Privacy Policy
Last updated: 8 July 2026
Sphinx AI Group ("Sphinx AI Group", "we", "us", or "our") operates the website sphinxai.group and provides AI-powered messaging assistants for businesses. This Privacy Policy explains what information we collect when you interact with us — including through our website chat, Facebook Messenger, and WhatsApp — and how we use and protect it.
1. Who we are
Sphinx AI Group is a service operated by Earth BPO (registered to Marwa Mohamed Gamal El-Din Zaki), a business registered in Cairo, Egypt, providing AI customer-service and automation services. You can contact us at any time at hello@sphinxai.group.
2. Information we collect
When you message us or use our services, we may collect:
- Messages and enquiries — the content of the messages you send us through our website chat, Facebook Messenger, or WhatsApp.
- Contact details you provide — such as your name, phone number, email address, or business name, when you choose to share them.
- Platform identifiers — a messaging ID supplied by the platform you contact us on (for example, a Facebook/Messenger page-scoped ID, or your WhatsApp number), so we can reply within the same conversation.
- Basic technical information — standard details the messaging platform or your browser provides, such as the language of your message.
We only collect information you choose to give us by contacting us. We do not buy personal data, and we do not gather it from other sources.
3. How we use your information
- To respond to your messages and answer your questions through our AI assistant, "Cleo".
- To provide information, recommendations, and quotes about our services.
- To follow up with you about an enquiry you have started.
- To operate, maintain, and improve our services.
Your messages are processed by an AI language model to generate a helpful reply (see "How we share information" below). We do not use your information for advertising, and we do not sell it.
4. Messaging channels
We offer assistance across several channels, and the same principles apply to each:
- Website chat — messages you send in the chat on sphinxai.group.
- Facebook Messenger — when you message our Facebook Page, we receive your message and a Messenger ID so we can reply. Your use of Messenger is also governed by Meta's Privacy Policy.
- WhatsApp — when you message our WhatsApp business number, we receive your message and phone number so we can reply. Your use of WhatsApp is also governed by WhatsApp's Privacy Policy.
5. How we share information
We do not sell your personal information. We share it only with trusted service providers who help us operate, and only as needed to reply to you:
- Meta Platforms, Inc. — provides Facebook Messenger and WhatsApp, through which messages are delivered.
- Anthropic — provides the AI model that generates our assistant's replies; the content of your message is processed to produce a response.
- Netlify — hosts our website and the software that powers our assistant.
- Upstash — provides the secure database in which we store your conversation history, so the assistant remembers what you have already told it and you do not have to repeat yourself. It also holds any booking or enquiry details you give us.
- Email delivery / forwarding providers (e.g. Resend, ImprovMX) — used to send our team an internal notification when you leave your contact details, so a team member can follow up.
These providers process information on our behalf and are not permitted to use it for their own purposes. We may also disclose information where required by law.
6. Data retention
We keep your information only for as long as we need it, and it then deletes itself automatically. In practice:
- Conversation history — 60 days, so the assistant can pick up where you left off.
- Enquiry and contact details — 30 days, so a member of our team can follow up.
- Appointment details — 14 days after the appointment date.
- Records of a completed sale — kept longer, because we are required to retain business and accounting records.
You can ask us to delete your information at any time and before these periods expire (see "Your rights").
7. Your rights
You may ask us to:
- Access the personal information we hold about you;
- Correct information that is inaccurate;
- Delete your information; or
- Stop contacting you.
To make any of these requests, email us at hello@sphinxai.group and we will respond promptly.
8. Data security
We take reasonable technical and organisational measures to protect your information. Access credentials are stored securely and access is limited to those who need it. No method of transmission over the internet is completely secure, but we work to keep your information safe.
9. Children's privacy
Our services are intended for businesses and adults. We do not knowingly collect information from children under 18. If you believe a child has provided us with information, please contact us and we will delete it.
10. Changes to this policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top shows when it was last revised, and any significant changes will be reflected on this page.
11. Contact us
If you have any questions about this Privacy Policy or how we handle your information, please contact us: