Draft — pending legal review

AI activation acknowledgement for your organization

Text version 5

AI is off by default. It runs for an organization only after its admin reads and acknowledges this text inside the product, and it can be turned off at any time.

AI is off until your organization adds its own key: no AI feature runs in your organization until its admin adds an API key for a provider the organization chooses and acknowledges this text. Without a key, no request is sent to any provider.
Only the provider your organization chooses: your organization has not chosen a provider yet. Requests go directly to it with your organization’s key, under your organization’s own agreement with that provider, and your organization pays it directly — MAHAM Social does not resell AI credit, and never uses its own key or another provider as a fallback: if the key is missing, rejected by the provider, or the provider does not respond, the request stops with a clear message.
Region and retention follow your provider’s terms: MAHAM Social does not pin a processing region — the terms of the provider your organization chose, and its agreement with that provider, govern where data is processed, how long it is retained and whether it is used for training.
What is sent (to your organization’s provider only): customer message text when the agent replies · knowledge sources your organization uploads (to index them, search them and answer from them) · the contact’s name, phone and email as context · and the fields a user can see with their permissions when they ask for a summary or suggestion.
Never sent: 🔴 any field the user cannot see with their permissions — no exception; no acknowledgement changes this.
Attachments: files and documents your organization uploads for extraction are sent only with a separate acknowledgement (off by default). Images and voice messages that customers send in conversations are sent to describe or transcribe them while “Understand media automatically” is on — on by default, and an admin can turn it off on the AI page. All of it goes to your organization’s provider only: a type it cannot read is not sent anywhere else.
Your organization sees its own usage: each request’s provider, model and token count are recorded in your organization’s log, and its admin sees this month’s calls and tokens in Settings → AI — the binding bill is your provider’s.
Acknowledgement is the organization’s decision: only an organization admin may acknowledge it; who acknowledged, when, and on which version of this text are recorded.
Withdrawal is always available: withdrawing the acknowledgement or removing the key stops every request immediately, and is logged like activation.