Privacy Policy

Last updated July 2026

This service is operated by Thunder Haus Solutions, Amman, Jordan ("we", "us"). We provide a multi-tenant customer-support platform that lets businesses receive and reply to their customers' messages across connected channels (Web Chat, WhatsApp, Instagram, Facebook Messenger and Telegram), with optional AI-assisted replies. This policy explains what we process and why.

Information we process

• Business account data: the name, email, and role of users who sign in to operate a workspace, plus a record of sign-in attempts (time, IP address, browser) kept as a security measure.
• Customer messages & profile identifiers: the content of messages sent to a connected business account, and the platform-provided identifiers (e.g. a channel-scoped user ID, username, phone number, or display name) needed to route and reply to a conversation.
• Uploaded business content: documents, images and catalogue data a business uploads so the assistant can answer from them.
• Channel credentials: access tokens and secrets you provide to connect a channel are stored encrypted at rest and are never displayed back or shared.
• Operational metadata: timestamps, delivery/health status, and request identifiers used to operate and troubleshoot the service.

How we use it

Data is used solely to deliver the customer-support service for the business that owns the workspace: routing incoming messages to that business's inbox, sending replies, generating optional AI responses from the business's own knowledge, and monitoring channel health. We do not sell personal data or use it for advertising.

Third-party processors

• Messaging platforms (Meta — WhatsApp, Instagram, Facebook Messenger; Telegram) to send and receive messages you have connected.
• OpenAI to generate AI-assisted replies and to transcribe inbound voice notes, when a business enables those features.
• Cloud infrastructure (application hosting and a managed PostgreSQL database) to run the service.
• Email delivery for account verification, password resets and notifications.
• Error monitoring to record server faults. Request data is scrubbed of credentials and contact details before being recorded.

Data retention & tenant isolation

Each business's data is isolated to its own workspace and is retained while the workspace is active. After an account is closed, data is deleted within 30 days. A business may also delete its entire workspace at any time from the dashboard, which permanently removes all of its data immediately, and may export its data as a machine-readable file beforehand.

Security

Traffic is served over HTTPS, channel secrets are encrypted at rest, passwords are stored only as salted hashes, webhook payloads are signature-verified, and access is authenticated and tenant-scoped.

Your rights

Depending on where you are located, you may have the right to access, correct, export or delete your personal data, and to object to or restrict its processing. Businesses can exercise access, export and deletion directly from the dashboard. For anything else — including a request from an individual whose messages were handled by a business using this service — contact dev@thunder-haus.com. We respond within the period required by applicable law.

Contact

Questions about this policy: dev@thunder-haus.com.

Contact: dev@thunder-haus.com · Last updated July 2026