Legal

Privacy Policy

Last updated 4 October 2026

This policy explains what personal data 99ai (“we”, “us”) collects through 99ai.io and our services, why we use it, who we share it with, and the choices you have. We have tried to write it in plain language.

1. What we collect

When you contact us through the enquiry form, the newsletter sign-up, email, phone, WhatsApp or Instagram, we collect what you give us. Usually that is your name, email address, phone number, company, industry and your message.

When you visit the website, our servers record technical details such as your IP address, browser type, the page you came from and the time of your visit. The enquiry form also records the page you were on, your IP address and your browser type, which helps us stop spam.

Your approximate country. To show prices in your currency, we look up the country linked to your IP address using a third-party service (country.is). We keep only the two-letter country code, briefly, in our server cache.

When you use our services as a client, we process the data needed to run them for you, explained in section 6.

2. How we use it

  • to reply to your enquiry, including by email, phone or WhatsApp, as you agreed when you sent the form;
  • to send you a confirmation that we received your enquiry;
  • to keep a record of our conversations with you in our customer relationship management (CRM) system;
  • to send occasional product notes if you signed up for them (you can unsubscribe at any time);
  • to provide, maintain and improve our services and website, and to keep them secure and free of abuse;
  • to meet our legal, tax and accounting obligations.

We do not sell your personal data, and we do not use it for advertising profiles.

3. Who we share it with

We use a small number of service providers who process data on our behalf, under their own security commitments:

  • Amazon Web Services: hosting for our website and CRM, and Amazon SES for sending emails (servers in Australia);
  • Zoho Mail: our company mailboxes (servers in India);
  • Meta (WhatsApp and Instagram): when you message us on those platforms, Meta’s own privacy policy also applies;
  • country.is: the IP-to-country lookup described above.

We may also share data if the law requires it, to protect our rights or the safety of others, or as part of a business transfer such as a merger, in which case this policy continues to apply.

4. Where your data is stored

Our website and CRM run on servers in Australia, and our mailboxes are in India. When data is transferred outside India, we do so in line with applicable law and use providers with appropriate security safeguards.

5. How long we keep it

  • Enquiries and related conversations: up to 24 months after our last contact, unless you become a client.
  • Client records: for the length of our contract and as long as needed afterwards for legal, tax and accounting reasons.
  • Server logs: for a limited period, for security and troubleshooting.
  • Backups: our CRM backups roll over and are kept for 7 days.

You can ask us to delete your data sooner, as described in section 8.

6. Data we process for our clients

When a business uses 99ai to answer its own customers, for example on WhatsApp, we process those customers’ messages and details only on that business’s instructions and under our agreement with them. In that case the business decides how the data is used, and its own privacy policy applies. If you are a customer of one of our clients, please contact that business first; we will help them respond to your request.

7. Cookies and similar technologies

We only use what the website needs to work: a session cookie and a security cookie that protects our forms from forgery. Our blog remembers in your browser whether you turned the reading highlighter on or off. We do not currently use analytics or advertising cookies. If that changes, we will update this policy first.

8. Your rights

Under India’s Digital Personal Data Protection Act, 2023, and other laws that may apply to you, you can ask us to:

  • tell you what personal data we hold about you and how we use it;
  • correct, complete or update your data;
  • delete your data, unless we must keep it by law;
  • withdraw your consent, for example to being contacted (this does not affect what we did before);
  • nominate someone to exercise your rights if you are unable to.

To make a request or a complaint, email hello@99ai.io. We will reply as soon as we can and within 30 days. If you are not satisfied with our answer, you can complain to the Data Protection Board of India or to your local data protection authority.

9. How we protect it

We use encrypted connections (HTTPS) across our website and CRM, restrict access to the people and systems that need it, and keep regular backups. No system is perfectly secure, so we also monitor for problems and will tell you and the authorities about a breach where the law requires it.

10. Children

Our website and services are meant for businesses and are not directed at anyone under 18. We do not knowingly collect their data.

11. Changes to this policy

We may update this policy as our services change. We will change the date at the top, and for important changes we will let clients know directly.

12. Contact us

Questions about this policy or your data: hello@99ai.io. You can also read our Terms of Service.