Privacy Policy

Last updated: 10 October 2026

Bayya3 is a service that answers customer messages on behalf of online stores: on the store's page on our site, and on Facebook Messenger and Instagram. It is operated by Bayya3, based in Palestine. This page explains what data we use, why, who it is shared with, and how you can control it.

Data we collect

• When you message a store that uses Bayya3: the text of your messages, any photos you send, and the ID Meta gives your account for that Page on Messenger or Instagram. We never receive your password, or your conversations with anyone other than that store.
• If you place an order: the name, phone number, city and address you type in the chat.
• For store owners: name, email, phone number and product information. Facebook Page access tokens are stored encrypted.

How we use it

• To answer your questions about the store's products, prices and delivery.
• To record your order and pass it to the store owner.
• So the store owner can review the conversation and reply to you personally.

We do not sell your data, we do not use it for advertising, and we use data received from Meta only to answer your messages on behalf of the store you contacted.

Who it is shared with

• The store you messaged: the owner sees the conversation and the order.
• Our AI provider (Google Gemini): receives the message text and photos to write the reply.
• Our hosting provider (Railway): servers and database.
• Meta: replies are delivered through Meta when you message the store on Messenger or Instagram.
• Authorities: only where the law requires it.

Cookies and browser storage

We use no tracking or advertising cookies. Store owners get a strictly necessary sign-in cookie. The store chat keeps the conversation in your browser until you close the tab (sessionStorage), so a page refresh doesn't lose it.

Retention

Conversations and orders are kept while the store uses Bayya3, so the owner can follow up on orders. When a store leaves Bayya3, its data and its customers' data are deleted within 90 days.

Security

All connections are encrypted (HTTPS), Facebook Page tokens are stored encrypted, and a store's conversations are visible only to its owner and to Bayya3 administrators when needed to resolve an issue.

Your rights

You can ask for a copy of your data, a correction, or its deletion at any time. See Data deletion for how to request deletion.

Children

The service is not directed at children under 13, and we do not knowingly collect their data.

Changes

If we change this policy, we update the "Last updated" date above.

Contact

Email: admin@bayya3.org
WhatsApp: wa.me/972594256046