PRIVACY POLICY

1. INTRODUCTION & RELATIONSHIP CLARIFICATION

Salesbooster operates primarily as a Data Processor on behalf of the Merchants (the "Data Controllers") who subscribe to our service to automate their customer support and sales. When we process Customer data, we do so strictly under the instructions of the respective Merchant and in accordance with our terms of service and this Privacy Policy.

2. INFORMATION WE COLLECT

To provide automated AI-powered messaging services, we collect and process only the necessary data transmitted through Meta Platforms.

3. HOW WE USE THE INFORMATION

We use the collected information solely for the following specified, legitimate business purposes:

• AI Processing & Response Generation: To analyze incoming customer queries and generate automated, context-aware responses using advanced AI models.
• Context & History Maintenance: To preserve the conversation history in our database so the AI agent can maintain contextual continuity during a chat session.
• Merchant Dashboard Visibility: To display the live conversation history and customer metadata on the unified inbox dashboard of the respective Merchant.
• Order Synchronization: To assist merchants in processing orders generated through automated chat conversations.

We do not use collected data for targeted advertising, nor do we build behavioral profiles of end-users for any commercial purposes outside of the Merchant's operational scope.

4. DATA SHARING AND THIRD-PARTY PROVIDERS

We do not sell, trade, or lease personal data to any third parties. To execute our core AI capabilities, we share conversation text and context with verified third-party AI service providers:

• AI API Providers (e.g., OpenAI, Google Gemini, Anthropic, Groq): Conversation text is transmitted securely via APIs to these providers solely for generating real-time replies and semantic embeddings. These third-party processors are bound by strict confidentiality agreements and data processing addendums (DPAs) that prohibit them from using your data to train their models or sharing it for independent purposes.
• Compliance with Law: We may disclose information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).

5. DATA SECURITY

We implement industry-standard administrative, technical, and physical security measures to safeguard your personal data:

• In-Transit Encryption: All data transmitted between Meta, our servers, and third-party AI providers is encrypted using Secure Sockets Layer/Transport Layer Security (TLS 1.3).
• At-Rest Encryption: Sensitive data, including access tokens and API keys, are stored in encrypted formats (AES-256) within our secure PostgreSQL databases hosted on Supabase.
• Access Control: Access to database records is strictly restricted to authorized system processes and authenticated organization members through Role-Based Access Control (RBAC).

6. DATA RETENTION AND DELETION

We retain customer conversation history and metadata only as long as necessary to provide services to the Merchant, or until a deletion request is initiated.

7. CHANGES TO THIS PRIVACY POLICY

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top of this document. You are advised to review this Privacy Policy periodically for any changes.

8. CONTACT INFORMATION

If you have any questions about this Privacy Policy, data processing practices, or wish to exercise your data rights, please contact us at: