Privacy Policy

Last updated August 2026

Who we are

Jumeira Automation is a service operated by Jumeira Tech. It allows a business that owns a Facebook Page to reply automatically to people who message that Page. In this policy, "we" means Jumeira Tech, and "the business" means the owner of the connected Facebook Page.

Information we process

When a person sends a message to a Facebook Page connected to our service, we receive and store:

• The Page-scoped ID (PSID) that Facebook assigns to that person for that Page. It is not their Facebook account ID.
• Their first name, last name and profile picture, as provided by Facebook, so replies can be personalized.
• The content of the messages they send to the Page, and the automated messages we send in return.
• Timestamps and delivery status of each message, including any error returned by Meta.

For the business using our dashboard, we store the account name, email address, a hashed password, and an encrypted Facebook Page access token.

Why we process it

• To deliver the automated replies the business has configured.
• To respect the 24-hour messaging window and opt-out requests required by Meta's platform policies.
• To show the business a record of what was received and sent, so they can support their customers.
• To diagnose delivery failures.

We do not sell personal data, we do not use message content for advertising, and we do not use it to train models.

Opting out

Anyone can stop automated messages at any time by sending stop (or an equivalent Arabic keyword such as الغاء) to the Page. Automation halts immediately, any queued messages are cancelled, and nothing further is sent unless the person opts back in.

Sharing

Message content is visible to the business that owns the Page, which is the party the person chose to contact. We share data with Meta Platforms only to the extent required to send and receive Messenger messages through their API. We use hosting providers who process data on our behalf under contract.

Retention

Message logs and contact records are kept while the business's account is active, because the business needs the history to serve their customers. When a Page is disconnected or an account is deleted, the associated contacts, message history and uploaded images are erased.

Deleting your data

People who messaged a connected Page can request deletion through Facebook, which sends us a deletion request automatically, or by emailing privacy@jumeira.tech. Our deletion endpoint returns a confirmation code you can check at any time:

https://jumeira.cloud/api/data-deletion.php

Businesses can erase everything themselves from the Settings page of the dashboard.

Security

Page access tokens are encrypted at rest with AES-256-GCM. Passwords are stored as one-way hashes. Every webhook delivery is verified against Meta's request signature before it is processed. Uploaded images are served only to signed-in accounts.

Contact

Questions about this policy: privacy@jumeira.tech.

Terms of Service