Privacy Policy

1. Introduction

Auto-Messenger ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

2. Information We Collect

2.1 Information You Provide

• Account Information: Email address, name, and password
• Facebook Page Data: Page ID, page name, and access tokens
• AI Provider API Keys: Encrypted API keys for OpenAI, Anthropic, Google, or Deepseek (stored securely, never exposed to client)
• Knowledge Base Content: Information you add to train the AI
• AI Persona Configurations: Custom prompts and persona settings
• Payment Information: Processed securely through Stripe (we do not store card details)

2.2 Information Collected Automatically

• Facebook Messages: Messages sent to your connected Facebook Pages
• Usage Data: How you interact with the Service
• Device Information: Browser type, IP address, and operating system
• Cookies: For authentication and session management

2.3 Third-Party Data

• Facebook Data: We access Facebook Messenger data through their official API with your permission
• AI Providers: Messages and knowledge base content are processed by your chosen AI provider (OpenAI, Anthropic, Google, or Deepseek) using API keys you configure

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Process and respond to Facebook Messenger conversations
• Generate AI-powered responses using your configured AI provider and knowledge base
• Store and manage your AI personas and templates
• Facilitate AI playground testing
• Process payments and manage subscriptions
• Send administrative information and updates
• Improve and optimize the Service
• Monitor and analyze usage patterns
• Detect and prevent fraud or abuse

4. Data Sharing and Disclosure

We may share your information with:

• Facebook: To send and receive messages through your connected Pages
• AI Providers: Messages and knowledge base content are sent to your chosen AI provider (OpenAI, Anthropic, Google, or Deepseek) for processing using your API keys
• Stripe: To process payments securely
• Service Providers: Third parties who assist in operating the Service (e.g., hosting, analytics)
• Legal Requirements: When required by law or to protect our rights

We do not sell your personal information to third parties. Your AI provider API keys are encrypted and stored securely, and are never exposed to the client-side application.

5. Data Security

We implement industry-standard security measures to protect your information, including:

• Encryption of data in transit (HTTPS/TLS)
• Encryption of sensitive data at rest (API keys, access tokens)
• Secure storage of credentials and access tokens
• API keys are never exposed to client-side applications
• Regular security audits and updates
• Access controls and authentication mechanisms

However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. You may request deletion of your data at any time by contacting us. We will delete your data within 30 days of your request, except where we are required to retain it for legal or regulatory purposes.

7. Your Rights and Choices

You have the right to:

• Access: Request a copy of the personal information we hold about you
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your personal information
• Data Portability: Receive your data in a structured, machine-readable format
• Opt-Out: Unsubscribe from marketing communications
• Revoke Access: Disconnect your Facebook Pages at any time

To exercise these rights, please contact us at info@big-ai.co

8. Facebook Data Policy Compliance

Our use of information received from Facebook APIs adheres to the Facebook Platform Policy. We only access data necessary to provide the Service and delete Facebook data when requested or when no longer needed.

9. Children's Privacy

The Service is not intended for users under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure that appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.

11. Cookies and Tracking

We use cookies and similar tracking technologies to:

• Maintain your session and keep you logged in
• Remember your preferences
• Analyze usage patterns and improve the Service

You can control cookies through your browser settings, but this may affect the functionality of the Service.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. We encourage you to review this Privacy Policy periodically.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

14. GDPR Compliance (EU Users)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

• Right to be informed about data collection and use
• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Rights related to automated decision-making

Our legal basis for processing your data is your consent and/or the performance of our contract with you.