Privacy Policy

Information We Process

When you message a business account connected to AIBO, AIBO may process information provided by the communication channel and by your conversation, including:

• channel identifiers, such as Facebook Page-scoped IDs, Instagram-scoped IDs, TikTok conversation and account IDs, Telegram chat IDs, WhatsApp chat IDs, and related page or account IDs;
• public or channel-provided profile details, such as display name, username or handle, profile picture when available, and the channel used. AIBO keeps its own copy of the profile picture, because the platform's picture links expire, and deletes it with the rest of your data;
• message content, media attachments, captions, delivery status, timestamps, and conversation history;
• CRM information created by authorized staff, such as lead status, category, tags, follow-up notes, customer preferences, and scheduled actions;
• operator replies, AI-assisted draft content, review actions, audit records, and technical logs needed to secure and operate the service.

How We Use Information

We use this information only to provide and improve customer communication and CRM operations, including to:

• receive, route, and display customer conversations to authorized staff;
• send human-reviewed replies and attachments through the channel where the conversation occurred;
• manage leads, follow-ups, pipeline status, and customer support history;
• generate supervised AI draft replies for staff review before sending;
• protect the service, verify webhooks, prevent misuse, troubleshoot delivery, and maintain audit records;
• comply with applicable law, platform policies, and valid deletion or security requests.

Meta Platform Data

For Facebook Messenger and Instagram, AIBO processes Meta-provided user data only for the connected business messaging experience described above. We do not sell Meta user data, use it for unrelated advertising, or transfer it except to service providers that help operate AIBO under confidentiality and security obligations. When a business connects its Instagram professional account, AIBO also reads that account's public details (its username, name, profile picture, follower count and number of posts) to show the business's staff which account is connected. When a business allows comments and insights, AIBO also reads the comments and mentions on that business's Facebook Page and Instagram posts (the commenter's name or username, the comment and any photo in it), and the posts' own numbers (views, reach, likes, comments, shares and saves). AIBO uses them only to show them to the business's staff, suggest replies for staff to review, send the replies, private messages or hides that staff choose, and report how the business's posts perform. A commenter's comments are deleted with the rest of their data.

TikTok Data

For TikTok, AIBO connects only TikTok Business Accounts whose owners authorize it on TikTok's consent page, through TikTok's Business Messaging API. AIBO receives the direct messages customers send to that business account and the replies the business sends, including photos, videos, stickers, and shared posts, plus the ad or link a customer came from when TikTok provides it. AIBO replies only after the customer has written first and within TikTok's messaging limits; it never starts conversations or sends unsolicited messages. TikTok data is used only to provide the connected business's customer conversations and CRM records. It is visible only to that business's authorized staff, is never sold, shared with other businesses, or used for advertising, and access tokens and app secrets are encrypted at rest. TikTok Business Messaging is not used for accounts or customers in the European Economic Area, Switzerland, or the United Kingdom.

Sharing

We share information only as needed to operate the service: with the messaging platforms used to receive and send messages, with hosting/security/service providers that operate AIBO on our behalf, with the connected business's authorized staff, or when required by law or platform policy. We do not sell personal information.

Requests From Public Authorities

AIBO requires a review of the legality of any request from a government or other public authority before disclosing personal information processed through AIBO. We verify that the request has a valid legal basis, comes from an authorized authority, and identifies the information sought. Requests that cannot be validated are not fulfilled unless disclosure is otherwise required by applicable law.

Retention

Conversation and CRM records are retained while needed for customer support, lead management, service quality, security, audit, dispute resolution, and legal or platform compliance. When data is no longer needed, or when a valid deletion request is approved, records are deleted or anonymized unless retention is required for legal, security, fraud prevention, dispute, or compliance reasons.

Security

AIBO uses administrative, technical, and access controls appropriate for a customer messaging system. Provider credentials and tokens are encrypted server-side, webhook signatures are verified where supported, reviewer access is restricted, and operational access is limited to authorized personnel.

Your Choices And Deletion Path

You may request access, correction, or deletion of personal data processed by AIBO. Email admin@aibo.world (admin [at] aibo [dot] world) or message the same Facebook Page, Instagram professional account, or TikTok business account where the conversation happened with the phrase: "Please delete my AIBO conversation data." Include the channel used and approximate conversation date so we can locate the correct record.

For detailed deletion instructions, visit /data-deletion.

Contact

For privacy, security, or data deletion requests, contact admin@aibo.world (admin [at] aibo [dot] world).