MUST Academy

Privacy Policy – Inawax

Last updated: October 9, 2026

This Privacy Policy explains how Inawax (“we”, “us”, “our”), operated by Inawax – TahaWorld, collects, uses, shares and protects information when a business uses Inawax to manage and reply to customer messages and comments on Facebook, Instagram, WhatsApp and the business’s website chat.

1. Who we are

Inawax is a customer-messaging tool installed on the business’s own website (https://must.academy). It lets the business connect its own Facebook Page and Instagram professional account, receive customer messages and comments in one inbox, and reply to them, with help from AI.

Contact: info@tahaworld.com · WhatsApp: +20 109 901 7599 · 15B El-Khalifa El-Maamoun Street, Heliopolis (Masr El-Gedida), Cairo, Egypt · Website: https://must.academy

2. Who this policy applies to

  • Business users – the business’s staff who sign in to Inawax and connect a Page or Instagram account they manage using Facebook Login.
  • Customers – people who send a message or leave a comment on a connected Facebook Page or Instagram account, our WhatsApp number or website chat.

3. Information we collect

From business users (via Facebook Login, with your permission)

  • The Facebook Pages you manage and the Instagram professional account linked to the Page you connect (ID, name/username, profile picture).
  • Access tokens needed to operate the service on your behalf.
  • Staff account details (name, email) and activity logs inside Inawax (for example, which staff member sent or approved a reply).

From customers who contact a connected account

  • The content of messages and comments sent to the connected account, including text and attachments (images, video, audio, files).
  • The sender’s platform-scoped ID, name/username and profile picture, as provided by Meta.
  • The post or media a comment was left on, and timestamps.
  • Contact details the customer writes in a message (for example a phone number or email), which are saved to the customer’s record so staff can follow up.
  • Information needed to handle an enrollment, such as the course of interest, booking status and payment status. Payment receipts sent by the customer are stored for verification by staff. We do not collect card numbers.
  • Short notes about the customer’s stated needs (for example their profession or goal), used to keep replies relevant.

We only receive data from accounts that a business user has explicitly connected. We do not access personal accounts or any data beyond what is listed above.

4. How we use information

  • To follow up with customers about their enquiry. Promotional follow-up messages are sent only to customers who agreed to receive them, and within the messaging rules of each platform.
  • To show incoming messages and comments in the business’s inbox and to send replies.
  • To generate replies with AI (see section 5). Depending on the business’s settings, AI replies to routine questions (such as course details, schedules or published prices) may be sent automatically, or kept as drafts for staff approval. Sensitive matters — payments, refunds, complaints, discounts and bookings — are always handed to a staff member.
  • Public replies to comments are not posted automatically; they are reviewed by staff.
  • To analyze conversations so the business can improve its answers and knowledge base. Suggested improvements are applied only after staff approval.
  • To keep the service secure, prevent abuse, and fix errors.
  • To comply with legal obligations.

We do not sell personal data, use it for advertising, or share it with data brokers. We use data received from Meta only in accordance with the Meta Platform Terms and Developer Policies.

5. Use of AI services

To generate replies and analyze conversations, the relevant message text and recent conversation context are sent to the AI provider(s) the business has enabled, acting as our service providers:

  • Google – Gemini API
  • Anthropic – Claude API
  • OpenAI – OpenAI API

We use these providers’ paid API services, under terms by which the content we send is not used to train their models. We do not send access tokens or account credentials to AI providers.

6. How we share information

  • Meta Platforms – to receive and send messages and comments through the Messenger, Instagram and WhatsApp APIs.
  • AI providers listed in section 5.
  • Hosting provider – Hostinger – which hosts the website and its database.
  • Authorities – when required by law.

Customer data is visible only to the business’s authorized staff inside Inawax.

7. Data retention

  • Customer conversations are kept so the business can follow up with customers about its courses. Conversations with no activity for 730 days (2 years) are deleted automatically, together with their messages and attachments. Any new message from the customer restarts this period.
  • Records of customers who enrolled or made a payment are kept only for as long as required by applicable accounting and tax law, then deleted.
  • Access tokens are deleted from Inawax when the business disconnects the account inside Inawax. If the app is removed from Facebook, the tokens stop working immediately.
  • Data is also deleted on request (see section 10).

8. Security

We use encrypted connections (HTTPS), restrict access to authorized staff, store access tokens and API keys encrypted, and keep attachments in private storage that is served only to signed-in staff. No method of transmission or storage is 100% secure, but we take reasonable measures to protect your data.

9. Your rights

You may request access to, correction of, or deletion of your personal data, or object to its processing, in line with applicable law, including Egypt’s Personal Data Protection Law (Law No. 151 of 2020). Contact us at info@tahaworld.com. We respond within 30 days.

10. Deleting your data

See our Data Deletion Instructions.

11. Children

Inawax is a business tool and is not directed to children. If a parent or guardian believes a child has sent us personal data, they can contact us to have it deleted.

12. Changes to this policy

We may update this policy. The “Last updated” date shows the latest version.

13. Contact

Inawax – TahaWorld · 15B El-Khalifa El-Maamoun Street, Heliopolis (Masr El-Gedida), Cairo, Egypt · info@tahaworld.com · WhatsApp: +20 109 901 7599