Privacy Policy

Last updated: 29 July 2026. Written under art. 13 and 14 of Regulation (EU) 2016/679 (GDPR).

1. Who is responsible

Data controller: HUSSAIN MUHAMMAD MAJID, VAT IT14191810960, Via Abate Pelizzoni 5, 20033 Solaro (MI), Italy. Email: info@awmza.it. We have not appointed a Data Protection Officer, as we are not required to.

2. Two different situations

3. What we collect and why

DataWhyLegal basisKept for
Name, email, phone or WhatsApp number, business name, VAT number, addressOpening the account, activating agents, invoicing, supportPerformance of the contract, art. 6.1.bDuration of the relationship, then 10 years for accounting records
Payment data (last four digits, transaction identifiers). Full card numbers are never held by usTaking payment, refunds, fraud preventionContract, art. 6.1.b, and legal obligation, art. 6.1.c10 years, tax law
Messages you exchange with our website assistant or with supportAnswering you and improving the serviceContract and legitimate interest, art. 6.1.b and 6.1.f24 months
Account and login records for builder.awmza.com, including IP address and time of accessSecurity, two step verification, detecting unauthorised accessLegitimate interest in a secure service, art. 6.1.f12 months
Server and application logsKeeping the service running and diagnosing faultsLegitimate interest, art. 6.1.f90 days
Configuration and content you put into an agentMaking the agent work as you set it upContract, art. 6.1.bDuration of the subscription, plus 30 days for export
Marketing emails, only if you asked for themNews about the service and offersConsent, art. 6.1.a, or soft opt in for existing customersUntil you unsubscribe

We do not knowingly collect special category data and you should not put health, political, religious or biometric data into an agent unless you have your own legal basis and have told us in writing.

4. Artificial intelligence

Some of the content you send is processed by language models to produce a reply or a document. Details of which models, where they run and what happens to the content are set out in our AI Transparency Notice. In short: part of the processing happens on our own server in Germany, part with providers in the United States under standard contractual clauses, and none of your content is used to train foundation models.

5. Who else sees the data

We use a small number of suppliers, each bound by a data processing agreement:

SupplierPurposeLocation
Hetzner OnlineServers and hostingGermany, EU
StripeCard payments and subscriptionsIreland and United States
PayPalAlternative paymentsLuxembourg
BrevoTransactional and marketing emailFrance, EU
Meta PlatformsWhatsApp Business messaging, advertising where you use itIreland and United States
GoogleMailbox integration, analytics, advertising where you use itIreland and United States
Anthropic, Groq, OpenAILanguage model processingUnited States
Shopify, WooCommerce, eBay, Etsy, VintedOnly if you connect your own store or marketplace accountVaries by provider
TelegramInternal operational alertsOutside the EU

Beyond these, data may be disclosed to our accountant, to our bank, and to public authorities where the law requires it. We never sell your data and we do not share it for other companies' advertising.

6. Transfers outside the EEA

Where a supplier processes data in the United States or elsewhere outside the European Economic Area, the transfer is covered by the European Commission's standard contractual clauses and, where applicable, by the EU-US Data Privacy Framework. You can ask us for a copy of the safeguards in place.

7. Cookies

The site uses technical cookies needed to make it work. Marketing cookies, such as the Meta Pixel, are set only after you accept them in the banner, and you can change your mind at any time. Full detail in the Cookie Policy.

8. Security

Data is held on servers in Germany. Traffic is encrypted with TLS, the administration panel is behind two step verification, access is limited to the owner, and backups are taken regularly. More detail in our Security and GDPR page - Data Processing Agreement - Sub-processors. If a breach occurs that is likely to put your rights at risk, we notify the Garante within 72 hours and inform you where the law requires it.

9. Your rights

You can ask us at any time for access to your data, correction, deletion, restriction, portability, and you can object to processing based on legitimate interest. Where processing is based on consent, you can withdraw it at any time without affecting what was done before. Write to info@awmza.it and we reply within 30 days.

You can also complain to the Italian supervisory authority, Garante per la Protezione dei Dati Personali, www.garanteprivacy.it, or to the authority of your own country of residence.

10. Automated decisions

We do not take decisions about you by automated means alone that produce legal effects or similarly significant effects, within the meaning of art. 22 GDPR.

11. Children

The service is aimed at businesses and is not intended for anyone under 16. We do not knowingly collect data about children. If you believe we hold such data, write to us and we will delete it.

12. Changes

If we change this policy in a way that matters, we update the date at the top and, for material changes, tell customers by email.

13. Contact

HUSSAIN MUHAMMAD MAJID — Via Abate Pelizzoni 5, 20033 Solaro (MI), Italy — VAT IT14191810960 — info@awmza.it