Privacy Policy

We collect information you provide directly when you: • Create an account (name, email, password) • Use our services (customer conversations, agent settings) • Contact us (support messages, inquiries) • Connect social accounts (Facebook, Instagram, WhatsApp) We also automatically collect: • Usage data and device information • IP address and approximate location • Browser and operating system information

We use the information we collect to: • Provide, maintain, and improve our services • Process transactions and send related notifications • Respond to your inquiries and provide customer support • Send technical notices and security updates • Monitor and analyze trends and usage patterns • Detect and prevent fraud and harmful activities • Comply with legal obligations

When you connect Google Calendar, we only use Google account data to provide and improve the calendar scheduling feature. This includes: • verifying your connected Google account • checking calendar availability • creating, updating, and canceling events • syncing event metadata as needed for your Ideeps workflows We do not use Google data for advertising, marketing, profiling, or any purposes unrelated to providing or improving the service. We request only the minimum Google scopes configured for this feature, and these are the only Google scopes used by the app: openid, https://www.googleapis.com/auth/userinfo.email, https://www.googleapis.com/auth/userinfo.profile, https://www.googleapis.com/auth/calendar.readonly (to check availability), and https://www.googleapis.com/auth/calendar.events (to create, update, and cancel appointments).

We use a third-party AI service provider to power our agent workflows and scheduling automation. The current implementation uses OpenRouter as the AI integration layer, calling Google Gemini models to generate responses and handle booking logic. Message content from Facebook Messenger, Instagram DMs, and WhatsApp is processed by AI models to generate automated responses. Only the message text and minimal context is sent to AI providers. AI providers do not store or train on your data (per their enterprise terms). We do not send Google account credentials, private Google Calendar contents, or Facebook/Instagram/WhatsApp user credentials to any AI provider.

When you connect your Facebook Page, Instagram Business account, or WhatsApp Business number to ideeps.ai, we access and process the following data: Facebook & Instagram: • Page information (name, ID, category, profile picture) • Messenger conversations and messages sent to/from your Page • Instagram Direct Messages sent to/from your Business account • Post engagement metrics (likes, comments, shares, reach) • Page insights and analytics data • Instagram media and profile information WhatsApp Business: • WhatsApp Business Account information • Message content (text, media, documents) sent to/from your business number • Message delivery/read status • Template message status and approval events • Account quality and health notifications How we process this data: • Messages are routed through our AI system to generate automated responses • Conversation history is stored for continuity and analytics • Engagement metrics are displayed in your dashboard for business insights • We do NOT use this data for advertising or sell it to third parties • We do NOT share message content with other ideeps.ai users Data retention for Meta platform data: • Active conversations: Retained while your account is active • Message history: 90 days after conversation ends • Page/account metadata: Until you disconnect the account • Analytics data: 12 months rolling We comply with Meta Platform Terms and Policies at all times.

When you connect your Shopify store to ideeps.ai, we access the following data through Shopify's Admin API: Data we access (read-only via API, queried at runtime): • Product catalog (titles, descriptions, prices, images, inventory levels) • Order information (order number, status, line items, totals, fulfillment) • Customer profiles (name, email, phone, order history) • Inventory levels and locations • Discount codes and price rules • Marketing events and reports Data we store locally: • Your Shopify store domain (e.g., mystore.myshopify.com) • An Admin API access token (encrypted at rest) — used to query your store data • The list of permission scopes you granted • Connection metadata (when connected, last used) What we do NOT store: • We do NOT bulk-download or cache your product catalog, orders, or customer data • We do NOT store individual customer PII from your Shopify store • All product/order/customer queries happen live at the moment your AI agent needs them • Results are used in-conversation and not persisted beyond the chat session How AI agents use this data: • When a customer asks about products, the agent queries your Shopify store in real-time • When a customer asks about an order, the agent looks it up live by order number • The agent can create draft orders (shopping carts) and send checkout links • We do NOT use your store data for advertising or sell it to third parties Data retention: • Admin access token: Stored until you disconnect the integration • Connection metadata: Deleted when you disconnect (soft-delete, hard-purged within 48 hours of uninstall) • Product/order/customer data: Never stored — queried live, discarded after response Your rights: • Disconnect anytime from your ideeps.ai Integrations page • Upon disconnect, your access token is immediately invalidated • If you uninstall our app from Shopify Admin, we receive a mandatory webhook and delete all stored data within 48 hours • Request data export or deletion: email support@ideeps.ai We comply with Shopify's API Terms of Service and Partner Program Agreement at all times.

You can request deletion of your data at any time: 1. Through Facebook: Remove ideeps.ai from your Facebook App Settings (Settings → Apps and Websites → Remove). We will automatically receive a deletion request and process it within 30 days. 2. Through our platform: Go to Settings → Account → Delete My Data, or email support@ideeps.ai 3. Check deletion status: After removal via Facebook, you can track your deletion request at https://ideeps.io/data-deletion-status When you disconnect a social account: • We stop receiving new messages/data for that account within minutes • Existing conversation history is retained for 90 days then auto-deleted • Account metadata is removed immediately • You can request immediate deletion of all data by contacting support@ideeps.ai

We implement reasonable security measures to protect your information: • Encryption in transit and at rest (SSL/TLS) • Secure authentication and session management • Regular security audits and updates • Access restricted to authorized personnel only • Regular backups and disaster recovery plans However, no system can guarantee 100% security.

We do not sell your personal information. We may share data with: • Service providers who help us operate the platform • Integration partners (Facebook, Instagram, WhatsApp) when you connect accounts • Legal authorities when required to comply with law • Third parties with your explicit consent All service providers are bound to maintain data confidentiality.

You have the right to: • Access your personal data • Correct inaccurate data • Delete your account and data • Export your data in a readable format • Object to data processing • Withdraw consent at any time To exercise these rights, contact us at support@ideeps.ai

We retain your data as long as your account is active or as needed to provide services. • Account data: Until account deletion • Conversation logs: 90 days after session ends • Usage logs: 12 months • Billing data: As required by law You can request data deletion at any time.