Website and application.
The marketing website is hosted by DigitalOcean and serves static pages and local assets; it does not host the customer-conversation database. Optional chat connects to the separate application. The application is hosted in a private data center in the United Arab Emirates.
Access and account responsibilities.
Application information is accessed by authorized members of the relevant business workspace and personnel or providers who need it to operate or support the service. Businesses are responsible for assigning appropriate access, keeping their credentials secure and removing access when a team member leaves. Use the provider authorization flow for connected accounts; never send a Meta password or access token to support.
Connected providers and AI.
Connected Meta platforms process account authorization and communications. Optional AI assistance can send selected message content and business context to the workspace’s configured OpenAI or Anthropic service. Provider processing can occur outside the UAE. The privacy policy explains the purposes and sharing restrictions; contact us for provider details applicable to your workspace.
Retention and deletion.
Information is retained for the necessary service purpose or a specific legal obligation. Deletion requests include the relevant service records and provider copies, with restricted treatment of backups and legal exceptions as described in the data-deletion policy. Revoking a connection alone does not establish that stored records have been deleted.
Report a security concern.
Report suspected unauthorized access or a vulnerability using the privacy contact below. Provide a description, affected feature and steps to reproduce using non-sensitive examples. Do not send real customer messages, credentials or tokens. We assess reported concerns and address identified deficiencies; this page does not assert a third-party certification or audit.
Privacy and data-deletion contact.
For access, correction, deletion, privacy questions or security reports, use the privacy request email below. You do not need an active account to submit a request.
contact@smgateway.comSee the data-deletion instructions for the information to include.