Last updated: 21 October 2026

This policy explains how Mavrise collects and uses personal information. Mavrise is a brand of Affpilot Limited, a company registered in England and Wales (company no. 14771593), registered office 71-75 Shelton Street, London, WC2H 9JQ, United Kingdom (“we”, “us”). We are the data controller for the information described here.

Questions or requests: contact@mavrise.com.

1. What we collect

• Information you give us: your name, phone or WhatsApp number, email address, company name, and anything you write to us through our website forms, “Book a free call”, email, WhatsApp, Facebook Messenger or Instagram.
• Messages: when you message us on WhatsApp, Messenger or Instagram, we receive your message, your profile name and number or account ID from Meta Platforms, and, if you came from one of our ads, which ad you clicked.
• Website usage: pages visited, device and browser type, and approximate location, through cookies and similar tools (see section 7).
• Client project information: if you hire us, the details needed to deliver the work and to invoice you.

2. How we use it

• To reply to you, give you quotes, book calls and office visits, and send the reminders you asked for.
• To deliver our services (websites, marketing, software) and to manage invoices and payments.
• To keep a record of our conversations in our customer system, so anyone on our team can help you.
• To send you news or offers, only where you have agreed or where the law allows. You can opt out at any time.
• To measure and improve our website and ads, and to keep our services secure.

Our legal bases under UK GDPR are: taking steps at your request before a contract and performing it; our legitimate interest in answering enquiries and running our business; your consent (for marketing and non-essential cookies); and legal obligations (for example, accounting records).

3. WhatsApp, Messenger and Instagram

We use Meta’s official WhatsApp Business Platform and Messenger Platform. Messages you send us there are processed by Meta under WhatsApp’s and Meta’s privacy policies, and by us as described here. We only message you on WhatsApp after you have contacted us or agreed to hear from us. Reply STOP at any time and we will not message you there again, except to confirm your request.

4. Who we share it with

We do not sell your personal information. We share it only with:

• Service providers that work for us: Meta (WhatsApp, Messenger, Instagram, Facebook ads), our web and email hosting, our cloud server provider (Alibaba Cloud, Singapore), and email delivery and analytics tools; AI providers (Google, Anthropic) when a Buy or Block customer turns on AI features; SMS gateways and email delivery providers chosen by Buy or Block customers; and payment processors (Paddle, Stripe, SSLCommerz, bKash) for subscriptions.
• Our own software, Buy or Block, where we keep customer conversations, follow-ups and notes.
• Authorities, when the law requires it.

5. International transfers

Our team works from Bangladesh and our servers are in Singapore and the United States, so your information may be processed outside the UK. When it is, we use safeguards required by UK law, such as the UK International Data Transfer Agreement or equivalent contract terms with our providers.

6. How long we keep it

• Enquiries and conversations that do not become a project: up to 24 months after our last contact.
• Client and invoice records: 6 years after the work ends, as UK accounting law requires.
• Marketing preferences: until you opt out (we keep a note that you opted out, so we don’t contact you again).

7. Cookies

We use essential cookies to run the website, and, with your consent, analytics and advertising cookies (such as the Meta Pixel and Google Analytics) to understand visits and measure our ads. You can change your choice at any time in your browser settings.

8. Your rights

You can ask us to access, correct, delete or export your information, to restrict or object to how we use it, and to withdraw consent. Email contact@mavrise.com; we answer within one month. If you are unhappy, you can complain to the UK Information Commissioner’s Office at ico.org.uk.

9. How to delete your data

To delete the information we hold about you, including anything received through WhatsApp, Messenger, Instagram or a Facebook login:

1. Email contact@mavrise.com with the subject “Delete my data”, or send “Delete my data” to us on WhatsApp or Messenger.
2. Tell us the phone number, email or account name you used with us.
3. We confirm and delete your data within 30 days, except records we must keep by law (such as invoices).

• If you connected a Facebook Page, Instagram or WhatsApp account to Buy or Block: you can also remove “Buy or Block” in Facebook → Settings → Business integrations (or Apps and websites). We then stop receiving data, and you can ask us to delete what we hold, as above.
• If you are a customer of a business that uses Buy or Block: contact that business or email us; the business can erase your contact and all messages from its account.

10. Buy or Block (our CRM software) and data from Meta platforms

Buy or Block is a CRM that businesses use to manage conversations with their own customers. When a business connects its WhatsApp Business account, Facebook Page or Instagram professional account to Buy or Block through Meta’s official tools (Facebook Login for Business / WhatsApp Embedded Signup), we receive and store, for that business only:

• the business’s account details from Meta: WhatsApp Business Account ID, phone number ID and display name, Page or Instagram account ID and name, and an access token (stored encrypted);
• messages that people send to that business, with the sender’s name, phone number or Page/Instagram-scoped ID, the time, and delivery and read status; and, where Meta allows, the sender’s profile name and picture;
• the replies and message templates the business writes, and the template approval status from Meta;
• if the business chooses to connect a number it already uses in the WhatsApp Business app, the contacts and recent chat history it chooses to share.

How we use it: only to show the conversations in that business’s inbox, create or update the matching contact and follow-ups in its CRM, send the replies the business writes or the automatic replies it sets up, and keep the service secure. We do not sell this data, use it for advertising or profiling, share it with other businesses, or use it to train AI models.

Optional AI features: AI replies and summaries are off until a business turns them on. When they are on, the relevant conversation text and the business’s own knowledge base are sent to our AI providers (Google Gemini or Anthropic Claude) only to produce that reply or summary.

Roles: the business is the controller of its customers’ data; Mavrise (Affpilot Limited) processes it on the business’s instructions as its service provider. If you are a customer of one of those businesses, you can contact the business or us.

Keeping and deleting: data is kept while the business’s account is active. A business can delete a contact and all its messages, and disconnect a channel at any time (we then stop receiving its messages). When a business closes its account and asks us, we delete its data, except records the law requires us to keep. Anyone can also ask us directly, see section 9.

11. Children

Our services are for businesses and adults. We do not knowingly collect information from children under 16.

12. Security

We use encrypted connections (HTTPS), access controls, encrypted storage for passwords and keys, and regular backups. No system is perfectly secure, so please don’t send us passwords or payment card numbers by chat.

13. Changes

We may update this policy. The date at the top shows the latest version; important changes will be announced on this page.