This document establishes the operational and engineering standards enforced across AutoMashi to guarantee system reliability, prevent API throttling, and maintain 100% compliance with official Meta and Google Cloud partner policies.
Article 1: Meta Graph API & WhatsApp Cloud Compliance
AutoMashi interfaces exclusively with official Meta Graph APIs and WhatsApp Business Cloud API partner endpoints. AutoMashi strictly prohibits browser simulation bots, unauthorized web scraping, or unofficial communication bridges. All API transactions are dispatched over hardened, TLS 1.3 encrypted cloud servers.
Article 2: Fair Use Quotas, Rate-Limiting & Anti-Spam Architecture
To safeguard subscriber accounts from rate throttling or policy restrictions, AutoMashi enforces automated compliance safeguards:
- Dynamic Micro-Delays: Randomized natural latency intervals are injected between comment responses to maintain human-like execution patterns.
- Message Variation Enforcers: Flow builders enforce rotating response pools on public comments to avoid duplicate text flagging by spam filters.
- Meta Throttle Backoff: Automated exponential backoff algorithms pause outbound dispatches when approaching Meta API rate ceilings.
Article 3: Data Vaulting & Retention Lifecycle
AutoMashi implements a least-privilege data lifecycle to minimize merchant risk:
- Zero Credit Card Storage: Payment details are processed entirely by PCI-DSS Level 1 certified gateways; AutoMashi never stores PANs or CVVs.
- Encrypted OAuth Tokens: Scoped Meta access tokens are rotated automatically and sealed inside AES-256 encrypted vaults.
- Ephemeral Log Retention: Transient conversational payloads are automatically pruned after statistical reporting intervals expire.
Article 4: AI Guardrails & Human Handover Protocols
AutoMashi's AI Sales Agents operate under strict constitutional guardrails. The AI cannot negotiate discounts exceeding merchant limits, make unauthorized inventory promises, or disclose private credentials. The system supports seamless human agent handover upon customer complaint detection.
Article 5: Google API Limited Use Policy Adherence
AutoMashi adheres to the Google API Services User Data Policy, including the Limited Use requirements for all Google Sheets integrations. Google Workspace data is processed strictly for spreadsheet lead exports and is never transferred to external advertisers or generalized LLMs.
Article 6: Regulatory Audits & Compliance Office
Our architecture undergoes continuous audit cycles to guarantee compliance with Turkish KVKK (Law No. 6698), GDPR, Saudi PDPL, and Meta Partner Standards. Direct compliance inquiries to: compliance@automashi.com