Privacy Policy

Who we are

Akros Digital Consultancy Pte. Ltd. (UEN 202540498Z) is a Singapore company. We provide the Akros Dashboard, business reporting, WhatsApp Business Platform connection tools, and business communications and operations software with assistive AI features.

Our role and the business customer's role

A business customer decides why it communicates with people, which people it contacts, which facts and message templates it approves, which staff may use the service, and when a human must take over. The business customer owns and controls its business content and customer conversation data. When Akros processes that data only to provide the requested service on the business customer's instructions, Akros generally acts as its data intermediary or processor. Akros may act separately as the responsible organisation for its own account administration, security, billing, abuse prevention, and legal records.

Data we may process

• Business account, tenant, staff, login, permission, support, and billing information.
• Advertising and website performance data from services such as Google Ads and Meta.
• WhatsApp Business Platform account, phone, WABA, template, connection, delivery, and technical event information.
• WhatsApp end-user phone numbers, profile names, messages, staff replies, opt-in or opt-out preferences, and delivery records.
• Business-approved knowledge, pricing, services, hours, policies, tone, persona, handoff rules, and test-number settings.
• Assistive AI prompts, responses, safety decisions, source references, risk signals, handoff records, and send results.
• Security, audit, usage, device, IP, request, and diagnostic information needed to operate and protect the service.

A WhatsApp end user may choose to include personal, patient, or health information in a message. Customers should configure the service to collect only what is necessary for their approved purpose.

How we use data

We use data to authenticate users, provide tenant-scoped dashboards, connect customer-owned WhatsApp assets, send and receive authorised messages, prevent duplicate sends, apply safety and opt-out rules, support human handoff, generate grounded, safety-gated reply content, measure usage, resolve incidents, and meet legal or contractual duties. Akros does not itself use WhatsApp Business Solution Data to train or improve general-purpose AI models. Until Akros verifies paid billing, the applicable data processing agreement or DPA, and no-product-improvement processing in the selected AI provider's contract and configuration, no WhatsApp Business Solution Data is approved for AI provider processing. Zero Data Retention, abuse logging, age eligibility, and clinical-context suitability require separate review.

Platforms and service providers

Providing the service requires data to be processed by selected service providers. These currently include Meta and WhatsApp for WhatsApp Business Platform functions, Vercel for application hosting, Supabase for database and authentication services, and Anthropic's Claude API for assistive AI reply composition when that feature is enabled. A configured legacy customer connection may also use 360dialog during a controlled transition or rollback. Each provider processes data under its own terms and the applicable agreement with Akros or the business customer.

Our Meta and WhatsApp use is subject to the WhatsApp Business Terms and the WhatsApp Business Messaging Policy.

Security and access

We use HTTPS, authenticated access, tenant-scoped controls, restricted server roles, webhook signature checks, and safety controls. Extra controls for the new direct Meta connector, including encrypted provider credentials, bounded webhook processing, and expanded audit records, must pass their rollout gate before that connector handles production customer data. Access is limited to authorised Akros personnel, authorised customer staff, and service providers that need it for the service. No system is completely secure, so customers must also control their staff access, devices, Meta assets, and approved content.

Retention and deletion

We retain data only while it is needed for the purpose for which it was collected, to provide the requested service, or for a documented legal, security, audit, accounting, dispute, opt-out, or platform-recordkeeping need. Different records have different lifecycles. The new direct Meta connector is designed to assign raw webhook payloads a seven-day default expiry and clear them after terminal processing, but that control and its production cleanup schedule must be verified before the connector handles production customer data. Message, decision, audit, usage, and customer records may be needed for longer. Deletion from active systems may not immediately remove limited copies from provider backups. The applicable backup deletion windows are not yet confirmed and must be verified before customer rollout.

See our data deletion instructions for business-customer and WhatsApp end-user request steps.

Access, correction, and requests

A person may ask to access, correct, restrict, or delete personal data under applicable law. A WhatsApp end user should normally contact the business or clinic they messaged because that business controls the conversation. Akros can also help route or review a request after verifying identity and authority. We may ask the customer for instructions where it controls the data.

International processing

Some providers and their facilities are outside Singapore. When personal data is transferred internationally, Akros and the business customer must use contracts and safeguards appropriate to their roles and the Personal Data Protection Act 2012 of Singapore (PDPA). The exact provider region and transfer setup may vary by customer deployment.

Healthcare and human review

The assistive AI feature is not a doctor, medical professional, medical device, emergency service, diagnosis, treatment, or medical advice. It can be incomplete or wrong. Healthcare customers must approve the permitted administrative scope, assess whether their use is lawful and suitable, and keep prompt human review and handoff available. A person who needs urgent medical help should contact local emergency services or a qualified healthcare professional.

Contact

Akros Digital Consultancy Pte. Ltd.
UEN 202540498Z
Singapore
info@akrosdigital.com.sg

Data protection enquiries and requests: info@akrosdigital.com.sg.