What you may and may not do with Ihjiz. This policy is part of the Terms of Service and applies to every account, every staff member you invite, and every message sent through the platform.
1.Why this exists
Ihjiz sends messages on your behalf through WhatsApp, Instagram, Messenger, Telegram, SMS and email, and it stores your customers' personal data. Each of those channels has its own rules, and a single abusive account can get a shared sending number or a whole integration blocked for everyone. These rules keep the platform usable for every business on it.
2.Messaging your customers
- Transactional messages — confirmations, reminders, waitlist offers, receipts and follow-ups tied to a real booking or purchase — may be sent to anyone who booked with you or asked to be contacted.
- Marketing messages — campaigns, promotions, win-back offers — require the recipient's prior consent, recorded in the platform, and every one of them must offer a way to stop. Consent given for one business cannot be reused by another.
- You may not upload or message purchased, scraped or rented contact lists.
- You must honour opt-outs promptly. When a customer asks you to stop, turn their marketing preference off; the platform records the request.
- Messages on WhatsApp, Instagram, Messenger and Telegram are also subject to those platforms' business and commerce policies, including WhatsApp's template approval and 24-hour customer-service window. We enforce those rules technically where we can and contractually where we cannot.
- SMS must identify your business and be sent only within the hours the law of the recipient's country allows.
3.Your customers' data
- Collect only what you need for the service you provide, and tell your customers what you collect. Health information, records of minors and biometric data are sensitive everywhere; you are responsible for the lawful basis and any consent your jurisdiction requires.
- Use the platform's consent and policy tools to record what a customer agreed to. Do not fabricate or backdate consent.
- Give staff the least access they need through roles. Do not share logins; every person gets their own account.
- Do not export customer data to sell it, to give it to a third party for their own purposes, or to build lists unrelated to your business.
- Answer your customers' requests to access, correct or delete their data. The platform gives you the tools; the obligation is yours as the controller.
4.Prohibited content and conduct
You may not use Ihjiz to:
- Break the law, or help anyone else break it — including offering services you are not licensed to provide.
- Harass, threaten, defame or discriminate against anyone, or send content that is sexually explicit, hateful or violent.
- Impersonate another person or business, or misrepresent your relationship with anyone.
- Run scams, phishing, fake bookings, fake reviews, or schemes designed to obtain money or data by deception.
- Upload malware, or files you do not have the right to share.
- Post or solicit reviews that are not from genuine customers, or offer incentives for positive reviews without disclosing them.
5.The AI agent
- The agent answers as your business. You are responsible for what it says, for the service and pricing information you give it, and for reviewing its escalations.
- If a customer asks whether they are talking to a person, the agent says it is an automated assistant. Do not configure it to deny that.
- Do not instruct the agent to give medical, legal or financial advice, to diagnose, to pressure customers, or to collect data you are not allowed to collect.
- Do not use the agent to generate marketing messages for recipients who have not consented under section 2.
6.Security and fair use
- Do not probe, scan or test the platform for vulnerabilities without our written agreement, except as described in the disclosure process on our Security page.
- Do not attempt to access another business's data, bypass roles and permissions, or circumvent plan limits, rate limits or message quotas.
- Do not resell, sublicense or white-label access to the platform without an agreement with us.
- API keys and webhook secrets are for your own integrations. Keep them confidential and rotate them if exposed.
- Bulk operations — imports, exports, campaigns — are rate-limited. Do not try to work around those limits with scripts or multiple accounts.
7.Enforcement
Where a breach is minor and fixable, we tell you and give you a chance to put it right. Where a breach puts other businesses, their customers or a channel at risk, we may restrict the affected feature or suspend the account immediately, as set out in section 12 of the Terms. We may also be required to report certain conduct to a messaging platform, a payment provider or the authorities.
8.Reporting abuse
If you received an abusive or unwanted message sent through Ihjiz, or you believe a business is misusing the platform, write to privacy@ihjiz.co with the business name and, if you have it, the message. We will look into it and reply.