Privacy Policy

1. Who we are

ADVCY Ltd (“ADVCY”, “we”, “us”, “our”) is a company registered in England and Wales (company number 16926771), with its registered office at 40 Queens Road, Teddington, England, TW11 0LR.

We provide channel-native conversational experiences (“concierge” services) that help events, brands and communities engage their audiences on messaging channels such as WhatsApp, alongside our website at advcy.ai.

For the purposes of UK data protection law, ADVCY Ltd is the “controller” of the personal data described in this policy. Where we operate a concierge on behalf of an event organiser or community, we remain the controller of your conversation data; the organiser receives only aggregated, anonymised insights (see Section 6).

We are registered with the UK Information Commissioner’s Office (registration number C1934810). You can contact us about privacy at community@advcy.ai.

2. What this policy covers

This policy explains how we handle personal data when you:

• visit or interact with our website (advcy.ai);
• message, or are messaged by, an ADVCY concierge on WhatsApp or another messaging channel; or
• otherwise contact us (for example, booking a call, joining a beta, subscribing, or emailing us).

3. The information we collect

3.1 When you use the WhatsApp concierge

When you message an ADVCY concierge (on WhatsApp or another messaging channel), we may process:

• Your messaging identifiers — your phone number, WhatsApp profile name, and the WhatsApp/account identifiers that Meta provides to us when you message us or opt in to receive messages.
• Message content — the messages, questions, replies, and any images, files, voice notes or other content you send to the concierge, and the messages we send back to you.
• Message metadata — technical information about messages, such as timestamps, delivery and read status, message IDs, and the channel used.
• Event, community and preference information — details you share in conversation, such as which event or community you’re engaging with, your interests and preferences, RSVP or attendance information, questions about logistics, and anything else you choose to tell us.
• Consent and opt-out records — a record of when and how you opted in to receive messages, and any opt-out.

We only receive the messages you send to the ADVCY concierge. We do not have access to your wider WhatsApp account or to your messages with anyone else.

3.2 When you use our website

• Information you provide — such as your name and email address when you book a call, join our beta, subscribe, or contact us.
• Analytics and technical data — standard analytics such as pages viewed, referral source, approximate location (derived from IP address), and device/browser type. See Section 9.

3.3 Sensitive information

We don’t ask for special category data (such as health, religion or political views). Please don’t send sensitive information through the concierge. If you choose to, you consent to us processing it in order to respond to you.

4. Why we use your information, and our legal bases

Where we rely on legitimate interests, we’ve weighed those interests against your rights and freedoms. You can object at any time (Section 8).

5. Automated processing and AI

The concierge uses artificial intelligence, provided by a trusted third-party technology provider, to understand your messages and generate helpful responses. This processing is automated, but the concierge does not make decisions based solely on automated processing that produce legal effects about you or similarly significantly affect you. Under UK GDPR you have the right not to be subject to such solely-automated decisions. If you’d prefer to deal with a person at any point, ask the concierge or email community@advcy.ai and a member of our team can step in.

6. Who we share your information with

We do not sell your personal data, and we don’t use your concierge data for unrelated marketing unless you’ve explicitly opted in. We share it only as set out here:

• Meta / WhatsApp. Messaging is delivered through the WhatsApp Business Platform provided by Meta. Your messages and identifiers are processed by Meta to deliver the service, subject to Meta’s and WhatsApp’s own terms and privacy policies.
• Our service providers. We use a small number of trusted third-party providers that process data on our instructions to run the service — including cloud hosting and database providers, an AI provider that helps generate concierge responses, and business tools such as email. Some are based in, or process data in, the EU/EEA and the United States, under the safeguards in Section 7. See Section 15 for the categories of providers we use.
• Event organisers and community owners. Where we run a concierge for an event or community, we share only aggregated, anonymised insights (for example, the most common questions, or attendance numbers). We do not give organisers your phone number, your message content, or other information that identifies you — unless you specifically ask us to, or the law requires it.
• Professional advisers, authorities and successors. We may disclose data where required by law, to protect our legal rights, or in connection with a merger, acquisition or business reorganisation.

7. International data transfers

Some of our providers are based in, or process data in, countries outside the UK, such as the United States, while others (including our hosting and database) can be located in the EU/EEA. When we transfer personal data outside the UK, we rely on appropriate safeguards — such as UK ‘adequacy’ regulations, the UK Extension to the EU–US Data Privacy Framework (where the provider is certified), the UK International Data Transfer Agreement (IDTA), or the EU Standard Contractual Clauses together with the UK Addendum — so your data receives an equivalent level of protection. Contact us for details.

8. How long we keep your information

We keep your concierge conversation data and identifiers for as long as you remain opted in to, or an active subscriber of, the relevant concierge or community. If you opt out (for example by replying STOP) or ask us to delete your data, we delete or irreversibly anonymise it — see Section 11.

We may keep limited information for longer where we need to:

• keep proof of your consent and any opt-out (typically for up to 24 months after it ends);
• comply with legal, accounting or regulatory obligations; or
• establish, exercise or defend legal claims.

Website enquiry data (such as name and email) is kept for as long as we need it to deal with your enquiry and our relationship with you, and then deleted.

9. Cookies and analytics

Our website uses Google Analytics (and Google Ads conversion tracking) to understand how the site is used and to improve it. These load only with your consent: we operate Google Consent Mode with analytics and advertising storage denied by default until you accept through our cookie banner. You can control cookies at any time through your browser settings and through the cookie banner shown on the site.

10. Your rights

Under UK GDPR you have the right to: access your data; have inaccurate data corrected; have your data erased; restrict or object to processing; data portability; and to withdraw consent at any time. Withdrawing consent doesn’t affect processing we already carried out lawfully before you withdrew it.

To exercise any right, email community@advcy.ai or reply to the concierge. To protect your data, we may first ask you to confirm your identity — for example, by contacting us from the phone number you used with the concierge. We’ll respond within one month. On WhatsApp you can reply STOP at any time to opt out, or HELP for information on how to reach us.

You also have the right to complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk — though we’d appreciate the chance to put things right first.

10a. US privacy rights

If you are a US resident: we do not sell or “share” your personal data (as those terms are defined under California law), and we don’t use your concierge data for cross-context behavioural advertising. Depending on your state, you may have the right to know what personal data we hold about you, to request that we delete or correct it, and not to be treated differently for exercising these rights. To make a request, email community@advcy.ai. You may use an authorised agent, and we may verify your identity before we respond.

11. How to delete your data

You can ask us to delete your data at any time:

• reply STOP to opt out, or DELETE to request deletion, to the concierge on WhatsApp; or
• email community@advcy.ai with the phone number or details you used.

We may ask you to confirm your identity (for example, that you control the phone number used) before we act. We’ll delete or irreversibly anonymise your conversation data and identifiers within 30 days, except for the limited information we’re required to keep (see Section 8). Full details are on our Data Deletion page.

12. How we protect your information

We use appropriate technical and organisational measures to protect your data, including encryption in transit, access controls, reputable infrastructure providers, and limiting access to those who need it. No system is completely secure, but we work to protect your information. If a breach occurs that is likely to result in a risk to your rights and freedoms, we will notify you and the ICO without undue delay, as the law requires.

13. Children

Our services are not directed at children and are intended for users aged 18 and over. We don’t knowingly collect data from children. If you believe a child has provided us with data, contact us and we’ll delete it.

14. Changes to this policy

We may update this policy from time to time. We’ll update the “last updated” date above and, where changes are significant, take reasonable steps to let you know.

15. Third-party providers

To run the service we rely on a small number of trusted third-party providers that process personal data on our behalf under written data-protection terms. These fall into the following categories: the messaging platform that delivers WhatsApp messages (Meta/WhatsApp); cloud hosting and database providers; an AI provider that helps generate concierge responses; and business tools such as email. Some of these providers are based in, or process data in, the EU/EEA and the United States; where personal data is processed outside the UK we use the safeguards described in Section 7. If you’d like more detail about the specific providers we use, email community@advcy.ai and we’ll be happy to share it.

16. Contact us

ADVCY Ltd
40 Queens Road, Teddington, England, TW11 0LR
Company number 16926771
Email: community@advcy.ai