Privacy Policy

Google Sign-In (Authentication)

We use Google OAuth for user authentication. We access your basic profile information (name and email address) solely to create and authenticate your account. No additional Google data is accessed through sign-in.

Gmail Sending (gmail.send, gmail.labels)

When a business connects their Gmail account for sending, their AI agents can send emails on behalf of the business. This includes sending appointment confirmations, customer follow-ups, and internal staff notifications about customer interactions. Thegmail.send scope is used exclusively for sending emails that are explicitly initiated by the user or by automated workflows configured by the user within the platform. Thegmail.labels scope is used only to apply or manage labels for messages generated and sent by the platform.

Gmail Inbox (gmail.readonly)

When a business optionally connects their Gmail inbox, the platform reads incoming emails so that its own AI agents can classify, summarize, and draft or send responses to that business's customers. The gmail.readonly scope provides read-only access — the platform cannot modify or delete messages in the connected mailbox. This integration is separate from the Gmail sending integration and must be explicitly enabled by the account administrator.

To power the inbox and automated replies, incoming email content (including message bodies and attachments) is stored in that business's own isolated records within our infrastructure, encrypted at rest and access-controlled so that one business can never see another's data. This content is used solely to provide the inbox and AI-response features to that same business, is never used to train, fine-tune, or improve any AI/ML model, is never sold or used for advertising, and is retained only for as long as the business's plan retention window requires. It is permanently deleted when the business deletes its account, disconnects the integration, or requests deletion (see the Data Retention and Your Rights sections).

Google Calendar Integration (calendar.events)

When a business connects their Google Calendar, their AI agents can check availability and create, update, or cancel calendar events on behalf of the business. This enables automated appointment scheduling when customers interact through WhatsApp, Instagram, Messenger, web chat, email, or voice channels.

AI Processing of Google Data

When you connect Gmail or Google Calendar, your AI agents process the minimum data needed to execute user-initiated actions (e.g., composing an email or scheduling an event). This processing is transient and inference-only: data is sent to the AI provider in real time to fulfill the request, and is not stored, cached, or retained by the AI provider after the response is generated.

We use the following AI services as data sub-processors, strictly under our instructions:

• OpenAI API — powers conversational AI agents that execute actions such as sending emails or managing calendar events. OpenAI's API data usage policy states that data submitted via the API is not used to train or improve their models.
• Google Gemini API — powers our knowledge retrieval (RAG) functionality for document-based queries.

No Google user data is used to train, fine-tune, or improve any AI or machine learning model — whether our own, OpenAI's, Google's, or any third party's. Google Workspace data is not used to develop, improve, or train generalized artificial intelligence or machine learning models.

Bring Your Own Key (BYOK) Architecture

Our platform operates on a BYOK model: each business provides and manages their own AI provider API keys. These keys are encrypted at rest and are never shared across tenants. This architecture ensures that each business maintains direct control over their AI provider relationship and data processing.

Instagram Messaging (instagram_basic, instagram_manage_messages)

When a business connects its Instagram professional account, the platform receives the direct messages (DMs) that the business's customers send to that account and sends replies on the business's behalf — drafted by the AI assistant the business configured, or written by a human team member. We useinstagram_basic only to identify the connected account (id and username) during the one-time connection, andinstagram_manage_messages only to receive and send those conversation messages. We reply only to customers who messaged the business first, within Instagram's messaging policies and time windows.

Messenger (pages_messaging, pages_manage_metadata, pages_show_list, business_management)

The Instagram professional account is linked to a Facebook Page, and Messenger conversations are handled through that Page. We use these permissions to list the business's Pages during connection, subscribe the Page to messaging webhooks, and send/receive messages on the connected account's behalf.business_management is requested only as a required dependency of the messaging permissions, to operate on the assets the business connects. We never message users who did not contact the business first.

WhatsApp Business

When a business connects its WhatsApp Business number, the platform receives the messages its customers send and sends replies on its behalf, the same way as above.

Data We Store and How It Is Used

For each connected business, isolated by row-level security so no business can access another's data, we store: the connected account identifiers and an encrypted access token (encrypted at rest, never stored or logged in plaintext, decrypted only at the moment of an API call); and conversation and message records (the customer's platform-scoped user id, message text, timestamps, and delivery status). This data is used solely to (a) generate the AI reply, (b) display the conversation to the business's own team, and (c) allow a human to take over the conversation. Incoming webhook payloads are verified with anX-Hub-Signature-256 (HMAC‑SHA256) signature before processing.

AI Processing of Meta Platform Data

Message content is processed by AI providers (under our instructions, on a Bring Your Own Key basis) transiently, for inference only, to generate the business's reply. It is not used to train, fine-tune, or improve any AI/ML model — ours or any third party's — and is not retained by the AI provider after the response is generated.