Privacy Policy

This Privacy Policy explains how Produkteev ("Produkteev", "we", "us", or "our") collects, uses, stores, shares, and protects information when you use our omnichannel customer relationship management (CRM) platform and connect it to messaging channels such as Instagram, Facebook Messenger, WhatsApp Business, and Threads, or sign in using Facebook Login.

1. About Produkteev

Produkteev is a business software platform that helps merchants and their teams manage customer conversations and relationships across multiple channels from a single dashboard. Businesses ("our customers") connect their own social and messaging accounts to Produkteev so their agents can receive, reply to, organize, and follow up on messages from their end customers.

In most cases, Produkteev acts as a data processor (service provider) that processes messaging data on behalf of the business that uses our platform. The business is the data controller for the conversations it handles through Produkteev. For account registration, billing, and platform administration, Produkteev acts as the data controller.

2. Information We Collect

2.1 Information you provide

• Account information: name, email address, phone number, business name, and password (stored in hashed form) when you register.
• Billing information: subscription plan and transaction records processed through our payment providers.
• Content you create: saved replies, labels, notes, automation rules, broadcast templates, and other configuration.

2.2 Information from connected channels

• Messages and conversations exchanged between the business and its end customers on connected channels (text, and where applicable attachments such as images, audio, video, and documents).
• End-customer profile data made available by the platform, such as display name, username or handle, profile picture, and platform-scoped user ID.
• Comments and interactions on connected Instagram or Facebook accounts where comment-management features are enabled.

2.3 Information collected automatically

• Technical data: IP address, browser type, device information, and timestamps.
• Usage data: log data about how you interact with the dashboard, used for security, debugging, and product improvement.

3. Meta Platform Data

When a business connects a Meta account (Instagram, Facebook Page/Messenger, WhatsApp Business, or Threads) or uses Facebook Login, we access data through Meta's official APIs and only with the permissions the business explicitly grants. Our use of information received from Meta APIs adheres to the Meta Platform Terms and Developer Policies, including their limited-use requirements.

4. How We Use Information

• To deliver core CRM functionality: receiving, displaying, routing, and replying to messages across connected channels.
• To enable features the business turns on, such as automated replies, comment automation, broadcasts, chatbots, labels, and reporting.
• To authenticate users and secure accounts (including via Facebook Login where used).
• To provide customer support, prevent fraud and abuse, and maintain the reliability and security of the service.
• To comply with legal obligations.

We do not use the content of end-customer messages to train third-party advertising systems, and we do not sell personal information.

5. Per-Platform Disclosures

The exact data accessed depends on the permissions each business grants during connection and can be revoked by the business at any time from within the platform or from their Meta account settings.

Google User Data

Where you connect Google Contacts, our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• Google Contacts data is used only to provide the contact import/synchronization feature you enable — it is never used for advertising, never sold, and never transferred to third parties except as necessary to provide the feature, to comply with applicable law, or as part of a merger or acquisition with prior notice to you.
• Access is read-only. We never modify or delete anything in your Google Contacts.
• Your Google OAuth refresh token is stored encrypted (AES-256-GCM) and is never exposed to other users or third parties. Humans do not read your Google Contacts data except with your permission for support, for security purposes, or where required by law.
• You can disconnect the integration at any time from the CRM (which revokes and deletes the stored token) or from your Google Account permissions page. Contacts already imported remain in your CRM under your control and can be deleted by you.

6. How We Share Information

We do not sell your personal information. We share information only in these limited circumstances:

• Service providers (sub-processors): infrastructure hosting, database, and cache providers that process data on our behalf under contractual confidentiality and security obligations.
• Platform providers: Meta and messaging providers, strictly to deliver messages you send and receive through their APIs.
• Within the business account: data is accessible to the authorized users (agents, admins) of the business account that owns the connection.
• Legal requirements: when required by law, regulation, legal process, or to protect rights, safety, and property.
• Business transfers: in connection with a merger, acquisition, or sale of assets, subject to this Policy.

7. Data Retention

We retain information for as long as the business account is active and the connection is enabled, or as needed to provide the service. Message and conversation data is retained to give businesses their conversation history and is deleted or anonymized when it is no longer needed, when the business deletes it, or upon a valid deletion request. Account and billing records may be retained longer where required for legal, accounting, or fraud-prevention purposes.

8. Data Deletion & Your Requests

You can request deletion of your data in any of the following ways:

• Disconnect a channel: disconnecting a Meta account in Produkteev stops further data access and lets you request removal of previously synced data for that channel.
• Delete your account: contact us to delete your Produkteev account and associated data.
• Email request: send a deletion request to gemigede@outlook.com with the subject line "Data Deletion Request" and the connected account or email you wish to remove.
• Revoke via Meta: you may remove Produkteev's access at any time from your Facebook, Instagram, or Business settings under "Business Integrations" / connected apps.

9. Data Security

We apply administrative, technical, and organizational safeguards to protect information, including encryption of sensitive credentials and secrets at rest, encrypted connections (HTTPS/TLS) in transit, access controls, and hashed password storage. No method of transmission or storage is 100% secure, but we work continuously to protect your information and to promptly address any security incident.

10. Your Rights

Depending on your location, you may have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate information.
• Request deletion of your information.
• Object to or restrict certain processing.
• Request a copy of your data in a portable format.
• Withdraw consent for connected integrations at any time.

To exercise these rights, contact us using the details below. Because Produkteev often processes end-customer data on behalf of a business, requests from end customers may be directed to the business that operates the account.

11. Cookies & Tracking

We use strictly necessary cookies and similar technologies to keep you signed in, remember your preferences, and secure the dashboard. We do not use these for third-party advertising. You can control cookies through your browser settings, though some features may not work correctly without them.

12. Children's Privacy

Produkteev is a business tool and is not directed to children under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

13. International Data Transfers

Your information may be processed and stored on servers located in countries other than your own. Where we transfer data internationally, we take steps to ensure it remains protected in accordance with this Policy and applicable law.

14. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify account holders. Your continued use of Produkteev after changes take effect constitutes acceptance of the revised Policy.

15. Contact Us

If you have questions about this Privacy Policy or your data, contact us: