To deliver the service we pass data to the following processors:

• Meta Platforms: message delivery via the Instagram API.
• OpenAI: message text and images are sent to OpenAI's API to generate replies and match product photos against the catalogue. OpenAI does not train on API data.
• Google (Sheets, Drive, Gmail): order records, payment screenshot storage, and order notifications to the business owner.
• Our workflow automation and caching infrastructure: used to run the messaging system and hold data temporarily during processing.

How long we keep it

• Conversation messages are held only for the duration of processing and are then deleted. A rolling window of the last 10 messages is kept in temporary memory to maintain conversation context.
• Temporary image references expire after one hour.
• Order records are retained for 3 years from the order date.
• Payment screenshots are retained for 12 months from upload.

Who can access your data

Order data is accessible only to NasrLabs and to the business owner whose account you messaged, through a private dashboard. It is not made available to other clients or to the public.

Your rights

You have the right to access the personal data we hold about you, to have it corrected if it is wrong, and to have it deleted.

To exercise any of these rights, email aqil@nasrlabs.com, or follow the steps on our data deletion page.

These rights are provided under India's Digital Personal Data Protection Act, 2023.

Children

This service is not directed at children under 18. We do not knowingly collect personal data from anyone under 18. If you believe a child has sent us personal data, email aqil@nasrlabs.com and we will delete it.

Security

Access to order records and stored images is restricted to NasrLabs and the relevant business owner, and is protected by account credentials on the platforms we use. Data in transit to the services listed above is encrypted. Access to our automation systems is limited to accounts controlled by NasrLabs.

No system is completely secure. We cannot guarantee that data will never be accessed without authorisation, but we take reasonable steps to prevent it and will act promptly if we become aware of a breach.

International transfers

Some of the processors listed above, including Meta, OpenAI and Google, operate infrastructure outside India. When you message a business account we operate, your data may therefore be processed on servers located outside India, under those providers' own terms and safeguards.

Changes to this policy

If we change this policy, we will update the page and change the "Last updated" date at the top. Significant changes to how we use personal data will be reflected here before they take effect. We recommend checking this page if you want to stay current.

Contact

Questions about this policy or about data we hold: aqil@nasrlabs.com.