Privacy Policy

1 Data Controller Identity

The controller responsible for processing personal data is:

• Name: Mehdi Mekhnache
• Date of Birth: June 11, 2001 – Villeurbanne, France
• Address: 255 route de Vienne, 69200 Vénissieux, France
• Contact: puritywhiteaicontact@gmail.com – +33 7 66 20 69 85

2 Scope

This policy applies to all SaaS services provided by Purity White AI, including:

• AI chatbots (websites, WhatsApp, Instagram, Facebook Messenger)
• The SaaS dashboard
• External integrations (Google Calendar, Meta APIs, payment services)

3 Data Collected

Purity White AI only collects the data strictly necessary for the Service:

• End clients' data: name, surname, email, phone number, booking history, preferences, chatbot conversations
• Professionals' data: legal information, services, pricing, schedules, staff data
• Technical data: logs, strictly necessary cookies, and analytics cookies (with prior consent)

4 Purposes of Processing

Data is used to:

• Manage bookings and appointments
• Automate confirmations and reminders
• Provide personalized recommendations
• Analyze performance and usage
• Secure and optimize the Service
• Send promotional communications (with explicit prior consent)

5 Legal Basis (GDPR – Article 6)

Data processing is based on:

• Consent (opt-in)
• Contractual performance (bookings, reminders)
• Legitimate interest (security, optimization)
• Legal obligation (invoicing, mandatory retention)

6 Data Sharing

Data may only be shared with:

• The relevant Professional providing the service
• Technical service providers (hosting, Meta APIs, payment providers)
• Legal authorities if required by law

Cross-border transfers outside the EU are subject to Standard Contractual Clauses (SCCs) approved by the European Commission.

7 Security and Compliance

Measures implemented include:

• HTTPS/TLS encryption
• EU-based hosting
• Anti-spam and anti-duplication controls
• Encrypted backups
• SMS/email verification for sensitive access

8 Data Retention

Maximum retention periods:

• End clients: 36 months after the last interaction
• Professionals: duration of the contract + 5 years
• WhatsApp/Instagram conversations: 6 months, then anonymized
• Technical logs: 12 months

9 User Rights

In accordance with Articles 12–23 GDPR, every user has the right to:

• Access their personal data
• Rectify inaccurate data
• Request deletion ('right to be forgotten')
• Object to processing
• Request data portability
• Restrict processing

Requests should be sent to puritywhiteaicontact@gmail.com – a response will be provided within 30 days.

10 AI-Specific Provisions

• The AI assists but does not replace a human agent
• A "Speak to a human agent" option is always available
• No sensitive medical data is collected
• Urgent or critical cases are escalated directly to a human operator

11 Children

The Service is not intended for children under 15 years old without parental consent.

12 Hosting & Subcontracting

• Hosting is based in Europe, on ISO 27001-certified servers
• Subcontractors are bound by strict Data Processing Agreements (DPAs)
• Full compliance with Meta Business Messaging Policies is enforced

13 Cookies & Tracking

• Necessary cookies: security, authentication, session management
• Analytics cookies (Google Analytics, Meta Pixel): only with explicit consent

14 Meta AI Audit & Compliance

Purity White AI complies with Meta AI requirements:

• Explicit opt-in required for WhatsApp/Instagram messaging
• Data deletion available via a dedicated button
• No spam, no unauthorized transfers
• Use of Meta APIs is strictly limited to essential service functionality

15 Policy Updates

Any modification of this policy will be communicated to Professionals by email and made available to End clients through the Service.