Privacy & Data PolicyEffective Date: August 3, 2026

Privacy & User Data Deletion Policy

This policy describes how our platform collects, stores, encrypts, processes, and deletes data when merchants connect their Facebook Pages and Instagram Accounts.

1. Overview

Our Multi-Tenant AI Inventory & Sales SaaS platform enables merchants to automate customer support and sales order processing through integrated Meta Graph APIs for Facebook Messenger and Instagram Direct Messaging.

We prioritize data privacy, merchant isolation, and complete transparency regarding how social media integrations access customer data.

2. Information We Collect

Details of data processed during social account authorization and customer messaging

Merchant Integration Metadata: Page IDs, connected Instagram Business Account IDs, page names, and encrypted page access tokens.
Customer Interaction Details: Page-scoped user IDs (PSID), customer names/handles, comment text, and direct message contents.
Order Booking Details: Customer full name, shipping address, contact phone number, chosen payment method, and item SKUs required for fulfillment.

3. How Information Is Used

We process collected data exclusively to fulfill authorized merchant automation services:

To generate automated AI assistant responses answering customer inquiries regarding store stock, pricing, and warranties.
To record pending sales orders in the merchant sales ledger upon explicit customer confirmation.
To send public comment replies or private direct messages responding to post inquiries.

4. Data Security & Encryption

All Meta page tokens and credentials are encrypted using bank-grade AES-256-GCM before database storage. Access credentials are strictly isolated per tenant using Row Level Security (RLS) and are never exposed in client-facing APIs or third-party tracking.

5. User Data Deletion Instructions & Rights

In compliance with Meta Platform Policies, users and merchants have the right to request full data deletion.

Option A: Disconnect via Dashboard Settings (Instant Deletion)

Store owners can disconnect their Facebook Page or Instagram Account at any time by navigating to Settings & Administration ➔ Meta Bot (FB & IG) and clicking Disconnect Page. Disconnecting immediately revokes webhook subscriptions and purges stored access tokens.

Option B: Revoke Permissions via Facebook Settings

Page admins can remove our application access directly from Facebook by going to Settings & Privacy ➔ Settings ➔ Business Integrations / Apps and Websites and clicking Remove.

Option C: Manual Email Request

End-user customers or page admins can request manual deletion of stored chat records or profile data by emailing privacy@inventory.saas with the subject line Data Deletion Request. Manual requests are fulfilled within 48 business hours.

Privacy Officer Contact: privacy@inventory.saas