Privacy Policy
How Brilliants9 collects, uses, shares, and protects information on brilliants9.com and in Brilliants9 Business AI, including data received through WhatsApp, Messenger, and Instagram.
1. Who we are
Brilliants9 is operated by Mohamad Baydoun, trading as Brilliants9, based in Lebanon ("Brilliants9", "we", "us"). You can reach us at support@brilliants9.com or on WhatsApp at +961 76 710 097.
2. What this policy covers
This policy applies to:
- our company website, brilliants9.com;
- Brilliants9 Business AI, the dashboard at ai.brilliants9.com where businesses build and manage an AI assistant;
- the chat assistant that businesses place on their own websites (the "website widget"); and
- the business messaging channels a business chooses to connect to its assistant: WhatsApp, Facebook Messenger, and Instagram direct messages.
It does not cover other websites or services, including the websites of businesses that use our assistant and the apps of Meta Platforms, which have their own policies.
3. Our role and yours
- Business customers open a Brilliants9 Business AI account, upload their own content, configure an assistant, and connect channels.
- Staff members are people a business invites to its account.
- End customers are people who message a business's assistant on its website or on WhatsApp, Messenger, or Instagram. They do not need a Brilliants9 account.
When we process end customers' messages, we do so on behalf of the business they are contacting and according to that business's settings. The business decides what content its assistant uses and how it handles its customers' conversations, and it is responsible for telling its customers how it uses their information. If you are an end customer, you can contact the business directly, or contact us and we will pass your request to it or help where we can.
4. Information we process
| Category | Examples |
|---|---|
| Account and team | Name, email address, password (stored only as a secure hash) or Google sign-in, business name and profile, team members and their roles. |
| Business content | Documents, questions and answers, product catalogs, and assistant settings that a business uploads or writes. |
| Conversations | Messages between end customers and the assistant or the business's staff, the time of each message, and the channel used. Voice notes and their text transcripts when a business turns on voice replies. |
| Contact details shared in a chat | Details an end customer chooses to give, such as a name, phone number, or email, for example when asking to be contacted. |
| Connected channel data | WhatsApp phone numbers and profile names, WhatsApp Business Account and phone-number IDs, Facebook Page IDs and Messenger user IDs, Instagram account IDs, and the access tokens that let the assistant send replies. See section 7. |
| Technical and security | IP address, browser and device type, sign-in and security events, error logs, and an audit record of important account actions. |
| Usage | Counts of messages, answers, and features used, so we can apply plan limits and improve the service. |
| Support | Messages you send us by email, WhatsApp, or our website forms. |
We do not currently process card or bank payment details. Paid plans are arranged directly with us and invoiced manually.
5. How we use information
- To create and run accounts, and to sign you in securely.
- To read a business's content and use it to answer its customers' questions.
- To receive and send messages on the channels a business connects, and to show conversations in its inbox.
- To hand a conversation to a person on the business's team when the assistant cannot help or the customer asks for a person.
- To measure usage, apply plan limits, and show a business its analytics.
- To protect the service: detect abuse, spam, and fraud, limit request rates, and investigate security events.
- To provide support and send service emails, such as sign-in codes and important account notices.
- To fix problems and improve the service.
- To meet legal obligations and enforce our Terms of Service.
We do not sell personal information, and we do not use end customers' messages to advertise to them.
6. How the AI assistant works
When an end customer sends a message, we search the business's own content for relevant passages and send the question, those passages, and recent messages in the conversation to our AI provider, OpenAI, which generates the reply. The assistant is designed to answer only from the business's content and to offer a person when it cannot answer.
AI replies can still be wrong or incomplete. Businesses should review their content and can take over any conversation.
OpenAI's terms for business API customers state that data sent through its API is not used to train OpenAI's models by default. We do not use businesses' content or their customers' messages to train our own AI models.
7. Data from WhatsApp, Messenger, and Instagram
A business can connect its WhatsApp Business number, its Facebook Page (for Messenger), and its Instagram professional account. When it does, Meta sends us:
- messages that people send to that number, Page, or account, including text, button choices, and voice notes;
- the sender's channel identifier (a phone number on WhatsApp, or a Messenger or Instagram user ID) and, where available, their profile name;
- delivery and read events, and replies that the business sends from Meta's own apps, so the assistant knows when a person has taken over; and
- the account and Page identifiers and access tokens needed to reply.
We use this data only to connect the business's account, receive and answer its customers' messages, show the conversations in its inbox, hand conversations to its staff, keep the service secure, and follow the rules of each channel. We do not use it for advertising and we do not sell it. Access tokens are stored encrypted.
A business can disconnect a channel at any time from its dashboard; disconnecting deletes the stored access token. Businesses and people who messaged a business can ask us to delete data that came through these channels by following our Data Deletion Instructions.
8. Service providers and sharing
We share information only as needed to run the service, with:
- Hosting: Hostinger, which provides the servers that run Brilliants9 Business AI and store its database and files.
- AI: OpenAI, for generating replies, understanding questions, and turning voice notes into text and text into speech.
- Messaging channels: Meta Platforms (WhatsApp, Messenger, and Instagram), to deliver messages on the channels a business connects.
- Email: Resend, to send account and service emails.
- Sign-in and integrations: Google, when you choose to sign in with Google or connect Google Calendar or Google Drive.
- Internal alerts: Telegram, which delivers operational alerts to our team, such as a notice with the email address of a new account.
We may also disclose information when required by law or to protect the rights and safety of our users or the public, to our professional advisers under confidentiality, or to a successor if our business is transferred, in which case this policy will continue to apply.
9. Cookies and browser storage
Our websites use cookies and browser storage only to keep you signed in, protect forms against misuse, remember your language, and keep a website chat conversation going between pages. We do not use advertising cookies or third-party analytics on brilliants9.com or in Brilliants9 Business AI.
10. How long we keep information
- Account, content, and conversations: while the account is active, until the business deletes them, or until we act on a deletion request.
- Connected channel tokens: until the channel is disconnected or the account is deleted.
- Security and audit records: for as long as they are needed to protect the service and meet legal obligations, then deleted.
- Backups: daily database backups are kept for up to 7 days, so deleted data disappears from backups within that time.
11. Security
We use reasonable technical and organizational safeguards, including encrypted connections (HTTPS), encrypted storage of channel access tokens, hashed passwords, separation of each business's data, access limits, and signature checks on incoming channel messages. No system is completely secure, so we cannot guarantee absolute security. If we learn of a breach that affects your information, we will notify affected businesses as required by law.
12. International processing
We operate from Lebanon, and our providers may process information in other countries, including the United States. When information is processed outside your country, we rely on our providers' contractual commitments to protect it.
13. Your choices and rights
Depending on where you live, you may have the right to access, correct, export, or delete your information, or to object to or restrict how we use it. Business customers can do much of this in their dashboard: edit their profile, delete documents and conversations, export data, disconnect channels, and delete their account.
For anything else, email support@brilliants9.com. We may ask you to confirm your identity before acting, and we will reply within 30 days. For deletion, see our Data Deletion Instructions. If you are not satisfied with our reply, you may complain to your local data protection authority.
14. Business use and age
Brilliants9 Business AI is for businesses and is intended for account holders who are 18 or older. It is not directed at children. End customers message a business's assistant under that business's own terms.
15. Changes to this policy
We may update this policy as the service changes. We will change the "Last updated" date above and, for significant changes, notify business customers by email or in the dashboard before the change takes effect.
16. Contact us
Mohamad Baydoun, trading as Brilliants9
Lebanon
Email: support@brilliants9.com
WhatsApp: +961 76 710 097