Your business data, handled with purpose.

This Privacy Policy explains how Munafa (“Munafa”, “we”, “us”, or “our”) handles information when businesses and their authorized users use Munafa, and when customers interact with those businesses through connected channels. Munafa provides AI-assisted sales, customer interaction, commerce, and service scheduling tools. The business using Munafa may also have its own privacy obligations to its customers.

This policy applies to Munafa’s public website, business applications, and connected messaging, commerce, and scheduling workflows. It describes Munafa’s handling of information for businesses, authorized users, and customers interacting through those workflows. It does not replace the privacy notices of a participating business or the separate policies of third-party services.

We collect information that is provided to us, generated through use of the service, or received from integrations a business chooses to connect. The categories depend on the Munafa features a business enables.

We do not ask businesses to provide card numbers, bank-account credentials, Google passwords, or WhatsApp passwords to use the ordinary Munafa workflow.

This may include business and contact details, authorized-user information, product catalogs, service offerings, prices, inventory information, locations, policies, sales instructions, qualification questions, appointment settings, notification preferences, and content used to serve customers.

When a customer contacts a participating business through WhatsApp or another connected channel, Munafa may process the customer’s messaging identifier, name where available, message content, attachments or structured responses where supported, conversation status, and related interaction history. The business determines the channel it connects and is responsible for providing any notices or obtaining permissions required for its customer relationship.

We may process account identifiers, email addresses, authentication events, business memberships, roles, and security-related records used to sign users in, authorize access, and protect accounts. Authentication providers may separately process information under their own terms.

Munafa stores and presents the business information needed for enabled workflows, such as product names, descriptions, prices, stock-related information, service descriptions, duration, appointment mode, and physical location where applicable.

We may process messages, conversation context, customer selections, qualification responses, handoff or follow-up status, and technical events associated with a conversation. This supports continuity, business oversight, abuse prevention, usage accounting, and requested customer interactions.

Depending on enabled features, Munafa may process cart contents, quantities, order and invoice references, fulfillment status, requested services, qualification answers, requested appointment date and time, timezone, appointment location, appointment status, and synchronization status.

Where a business enables payments, Munafa may create or display payment links and process payment status, provider references, amounts, and operational events. Payment providers such as Cashfree may collect and process payment credentials directly under their own policies. Munafa does not claim to store a customer’s complete card number, bank-login credentials, UPI PIN, or payment-provider secret.

Munafa may securely retain authorization tokens or related connection records so the selected Calendar functionality can continue without asking the user to reconnect for every appointment. Sensitive authorization credentials are protected and used only for connected functionality. We do not receive the user’s Google password.

A business may connect a business messaging channel so Munafa can process customer conversations and send operational replies for the business’s configured sales or support workflow. WhatsApp and Meta are third-party services with their own terms and privacy practices. Munafa is not affiliated with or endorsed by Meta.

Munafa uses automated and AI-assisted systems to interpret requests, maintain relevant conversation context, present catalog or service information, and help carry out business-configured workflows. These systems may process conversation content and relevant business information. Businesses remain responsible for reviewing their configuration and for decisions that require their judgment.

Scheduling workflows may process qualification answers, the requested service, preferred and confirmed date and time, timezone, location, appointment mode, appointment status, and rescheduling or cancellation activity. When Calendar is connected, Munafa synchronizes the canonical appointment with the authorized Calendar account.

Product workflows may process catalog searches, customer selections, cart contents, stock availability, order details, checkout or payment-provider handoff state, payment status, and fulfillment-related information. A participating business controls its catalog, pricing, inventory, and sales policies.

Munafa may create owner or administrator notifications about customer attention, orders, appointments, connection status, and other operational events. It may also prepare or send customer messages, including confirmations and reminders, through channels enabled by the business.

We use information to provide and operate Munafa; authenticate users; deliver connected messaging, commerce, and scheduling features; maintain business records; provide support; meter entitled usage; improve reliability and user-facing functionality; detect abuse; secure the service; and communicate about material service or policy changes.

We may process information to enforce agreements, investigate misuse, protect users and the service, respond to lawful requests, establish or defend legal claims, meet accounting or recordkeeping obligations, and complete business transactions such as a reorganization subject to applicable safeguards.

We may use hosting, database, authentication, cloud, communications, analytics, payment, AI/model, monitoring, and support providers to operate Munafa. These providers process information for defined services and are subject to contractual or legal obligations appropriate to their role.

Information may be shared with the business whose workflow a customer uses, authorized business users, service providers supporting Munafa, connected third-party services at the user’s direction, professional advisers, or authorities where legally required. We do not sell Google Calendar user data or use it for targeted advertising.

We retain information for as long as reasonably needed to provide the service, maintain operational and transaction records, resolve disputes, enforce agreements, meet legal obligations, and maintain secure backups. Retention periods vary by data type, account status, business configuration, and applicable requirements. Deletion from backups may occur on a delayed cycle.

We use administrative, technical, and organizational safeguards designed to protect information. No internet service can guarantee absolute security. Users should protect their accounts, use appropriate access controls, and promptly report suspected unauthorized access.

Authorized users can manage business information, connected services, and certain communication or notification settings through available controls. Customers may provide or withhold optional information, but some data is necessary to complete an order, appointment, or requested interaction.

To request access, correction, or deletion, contact contact@munafa.si. Customers should ordinarily contact the business they interacted with first because that business may control the customer relationship and relevant records. We may verify identity and authority before acting, and may retain information where law, security, fraud prevention, transaction records, or legitimate operational needs require it.

An authorized business user may disconnect Google Calendar through available Munafa integration controls. A user may also revoke Munafa’s access through the security or third-party access settings in their Google Account. For help or a deletion request, contact us at the address above.

After disconnection, Munafa will stop making new authorized Calendar API requests. Existing events in Google Calendar may remain unless deleted separately, pending synchronization may stop, and Calendar-based availability, updates, cancellations, or Meet creation may no longer work. Connection records and operational history may be retained as described in this policy.

When people use Munafa, we may receive limited technical information such as IP address, browser or device type, page and action timestamps, session and security signals, and diagnostic events. We use this information to operate, secure, troubleshoot, and measure the service.

Munafa websites and applications may use cookies or browser storage that are necessary for authentication, security, preferences, session continuity, and basic site measurement. Available controls depend on the browser and the part of Munafa being used; blocking necessary storage may prevent sign-in or other features from working.

Munafa is a business service and is not directed to children. Businesses must not use Munafa to knowingly collect children’s information contrary to applicable law. If you believe a child’s information has been provided improperly, contact us.

Munafa and its service providers may process information in India and other countries where they operate. Those locations may have different data-protection laws. Where required, appropriate measures will be used for cross-border processing.

We may update this policy as Munafa, integrations, or legal requirements change. We will update the date on this page and provide additional notice where a material change requires it. If Google user data would be used for a new purpose, we will provide the disclosures and consent required before that new use.

Questions or privacy requests may be sent to contact@munafa.si. Do not email passwords, full payment credentials, OAuth tokens, or other secrets.