Who is responsible for your information.

360 Gateways Group FZE LLC is responsible for information used to operate our website, administer service accounts and respond to inquiries. When a business uses SM Gateway to handle its customer conversations, that business determines the purposes of that processing and we process the information on its behalf and instructions. The business remains responsible for its customer notices, permissions and lawful use. You can contact us directly about information held by SM Gateway even if you are not a workspace member.

Information we collect and process.

The information depends on the features you use and permissions you grant. We process information provided by you, your business or authorized connected platforms to deliver the requested service.

  • Account and business information: name, email address, business and workspace details, team membership and access settings.
  • Customer communications: messages, attachments, contact details provided in conversations, conversation identifiers, timestamps, delivery status, assignments, internal notes and follow-up records.
  • Connected Meta accounts: authorized Facebook Page, Instagram professional account and WhatsApp Business identifiers and names; sender identifiers, profile details made available by the relevant API, messages and associated media or events; access tokens and permission/connection records needed to maintain authorized access. We do not collect your Facebook, Instagram or WhatsApp password.
  • Support and website information: information you send in an inquiry, saved browser preferences and technical information needed to deliver and protect the service, such as connection and error records.

How and why we use information.

We use information to create and administer workspaces, connect accounts you authorize, receive and send business communications, organize conversations and leads, assign follow-up, provide enabled automation or AI assistance, respond to support and privacy requests, troubleshoot delivery and protect against abuse. We process information under the applicable service agreement, your permissions or consent where required, legitimate operational and security interests where permitted, and legal obligations. We request platform permissions for the features you choose; the data available depends on the provider and permissions granted.

Meta platform data and permitted use.

Facebook, Instagram and WhatsApp data is used for the authorized business messaging and account-management features described here, on behalf of the business that connected the accounts. We do not sell or license Meta platform data, use it for surveillance or eligibility decisions, or build unrelated profiles. We do not use one business’s platform data for another business. Our processing remains subject to Meta Platform Terms, Developer Policies and applicable product rules; this policy does not override those requirements.

Who receives information.

Authorized members of the relevant business workspace can access information according to their assigned access. Connected channel providers, including Meta for Facebook, Instagram and WhatsApp, process information necessary for authorization and message delivery under their own policies. Service providers may process information needed for hosting, storage, support or enabled AI features on our behalf under applicable contractual restrictions. We share information only as necessary for the stated purposes, at the business’s authorized direction, or where legally required. We do not sell personal information. Contact us for information about the providers applicable to your workspace.

Optional AI assistance.

When a business enables AI assistance, selected message content, prompts and business context can be sent to the AI provider configured for that workspace, including OpenAI or Anthropic. This processing supports responses or drafts for that business. AI processing is separate from ordinary message delivery and its scope depends on the enabled feature. Businesses must provide appropriate notices and permissions and review outputs before relying on them. Connected platform data must not be used for unrelated model training or a provider’s own purposes contrary to Meta requirements. Provider retention and processing locations depend on the applicable service and agreement; contact us for the details relevant to your setup.

Storage and international processing.

Our marketing website is hosted by DigitalOcean. Our application is hosted in a private data center in the United Arab Emirates. Connected platforms and service providers may process information in other countries. UAE application hosting does not mean every provider processes information only in the UAE. Where required, transfers must use applicable contractual safeguards and other protections under relevant law and platform requirements. Access to service data is limited to authorized business users and personnel or providers who need it for the stated purposes.

Retention and deletion.

We retain information only for as long as necessary for the authorized service purpose or an applicable legal obligation. Meta platform data is deleted promptly following a valid user, business or Meta request, when it is no longer necessary, when the relevant customer account ends, or when we cease the service through which it was collected, unless applicable law requires retention. Deletion covers associated records and copies held by our service providers as applicable. Restricted backup copies are subject to deletion or expiry and must not be restored to ordinary use after deletion. Legally required records are limited to the required scope and duration. See our data-deletion instructions for requests and exceptions.

Your choices and rights.

All users who can access the application may request deletion, regardless of where they live and without maintaining an active account. You may also request access or correction and, where applicable law provides, restriction, portability, objection or withdrawal of consent. Use the privacy contact below. We verify identity and authority using only information reasonably necessary to locate and protect the records. We respond without undue delay and within applicable legal deadlines. For business-controlled conversations, we coordinate with the relevant business; you may contact it as well. You can revoke connected-platform permissions using the provider’s settings, but revocation alone does not delete stored history. You may raise a complaint with the competent data-protection authority where applicable.

Website preferences and children.

The marketing website does not include analytics or advertising trackers. Optional chat loads only when you choose to start it; browser storage is explained in our cookie policy. SM Gateway is a business service and is not directed at children. Do not knowingly submit children’s personal information without an appropriate lawful basis and safeguards. Contact us if information has been supplied improperly.

Changes and contact.

We update this policy when our service or processing changes and show the effective date on this page. Material changes will be communicated where required. Contact the privacy address below for questions, rights requests or concerns about how your information is handled.

Privacy and data-deletion contact.

For access, correction, deletion, privacy questions or security reports, use the privacy request email below. You do not need an active account to submit a request.

contact@smgateway.com

See the data-deletion instructions for the information to include.