Privacy Policy

Last updated: April 2026

1. Introduction

Welcome to MaxiCLI, a service operated by Al-Maleka Communications ("we", "us", or "the Company"). We are committed to protecting your privacy and personal data. This policy explains how we collect, use, and protect your information when you use our platform.

By using MaxiCLI services, you consent to the collection and use of information in accordance with this policy.

2. Data We Collect

a. Business Owner Data (Subscribers)

  • Business name and email address
  • Password (encrypted — never stored as plain text)
  • Subscription details and selected plan
  • Google Sign-In: When you choose to sign in using your Google account, we collect and process only the basic profile information available (such as name, email address, and profile picture) to facilitate account creation and authentication. We do not request or access any other data or services associated with your Google account.

b. Customer Data (End Users)

  • Name and phone number (from WhatsApp conversations)
  • Address and delivery notes (when placing orders)
  • Order and purchase history
  • Conversation history with the bot

c. Order & Transaction Data

  • Product details, quantities, and prices
  • Payment method and order status
  • Delivery address

d. Analytics & Usage Data

  • Number of conversations and orders
  • Bot interaction patterns
  • Performance data and reports

e. Marketing & Advertising Data (Future)

  • Social media advertising campaign data
  • Targeting data based on conversation analytics
  • Ad performance and conversion rates

3. How We Use Your Data

  • Service Delivery: Operating the bot, responding to customers, managing orders and CRM
  • Service Improvement: Analyzing performance and improving bot responses per individual business
  • Reporting: Generating weekly reports and analytics for subscribers
  • Marketing: Writing and scheduling social media posts (advanced plans)
  • Legal Compliance: Responding to legal requirements when necessary

4. Sharing Data with Third Parties

We do not sell your data to any third party. We only share data with:

  • Technology Service Providers: Azure OpenAI (for intelligent conversation processing), UChat (for WhatsApp integration), and hosting services — these parties process data on our behalf only and do not use it for their own purposes
  • Legal Authorities: Upon official request from a competent governmental authority in accordance with Egyptian law

Each business (subscriber) has fully isolated data — no subscriber can access another subscriber's data.

5. Data Security

We take strict security measures to protect your data:

  • Data encryption in transit and at rest
  • Passwords encrypted with bcrypt — never stored as plain text
  • JWT token authentication with immediate revocation on logout
  • Complete data isolation per subscriber (Multi-tenant isolation)
  • Strict access control through roles and permissions
  • Encryption of external service integration keys (API tokens)

6. Your Right to Data Deletion

You have the right to request deletion of your data at any time. To do so:

  • Send a request to hello@maxicli.com
  • We will process your request within 30 days maximum
  • We will delete all your data including conversations, orders, and customer records
  • Backup copies are deleted within an additional 30 days after deletion

7. Cookies

Our landing page is a static website and does not use tracking cookies. The dashboard uses essential cookies for login and sessions only — we do not use advertising or tracking cookies.

8. Third-Party Services

We use the following services to operate the platform:

  • Azure OpenAI: For intelligent conversation processing and response generation
  • UChat: For WhatsApp integration
  • Supabase (PostgreSQL): For data storage
  • Upstash Redis: For caching and session management

All these services comply with high industry security standards and do not use your data for their own purposes.

9. Children's Privacy

Our services are not directed at individuals under the age of 13. We do not knowingly collect children's data. If we discover that we have collected a child's data, we will delete it immediately.

10. Google API Services User Data Policy Compliance

MaxiCLI's use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements.

11. Changes to This Policy

We may update this policy from time to time. We will notify you of any material changes through this page. We recommend reviewing this policy periodically.

12. Contact Us

For any questions about this policy or your data, contact us via:

🛒 New Order

—