Privacy Policy

Last updated: 13 July 2026

This Privacy Policy explains how MGBC - Marketing Generation & Business Cloud ("MGBC", "we", "us") collects, uses, stores and protects personal data when you use our website mgbc.cloud and our AI-powered lead-capture and response services (the "Service"). We operate worldwide, and we apply the principles described here to all users regardless of location.

1. Who we are and our roles

MGBC provides a software platform that captures inbound sales enquiries ("leads") for businesses ("Customers") and sends automated, AI-generated replies via WhatsApp and email.

• For our Customers' account data (signup details, billing, usage), MGBC acts as a data controller.
• For lead data submitted through a Customer's lead-capture link or connected ad campaigns, MGBC acts as a data processor on behalf of that Customer, who is the controller of their leads' data.

If you submitted an enquiry to a business and received a reply powered by MGBC, that business is responsible for your data; we process it under their instructions. You may contact them directly or contact us and we will assist.

2. Data we collect

a) From Customers (businesses using MGBC)

• Business name, contact name, email address, WhatsApp number and password (stored hashed) when you create an account.
• Advertising platform preferences and business description you provide during signup.
• Billing details when you subscribe to a paid plan (processed by our payment provider; we do not store full card numbers).
• Usage data such as login activity, features used, and technical logs (IP address, browser type) for security and service improvement.

b) From Leads (people who contact a business using MGBC)

• Name, email address and/or WhatsApp number, and the content of the enquiry message.
• The source of the enquiry (e.g. which ad, form or link it came from).
• An AI-generated intent score and summary of the enquiry.

c) From website visitors

• Information you submit through our contact form (name, email, WhatsApp number, message).
• Basic technical data needed to serve the website securely.

3. How we use data

• To provide the Service: capture leads, qualify them with AI, generate and deliver replies on WhatsApp or email, and store lead records in the Customer's dashboard.
• To create and manage Customer accounts, process payments and provide support.
• To secure the Service, prevent abuse, spam and fraud.
• To improve the Service, using aggregated and de-identified data only.
• To send Customers service communications (account approval, trial status, billing). Marketing emails are optional and include an unsubscribe link.

We do not sell personal data. We do not use lead message content to train third-party AI models, and we do not permit our AI providers to do so.

4. Legal bases (GDPR and similar laws)

Where laws such as the EU/UK GDPR apply, we rely on: performance of a contract (providing the Service to Customers), legitimate interests (security, service improvement, responding to enquiries), consent (where required, e.g. marketing), and legal obligation (tax and accounting records).

5. AI processing

Lead messages are processed by large-language-model (AI) services to score intent and draft replies. This processing is automated, but it is used only to generate a suggested response and score - it does not produce legal or similarly significant effects on leads. Customers control the reply templates and can edit or disable content sent under their brand.

6. WhatsApp and Meta platforms

Replies sent on WhatsApp use WhatsApp Business services. Data shared over WhatsApp is also subject to WhatsApp's Privacy Policy. Where a Customer connects Meta (Facebook/Instagram) or Google ad accounts, we receive only the lead information those platforms transmit for the Customer's campaigns, and we use it solely to provide the Service.

7. Sharing and processors

We share data only with service providers who help us run the Service - hosting and cloud infrastructure, AI model providers, email delivery, WhatsApp Business solution providers, payment processors and analytics - under contracts that restrict their use of the data. We may disclose data if required by law or to protect the rights, safety and security of MGBC, our Customers or the public.

8. International transfers

We operate globally, and data may be processed in countries other than your own. Where required, we use appropriate safeguards such as the EU Standard Contractual Clauses or equivalent mechanisms to protect transferred data.

9. Retention

• Customer account data: kept while the account is active and for a limited period afterwards for legal and accounting purposes.
• Lead data: kept while the Customer's account is active, or until the Customer deletes it or instructs us to. Customers can request bulk deletion of their lead records.
• Trial accounts that are not approved or activated are deleted after a reasonable period.

10. Security

We use encryption in transit (HTTPS/TLS), hashed passwords, access controls and least-privilege practices. No system is 100% secure, but we work to protect all data we hold and will notify affected parties of any breach as required by law.

11. Your rights

Depending on your location, you may have the right to access, correct, delete, restrict or object to processing of your personal data, receive a portable copy, withdraw consent, and complain to a supervisory authority. To exercise any right, email info@mgbc.cloud. If your data was collected by a business using MGBC, we will forward your request to them and assist in fulfilling it.

12. Children

The Service is intended for businesses and is not directed at children under 16. We do not knowingly collect data from children.

13. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page with a new "Last updated" date, and notify Customers of material changes by email or in the dashboard.

14. Contact

MGBC - Marketing Generation & Business Cloud
Email: info@mgbc.cloud
Website: https://mgbc.cloud