Privacy Policy

Last updated: 11 October 2026

1. Who we are

Code Falcons Media, referred to in this policy as “Code Falcons,” “CFM,” “we,” “us” or “our,” provides digital services, business software and AI automation solutions, including Code Falcons AI.

This Privacy Policy explains how we collect, use, disclose and protect personal information when you:

Visit our websites.
Contact us or purchase our services.
Use our client portal or business applications.
Interact with an AI assistant or website chat widget operated through our platform.
Communicate with a participating business through WhatsApp.
Authorize a business integration through Meta.
Upload information to configure an AI agent or its knowledge sources.

Legal entity: Falcons Media & Technologies Ltd
Business address: Henrietta Road Glen Park Vacoas – Mauritius
Privacy contact: support@codefalcons.com
Website: https://codefalcons.com

2. Our role and our clients’ responsibilities

For our own website, customer relationships, accounts and business administration, we determine the purposes for which personal information is processed.

When a business uses our platform to communicate with its customers, that business generally determines why customer information is collected and how it is used. We process that information on its behalf to provide the contracted services.

For example, if you use a chat widget on a client’s website, your messages and contact details may be available to that business and its authorized staff. The business’s own privacy policy also applies.

If your request concerns a client business’s customer records, we may refer it to that business or assist the business in responding.

3. Information we collect

The information collected depends on the service and your interaction.

Contact and account information

This may include your name, email address, telephone number, organization, account details and information you provide when requesting support or services.

Business and service information

This may include business names, addresses, websites, opening hours, service selections, package assignments, billing records and related correspondence.

Conversation information

When you use website chat or supported messaging channels, we may process:

Messages you send and replies you receive.
Contact details you choose to provide.
Conversation dates, timestamps and session identifiers.
The business, AI agent and channel associated with the conversation.
Requests for human assistance.
Assigned staff details, staff replies and conversation status.
Information needed to create a lead or arrange follow-up.

AI knowledge and uploaded content

Authorized users may provide website URLs, manual text, FAQs, business information, product or service information, and supported documents or images.

These sources may contain personal information. Businesses are responsible for ensuring that they have permission and an appropriate legal basis to provide this content.

Integration information

When a business authorizes an integration, we may receive information necessary to establish and operate it, including business account identifiers, phone-number identifiers, granted permissions and authorization credentials.

Technical information

We may process IP addresses, browser and device information, request logs, security events, session information and cookie preferences where necessary for the operation, security or permitted measurement of our services.

Please do not send passwords, full payment-card details or sensitive personal information through chat unless a service specifically requires it and provides an appropriate method.

4. How we use information

We use personal information, as applicable, to:

Provide and administer our services.
Create and manage accounts.
Configure AI agents and business integrations.
Answer questions using the relevant business’s approved knowledge.
Deliver messages and display conversation history.
Support staff assignment and human handover.
Record inquiries, leads and follow-up requests.
Provide customer support and resolve technical problems.
Administer service assignments, billing and contractual obligations.
Protect accounts, prevent misuse and investigate security incidents.
Maintain records required by law.
Improve service reliability and functionality.
Send marketing communications where permitted by law and your preferences.

We do not sell personal information.

5. Legal grounds for processing

Depending on the information and applicable law, we process personal information where necessary to:

Perform a contract or take steps requested before entering a contract.
Meet a legal obligation.
Pursue legitimate interests, such as securing our services and responding to business inquiries, subject to applicable protections.
Act on consent where consent is required.

When we act on behalf of a client business, that business is responsible for identifying the appropriate legal basis for its processing.

Where processing relies on consent, you may withdraw it. Withdrawal does not affect processing lawfully performed before withdrawal.

6. AI assistants and automated responses

Code Falcons AI can generate automated responses based on an agent’s configuration, conversation context and available knowledge.

To generate a response, relevant information may be transmitted to the AI model provider or routing service configured for that agent. This may include your question, relevant conversation context, business instructions and selected knowledge excerpts.

The provider used can vary between agents and clients. Processing by external providers is subject to the applicable service arrangements and provider policies. Contact us or the business operating the agent if you need information about the providers used for a particular service.

AI responses may be incomplete or inaccurate. Important information, such as prices, availability, appointments and contractual commitments, should be confirmed with the business.

A request to speak with a person may transfer the conversation to authorized staff or create a follow-up request. It does not guarantee that a staff member is immediately available.

AI interactions do not, by themselves, constitute a final business decision or binding commitment.

7. Website chat and human handover

When you use a website chat widget, your messages are processed to provide assistance and maintain the conversation.

If you request human assistance, the widget may ask for your name, email address and optional telephone number so the business can identify you and follow up.

Authorized staff may view the relevant conversation and respond through the business’s available interface. Their name or profile image may appear when they join or reply.

Closing the widget, ending a chat or starting a new session does not necessarily delete the previous conversation from business records. To request deletion, follow Section 15.

Chat availability depends on the business’s settings, service availability and staff coverage.

8. WhatsApp and Meta integrations

Businesses may authorize Code Falcons AI to access supported WhatsApp business assets through Meta’s authorization process.

Depending on the permissions granted and the integration used, we may process:

WhatsApp business account and phone-number identifiers.
Business profile information returned by Meta.
Authorization tokens and permission records.
Customer telephone numbers and messaging identities.
Message content, timestamps and delivery or read-status events.
Operational information needed to maintain the connection.

We use this information to provide the authorized integration, route messages, support AI or staff responses and manage connection status.

We do not ask clients to provide their Facebook or WhatsApp passwords. Authentication takes place through Meta’s interfaces.

Authorization does not give us unrestricted access to a person’s entire Facebook account or unrelated WhatsApp conversations.

Meta and WhatsApp also process information under their own terms and privacy policies.

A business may revoke our access through the applicable Meta controls or request disconnection through our support team. Revoking access stops future authorized access but does not automatically erase records already processed lawfully.

9. Knowledge sources and uploaded files

Knowledge sources are used to help an agent answer questions about the relevant business.

When a business supplies a website URL, the service may retrieve and process content from that page. Providing one URL does not necessarily import every page or product on that website.

Businesses should upload only information they are authorized to use and should avoid unnecessary personal or confidential information.

Knowledge sources are intended for the relevant client and agent. Access is governed by the platform’s account permissions and service configuration.

Relevant source content may be included in requests to the configured AI provider when generating an answer. Businesses should consider this before uploading confidential material.

10. Cookies and similar technologies

Our websites and applications may use cookies or similar technologies for functions such as:

Maintaining authenticated sessions.
Protecting requests and preventing misuse.
Remembering privacy preferences.
Supporting chat functionality.
Measuring usage or supporting other optional features where enabled.

Where consent is required, optional technologies should operate according to your selections. You can change your preferences through the available cookie controls and manage cookies through your browser.

Blocking essential cookies may prevent login, authorization or other functions from working correctly.

A client website may use its own cookies and tracking technologies separately from our widget.

11. Who receives information

We may disclose relevant information to:

The business operating the agent or messaging channel.
Authorized staff providing support or handling conversations.
Hosting, infrastructure and technical service providers.
AI model providers and routing services used for the selected agent.
Meta and other authorized integration providers.
Professional advisers where necessary.
Authorities where disclosure is legally required.
Parties involved in a business restructuring, subject to applicable safeguards.

Information is disclosed according to the purpose of the service and applicable contractual or legal requirements.

12. International processing

Our infrastructure and external service providers may process information outside Mauritius or outside your country.

Where applicable law requires safeguards for international transfers, we use appropriate contractual, organizational or other legally recognized measures.

13. Retention

We retain information for as long as reasonably necessary for the purpose for which it was collected, subject to applicable legal obligations and contractual arrangements.

Retention depends on factors including:

Whether an account or service remains active.
The client’s instructions and agreed service arrangements.
Customer-support and follow-up requirements.
Accounting and legal recordkeeping obligations.
Security investigations and dispute resolution.

Different records, such as conversations, uploaded knowledge, security logs and billing information, may have different retention periods.

Information in backups may remain until the relevant backup retention cycle expires. Records retained for legal or security reasons may not be immediately deleted.

14. Security

We use technical and organizational measures intended to protect personal information, including access restrictions, authentication controls and safeguards appropriate to the systems and information involved.

Access to client information is limited according to authorized roles and service needs.

No internet service or storage system can guarantee absolute security. If an incident occurs, we assess it and provide notifications where required by applicable law.

15. Your rights and deletion requests

Depending on applicable law, you may have rights to:

Request access to your personal information.
Correct inaccurate information.
Request deletion.
Restrict or object to certain processing.
Withdraw consent.
Obtain a portable copy where the right applies.
Raise concerns about processing or lodge a complaint with the relevant regulator.

To make a request, email support@codefalcons.com.

For deletion requests, use the subject:

Privacy Request — Data Deletion

Please identify:

The website, client business or service concerned.
The email address or telephone number associated with the interaction.
The approximate date of the conversation or activity.
The information you want deleted.

Do not include passwords, access tokens or unnecessary sensitive information.

We may request proportionate information to verify your identity. Where a client business controls the records, we may refer the request to that business or assist it in responding.

We handle requests within applicable legal periods. Some information may need to be retained for legal obligations, security or the establishment, exercise or defence of legal claims. We will explain relevant limitations where applicable.

Removing an integration from Meta or closing a chat does not, by itself, constitute a deletion request.

If you are in Mauritius, you may also contact the Mauritius Data Protection Office.

16. Marketing preferences

Where we send marketing communications, you may unsubscribe using the available instructions or contact us at support@codefalcons.com.

Necessary service, security and account communications may continue where appropriate.

Client businesses are responsible for their own marketing activities and messaging permissions.

17. Children

Our business accounts and administrative services are intended for adults and authorized business representatives.

If you believe a child has provided personal information without appropriate authorization, contact us. We will assess the circumstances and take appropriate action.

Client businesses are responsible for any additional obligations arising from services directed to children.

18. External websites and services

Our services may link to websites or services operated by other organizations. Their privacy practices are governed by their own policies.

This policy does not replace a client business’s privacy notice or the policies of Meta, WhatsApp or other external providers.

19. Changes to this policy

We may update this policy when our services, processing practices or legal obligations change.

The revised policy will be published on this page with an updated date. Where required, we will provide additional notice or seek consent.

20. Contact us

For privacy questions, access requests, corrections or deletion requests:

Email: support@codefalcons.com
Website: https://codefalcons.com
Legal entity: Falcons Media & Technologies Ltd
Business address: Henrietta Road Glen Park Vacoas – Mauritius