Privacy Policy

1. Introduction

Popcorn Tech Ltd ("Popcorn AI," "Company," "we," "us," or "our"), a company incorporated in Dubai, United Arab Emirates, operates the Popcorn AI platform and related services (the "Service"). This Privacy Policy describes how we collect, use, store, share, and protect information when you use our Service, visit our website, or otherwise interact with us.

This Privacy Policy applies to all users of the Service, including Customers (businesses that subscribe to our platform), their authorized team members, and End Users (individuals who interact with Customers through messaging channels powered by the Service).

By using the Service, creating an account, or interacting with a business that uses the Service, you acknowledge that you have read and understood this Privacy Policy. If you are a Customer, you are responsible for informing your End Users about how their data is processed through the Service and for obtaining any required consents.

2. Information We Collect

2.1 Information Provided by Customers

When you create an account or use the Service, we collect information that you provide directly, including but not limited to:

  • Account registration information: business name, contact name, email address, phone number, billing address, and payment information;
  • Business information: industry, website URL, company size, and business identifiers;
  • Knowledge base content: product catalogs, FAQs, business policies, pricing information, and any other materials uploaded to train AI Agents;
  • Configuration data: AI Agent settings, conversation flows, campaign configurations, integration credentials, and workflow rules;
  • Communications: emails, support requests, feedback, and any other communications with our team.

2.2 Information from End User Conversations

When End Users interact with Customers through the Service, we process conversation data including but not limited to:

  • Message content: text messages, voice messages, images, documents, and any other media exchanged in conversations;
  • Contact information: phone numbers, names, and any other personal details shared during conversations;
  • Transaction data: order details, product selections, payment references, shipping addresses, and purchase history;
  • Interaction data: conversation timestamps, message read receipts, response times, and conversation outcomes;
  • Preferences and behavior: product preferences, browsing patterns within conversations, and any information voluntarily shared by End Users.

2.3 Information Collected Automatically

We automatically collect certain information when you use the Service, including but not limited to:

  • Usage data: features used, actions taken, pages viewed, Credit consumption, campaign performance, and interaction patterns;
  • Device and technical data: IP addresses, browser type and version, operating system, device identifiers, and language preferences;
  • Log data: access times, error logs, API call records, and system performance data;
  • Analytics data: aggregated usage statistics, conversion metrics, and performance benchmarks.

2.4 Information from Third Parties

We may receive information from third-party sources, including but not limited to:

  • E-commerce platforms (Shopify, Zid, Salla): product data, order information, customer records, inventory data, and store configuration;
  • Messaging platforms (WhatsApp Business API): delivery status, read receipts, quality ratings, and account status;
  • Payment processors: transaction confirmations, payment status, and billing information;
  • Analytics and advertising partners: usage trends, attribution data, and marketing performance metrics;
  • Publicly available sources: business information, social media profiles, and other publicly accessible data.

3. How We Use Information

We use the information we collect for a broad range of purposes related to providing, operating, improving, and expanding the Service, including but not limited to:

3.1 Providing and Operating the Service

  • Processing conversations between Customers and End Users through AI Agents;
  • Executing e-commerce transactions, including order processing, payment coordination, and fulfillment tracking;
  • Delivering marketing campaigns and automated messaging sequences;
  • Providing customer support and responding to inquiries;
  • Managing accounts, billing, and subscription services;
  • Maintaining platform security and preventing fraud or abuse.

3.2 Improving and Developing the Service

  • Training, improving, and fine-tuning AI models and algorithms using conversation data and usage patterns;
  • Developing new features, products, and services;
  • Conducting research, analysis, and testing to improve platform performance, accuracy, and reliability;
  • Generating aggregated and anonymized insights, benchmarks, and analytics;
  • Understanding how Customers and End Users interact with the Service to optimize user experience.

3.3 Communication and Marketing

  • Sending service-related notices, updates, and administrative communications;
  • Providing product announcements, feature updates, and educational content;
  • Delivering marketing and promotional communications (with opt-out options);
  • Conducting surveys and collecting feedback.

3.4 Legal and Compliance

  • Complying with applicable laws, regulations, and legal processes;
  • Enforcing our Terms of Service and protecting our rights and property;
  • Detecting, preventing, and addressing fraud, security issues, and technical problems;
  • Responding to lawful requests from public authorities.

4. AI and Machine Learning

The Service is powered by artificial intelligence and machine learning technologies. By using the Service, you acknowledge and agree to the following:

  • Conversation data processed through the Service may be used to train, improve, and optimize our AI models and algorithms. This includes using message content, interaction patterns, and outcomes to improve response quality, accuracy, and relevance across the platform;
  • We may use aggregated and anonymized data derived from Customer and End User interactions to develop general AI capabilities, industry benchmarks, and platform-wide improvements that benefit all users of the Service;
  • AI-generated responses are produced algorithmically and may not always be accurate, complete, or appropriate. Neither Popcorn AI nor the Customer guarantees the accuracy of AI-generated content;
  • We may use third-party AI service providers (such as large language model providers) to process conversation data. These providers are bound by data processing agreements and are prohibited from using your data for their own purposes outside of providing the service to us.

If you are a Customer and wish to discuss limitations on how your data is used for AI training purposes, please contact us at wecare@trypopcorn.ai to discuss available options under our Gourmet Mix Plan.

5. How We Share Information

We may share information with the following categories of recipients:

5.1 Service Providers and Partners

We share information with third-party service providers who assist us in operating and improving the Service, including but not limited to: cloud hosting and infrastructure providers, AI and machine learning service providers, payment processors, email and communication services, analytics and monitoring tools, and customer support platforms. These providers are contractually obligated to use your information only as necessary to provide services to us.

5.2 Third-Party Platform Integrations

When you connect the Service to third-party platforms (such as Shopify, Zid, Salla, WhatsApp, or Facebook), information is shared with those platforms as necessary to enable the integration. Your use of third-party platforms is subject to their own privacy policies and terms of service.

5.3 Business Transfers

In connection with any merger, acquisition, reorganization, sale of assets, or bankruptcy, your information may be transferred to the acquiring entity or successor. We will notify you via email or prominent notice on our website before your information becomes subject to a different privacy policy.

5.4 Legal Requirements

We may disclose information if we believe in good faith that disclosure is necessary to: comply with applicable law, regulation, or legal process; respond to lawful requests from public authorities, including law enforcement or national security requirements; protect the rights, property, or safety of Popcorn AI, our Customers, End Users, or the public; or enforce our Terms of Service.

5.5 With Customer Consent

We may share information with other third parties when we have your explicit consent to do so, or when you direct us to share information through your use of the Service.

5.6 Aggregated and Anonymized Data

We may share aggregated, anonymized, or de-identified information that cannot reasonably be used to identify you or any individual. This information may be shared with any third party for any purpose, including research, analytics, marketing, and industry benchmarking.

6. Data Storage and Security

6.1 Data Storage

Your information is stored on servers operated by our cloud infrastructure providers. Data may be stored and processed in multiple regions globally, and by using the Service, you consent to the transfer of your information to facilities in any country where we or our service providers operate. We will take reasonable steps to ensure your data is treated securely and in accordance with this Privacy Policy.

6.2 Security Measures

We implement commercially reasonable technical and organizational security measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These measures include, but are not limited to, encryption of data in transit and at rest, access controls, regular security assessments, and monitoring systems. However, no method of transmission over the internet or method of electronic storage is 100% secure, and we cannot guarantee absolute security.

6.3 Data Retention

We retain your information for as long as necessary to provide the Service, fulfill the purposes described in this Privacy Policy, comply with our legal obligations, resolve disputes, and enforce our agreements. The specific retention period depends on the nature of the data and the purposes for which it is processed. When information is no longer needed, we will delete or anonymize it in accordance with our internal data retention practices.

Conversation data and End User information is retained for as long as the Customer’s account is active, plus a reasonable period following account termination to allow for data export and to fulfill any legal or operational requirements. Customers may request deletion of specific data by contacting us at wecare@trypopcorn.ai.

7. Your Rights and Choices

7.1 Customer Rights

Depending on your jurisdiction, you may have certain rights regarding your personal information, including the right to:

  • Access the personal information we hold about you;
  • Request correction of inaccurate or incomplete information;
  • Request deletion of your personal information, subject to our legal obligations and legitimate interests;
  • Object to or restrict certain processing of your information;
  • Request portability of your information in a structured, machine-readable format;
  • Withdraw consent where processing is based on consent.

To exercise any of these rights, please contact us at wecare@trypopcorn.ai. We will respond to your request in accordance with applicable law. We may need to verify your identity before processing your request. We reserve the right to charge a reasonable fee or decline requests that are manifestly unfounded, excessive, or repetitive.

7.2 End User Rights

End Users who wish to exercise their data protection rights should contact the Customer (the business they interacted with) directly, as the Customer is the data controller for End User personal data. If an End User contacts us directly, we will make reasonable efforts to direct them to the appropriate Customer or assist where we are able to do so.

7.3 Marketing Communications

You can opt out of marketing communications at any time by using the unsubscribe link in our emails or by contacting us at wecare@trypopcorn.ai. Please note that you may continue to receive service-related communications that are necessary for the operation of your account.

8. International Data Transfers

Your information may be transferred to, stored in, and processed in countries other than the country in which you reside. These countries may have data protection laws that are different from the laws of your country. By using the Service, you consent to the transfer of your information to any country where we or our service providers operate.

Where required by applicable law, we will implement appropriate safeguards for international data transfers, such as standard contractual clauses, adequacy decisions, or other legally recognized transfer mechanisms. If you have questions about international data transfers, please contact us at wecare@trypopcorn.ai.

9. Cookies and Tracking Technologies

We use cookies, pixels, and similar tracking technologies on our website and within the Service to collect information about your browsing activity, preferences, and usage patterns. These technologies help us provide, customize, and improve the Service, analyze usage trends, administer the website, track user movements, and gather demographic information.

You can manage your cookie preferences through your browser settings. Please note that disabling cookies may affect the functionality of the Service. By continuing to use our website and Service, you consent to our use of cookies and tracking technologies as described in this Privacy Policy.

10. Children’s Privacy

The Service is not directed at individuals under the age of 18, and we do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child, we will take steps to delete such information. If you believe a child has provided us with personal information, please contact us at wecare@trypopcorn.ai.

11. Third-Party Links and Services

The Service may contain links to or integrations with third-party websites, platforms, and services. We are not responsible for the privacy practices, content, or policies of any third party. We encourage you to review the privacy policies of any third-party services you interact with.

12. Data Controller and Processor Roles

For the purposes of applicable data protection laws:

  • Popcorn AI acts as a data controller for information collected from Customers for account management, billing, marketing, and service improvement purposes;
  • Popcorn AI acts as a data processor on behalf of Customers for End User data processed through the Service. Customers are the data controllers for their End Users’ personal data and are responsible for ensuring they have a lawful basis for processing;
  • Popcorn AI acts as a data controller for aggregated and anonymized data derived from the Service, which may be used for research, analytics, product development, and any other lawful purpose.

Customers requiring a formal Data Processing Agreement (DPA) may contact us at wecare@trypopcorn.ai to discuss available options.

13. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy at any time. We will notify you of material changes by posting the updated Privacy Policy on our website and, where appropriate, by sending you an email notification. The "Last Updated" date at the top of this policy indicates when the latest revisions were made. Your continued use of the Service after any changes to this Privacy Policy constitutes your acceptance of the updated policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Email: wecare@trypopcorn.ai

Company: Popcorn Tech Ltd

Address: Dubai, United Arab Emirates