Privacy Policy

We collect information you provide directly when you: • Create an account (name, email, password) • Use our services (customer conversations, agent settings) • Contact us (support messages, inquiries) • Connect social accounts (Facebook, Instagram, WhatsApp) We also automatically collect: • Usage data and device information • IP address and approximate location • Browser and operating system information

We use the information we collect to: • Provide, maintain, and improve our services • Process transactions and send related notifications • Respond to your inquiries and provide customer support • Send technical notices and security updates • Monitor and analyze trends and usage patterns • Detect and prevent fraud and harmful activities • Comply with legal obligations

When you connect Google Calendar, we only use Google account data to provide and improve the calendar scheduling feature. This includes: • verifying your connected Google account • checking calendar availability • creating, updating, and canceling events • syncing event metadata as needed for your Ideeps workflows We do not use Google data for advertising, marketing, profiling, or any purposes unrelated to providing or improving the service. We request only the minimum Google scopes configured for this feature, and these are the only Google scopes used by the app: openid, https://www.googleapis.com/auth/userinfo.email, https://www.googleapis.com/auth/userinfo.profile, https://www.googleapis.com/auth/calendar.readonly (to check availability), and https://www.googleapis.com/auth/calendar.events (to create, update, and cancel appointments).

We use a third-party AI service provider to power our agent workflows and scheduling automation. The current implementation uses OpenRouter as the AI integration layer, calling Google Gemini models to generate responses and handle booking logic. Message content from Facebook Messenger, Instagram DMs, and WhatsApp is processed by AI models to generate automated responses. Only the message text and minimal context is sent to AI providers. AI providers do not store or train on your data (per their enterprise terms). We do not send Google account credentials, private Google Calendar contents, or Facebook/Instagram/WhatsApp user credentials to any AI provider.

When you connect your Facebook Page, Instagram Business account, or WhatsApp Business number to ideeps.ai, we access and process the following data: Facebook & Instagram: • Page information (name, ID, category, profile picture) • Messenger conversations and messages sent to/from your Page • Instagram Direct Messages sent to/from your Business account • Post engagement metrics (likes, comments, shares, reach) • Page insights and analytics data • Instagram media and profile information WhatsApp Business: • WhatsApp Business Account information • Message content (text, media, documents) sent to/from your business number • Message delivery/read status • Template message status and approval events • Account quality and health notifications How we process this data: • Messages are routed through our AI system to generate automated responses • Conversation history is stored for continuity and analytics • Engagement metrics are displayed in your dashboard for business insights • We do NOT use this data for advertising or sell it to third parties • We do NOT share message content with other ideeps.ai users Data retention for Meta platform data: • Active conversations: Retained while your account is active • Message history: 90 days after conversation ends • Page/account metadata: Until you disconnect the account • Analytics data: 12 months rolling We comply with Meta Platform Terms and Policies at all times.

When you connect your Shopify store to ideeps.ai, your AI agent uses Shopify's Admin API to answer your customers and take orders in WhatsApp, Messenger and Instagram. Data we read from your store (live, when the agent needs it): • Products, variants, prices, images and inventory levels • Locations, shipping zones and delivery rates • Active discount codes, shown to you on the Shopify card • Orders, fulfillment status and tracking • Customer records (name, email, phone, address), to find a customer's existing account and orders • Orders with returns and their return status, shown to you on the Shopify card (read-only) Actions the agent can take in your store: • Create a customer record and place an order — only after the customer confirms the order summary in the chat • Send a cart link to your online store • The agent does not edit, cancel or refund orders. When a customer asks to change or cancel an order, the request is sent to your team (as a lead in your dashboard and a WhatsApp notification) to handle in Shopify Data we store: • Your store domain, the permission scopes you granted and connection details • Your Shopify access and refresh tokens, kept in a restricted table that only our servers can read, encrypted at rest • Order previews created in chat: items, quantities, prices, shipping quote, and the customer's first name, phone number and delivery address • A link between a chat contact and their Shopify customer ID, so returning customers are recognised • The reference of the order placed in Shopify • Order change or cancel requests, saved as leads in your dashboard (customer name, phone, address and order reference) We do NOT bulk-download or copy your product catalog, order history or customer list. How we use this data: • Only to run your AI agent for your store: answer product, stock, shipping and order questions, and place confirmed orders • We do NOT use your store data for advertising, we do NOT sell it, and we do NOT share it with other ideeps.ai users Retention and deletion: • Order previews and customer links are kept while your store is connected • When you disconnect the store in ideeps.ai, we stop using it and delete its stored access tokens • When a store owner deletes a customer's data, Shopify sends us a customer redaction request and we delete that customer's order previews and customer links • When you uninstall the app, Shopify sends us a shop redaction request 48 hours later and we delete all order previews, customer links and access tokens for the store • Order change requests saved as leads stay in your dashboard until you delete them or ask us to • Customer data requests from Shopify are logged and answered by our team. Email support@ideeps.ai to request an export or deletion at any time We comply with Shopify's API Terms of Service and Partner Program Agreement at all times.

You can request deletion of your data at any time: 1. Through Facebook: Remove ideeps.ai from your Facebook App Settings (Settings → Apps and Websites → Remove). We will automatically receive a deletion request and process it within 30 days. 2. Through our platform: Go to Settings → Account → Delete My Data, or email support@ideeps.ai 3. Check deletion status: After removal via Facebook, you can track your deletion request at https://ideeps.io/data-deletion-status When you disconnect a social account: • We stop receiving new messages/data for that account within minutes • Existing conversation history is retained for 90 days then auto-deleted • Account metadata is removed immediately • You can request immediate deletion of all data by contacting support@ideeps.ai

We implement reasonable security measures to protect your information: • Encryption in transit and at rest (SSL/TLS) • Secure authentication and session management • Regular security audits and updates • Access restricted to authorized personnel only • Regular backups and disaster recovery plans However, no system can guarantee 100% security.

We do not sell your personal information. We may share data with: • Service providers who help us operate the platform • Integration partners (Facebook, Instagram, WhatsApp) when you connect accounts • Legal authorities when required to comply with law • Third parties with your explicit consent All service providers are bound to maintain data confidentiality.

You have the right to: • Access your personal data • Correct inaccurate data • Delete your account and data • Export your data in a readable format • Object to data processing • Withdraw consent at any time To exercise these rights, contact us at support@ideeps.ai

We retain your data as long as your account is active or as needed to provide services. • Account data: Until account deletion • Conversation logs: 90 days after session ends • Usage logs: 12 months • Billing data: As required by law You can request data deletion at any time.