Legal
Privacy policy
Amir Digital Manager ("Amir", "we", "us") is a service that lets a small business run its website by messaging Amir on WhatsApp or Telegram. This policy explains what information we collect, why, who we share it with, and the choices you have. It is written to be read, not skimmed: if anything is unclear, write to contact@amirdm.com and we will answer plainly.
Who this policy covers
Three groups of people interact with Amir, and we collect different things from each:
- Visitors to amirdm.com - people reading this marketing site or signing in to the admin panel.
- Business customers - the owners and staff of a business that uses Amir to run its website, including everyone who messages Amir on that business's behalf.
- Visitors to a hosted business site - the public who browse a website that Amir hosts for one of our business customers. For those sites the business is the party responsible for the data (the "controller"); we process it on the business's behalf, and this policy describes what that processing involves.
Information we collect
From visitors to amirdm.com
The marketing pages set no cookies and run no analytics scripts. Our hosting provider (Cloudflare) keeps ordinary server logs - IP address, browser type, pages requested - for security and operations, under its own retention rules. If you sign in to the admin panel we collect your email address (used to send the sign-in link) and set a session cookie that keeps you signed in; that cookie is strictly necessary for the panel to work. If you book a call, the booking runs on cal.com under its own privacy policy.
From business customers
- Contact and account details: your business name, the WhatsApp phone number or Telegram account you message Amir from (including the display name those services share with us), the email address used for the admin panel, and your preferred language.
- Your messages to Amir: the text, voice notes, and photos you send, and Amir's replies. Voice notes are stored as audio and transcribed; photos you ask Amir to use are stored so they can appear on your site.
- Your business content: everything you ask Amir to publish - menu or service items, prices, descriptions, opening hours, address, phone number, social links, photos, and the text of your pages.
- Change history: a log of what changed on your site, when, and from which message, so that every change can be undone and so we can support you when something looks wrong.
- Billing status: which plan you are on and whether it is paid up. Payments are taken by a third-party payment processor (for example Stripe or PayPal); we never see or store your full card number.
- Support and developer requests: when Amir cannot do something and hands it to a developer, the text of your request and the resulting code change are recorded so the work can be reviewed, shipped, and reverted if needed.
From visitors to a hosted business site
Hosted sites use cookieless analytics and set no tracking cookies. For each visit we record the visitor's country (as reported by our edge network), the pages and sections viewed, and taps on calls to action (call, directions, order, social links). To count unique visitors per day without identifying anyone, we compute a one-way hash of the day, IP address, and browser signature; the raw IP address and browser signature are never stored, the hash cannot be reversed, it changes every day by construction, and it is deleted after a few days. If a hosted site offers a form (for example a waitlist or contact form) and you fill it in, the name, email, phone number, and note you enter are stored for that business, which is the party you are giving them to.
How we use information
- To provide the service: host your site, publish your changes, keep you signed in.
- To understand your messages: work out what you are asking Amir to do, transcribe voice notes, and read photos you send (see "AI processing" below).
- To confirm before acting and to let you undo any change.
- To bill you, and to tell you about changes to your plan, pricing, or these policies.
- To show you simple analytics about your own site in the admin panel.
- To keep the service secure, prevent abuse, and debug problems.
- To hand requests Amir cannot handle to a human developer, where your plan includes it.
We do not sell personal information, and we do not use it for advertising.
AI processing
Amir understands messages with the help of large language models operated by third parties. The text of your messages, the audio of voice notes, and the photos you send Amir may be sent to Anthropic (Claude) and Google (Gemini) to be transcribed and interpreted, together with the context needed to act on them, such as the names of your menu items. When a request is escalated to a developer, the request and a description of your site's structure may also be sent to these providers to draft the change. We use these providers under their business API terms; their handling of the data is governed by those terms and their privacy policies. We do not use your data to train models of our own.
Who we share information with
We share information only with providers that help us run the service, each for the purpose stated:
- Cloudflare - hosting, content delivery, DNS, SSL, and edge security.
- Convex - our database and file storage (messages, content, photos, voice notes).
- Anthropic and Google - AI processing, as described above. Hosted sites also load fonts from Google Fonts.
- Meta (WhatsApp Business) and Telegram - the messaging channels you talk to Amir through; they receive the messages you send and we send, under their terms.
- Resend - delivery of sign-in emails.
- GitHub - where code changes made for developer escalations are stored and reviewed.
- Payment processors (for example Stripe or PayPal) - when you pay for a plan.
- cal.com - if you book a call with us.
We may also disclose information if the law requires it, to protect the rights and safety of our customers or the public, or as part of a sale or merger of the business (in which case this policy continues to apply to the information transferred).
Cookies
The marketing site and hosted business sites do not use cookies. The admin panel uses one strictly necessary session cookie after you sign in. We do not use advertising or cross-site tracking cookies anywhere.
How long we keep information
- Business content, account details, and change history are kept for as long as the business is a customer, so that the site stays online and changes stay reversible, and are deleted within 90 days of the account closing unless we must keep them for legal or billing reasons.
- Messages and voice notes are kept as part of the change history above; a short rolling window of recent messages is also kept so Amir can follow a conversation.
- Daily visitor hashes are deleted after a few days; aggregate daily counts are kept.
- Sign-in emails and links expire shortly after they are sent.
Security
All traffic is encrypted in transit (TLS), data is stored with access controls, and Amir asks you to confirm before it changes anything on your site. Only the people you have authorised (by adding their WhatsApp or Telegram to your business) can make changes. No system is perfectly secure; if we learn of a breach affecting your information we will tell you without undue delay.
Your rights and choices
You can ask us at any time to show you the information we hold about you or your business, to correct it, to export your business content, or to delete it. Business customers can also simply tell Amir what to change or remove. Depending on where you live you may have further legal rights (for example under the GDPR in Europe or the CCPA in California), including the right to complain to a supervisory authority; we will honour them. To exercise any of these, email contact@amirdm.com. If you are a visitor to a hosted business site and want to reach the business itself, use the contact details shown on that site.
Where information is stored
Our providers run on infrastructure in the United States and on global edge networks, so your information may be processed outside the country you live in. Where the law requires it, we rely on our providers' standard contractual safeguards for those transfers.
Children
Amir is a business service and is not directed at children. We do not knowingly collect personal information from anyone under 16; if you believe we have, contact us and we will delete it.
Changes to this policy
When we change this policy we will update the date at the top and, for material changes, tell business customers through the channel they use with Amir or by email. Continued use of the service after the change takes effect means you accept the updated policy.
Contact
Questions, requests, and complaints: contact@amirdm.com. Our terms of service describe the rest of the agreement between you and Amir Digital Manager.