Privacy Policy
VOID IT Solution ("we", "us", "our") operates ConvaiBD, an AI-assisted Facebook Messenger automation platform for businesses in Bangladesh. This Privacy Policy explains what information we collect, how we use it, and the choices available to users.
1. Who This Policy Covers
This policy applies to:
- Business users who create a ConvaiBD account and connect a Facebook Page.
- End customers who message a business through Facebook Messenger while ConvaiBD is enabled on that Page.
2. Information We Collect
Account and business information
- Name, email address, and account credentials.
- Business details provided during onboarding or support requests.
- Subscription plan, usage counters, and billing-related metadata.
Facebook / Meta Platform Data
When a business user connects a Facebook Page, we receive and store only the data needed to provide Messenger automation, including:
- Facebook Page ID, Page name, category, profile picture URL, and Page tasks.
- Page access tokens required to receive webhook events and send Messenger replies.
- Messenger conversation content such as message text, timestamps, sender IDs, delivery/read status, and attachments (including images sent by customers).
- Webhook event metadata required to operate the service reliably.
We do not request or use Facebook login passwords. Authentication to ConvaiBD is handled separately through our account system.
Product and AI configuration data
- Products, prices, categories, image library entries, AI setup answers, prompts, and page-specific automation settings uploaded by the business user.
- Technical logs, error reports, and usage analytics for security and service quality.
3. How We Use Information
- Provide AI-assisted Messenger replies on behalf of connected Facebook Pages.
- Store conversation history so business users can review customer interactions.
- Analyze customer images only when needed to answer product availability or related sales questions.
- Enforce plan limits, prevent abuse, maintain security, and improve the platform.
- Respond to support requests and send important service notices.
We do not sell personal data. We do not use Meta Platform Data for unrelated advertising profiles.
4. Meta Platform Permissions We Request
- pages_show_list — Show Facebook Pages the business user manages so they can choose which Page to connect to ConvaiBD.
- pages_manage_metadata — Subscribe the connected Page to Messenger webhooks and keep Page metadata in sync for automation.
- pages_read_engagement — Read basic Page engagement signals needed to operate Messenger automation reliably.
- pages_messaging — Receive customer Messenger messages via webhook and send AI-assisted replies on behalf of the connected Page.
We request only the permissions required for Messenger automation. For more information about Meta's own data practices, see the Meta Privacy Policy and Meta Platform Terms.
5. Third-Party Service Providers
- Meta / Facebook — Messenger delivery, Page connection, and webhook events.
- Supabase — authentication, database, and secure file storage.
- Anthropic Claude — AI text generation for complex replies and setup assistance.
- Google Gemini — AI vision analysis and selected text replies in our hybrid model.
These providers process data only as needed to deliver the service and under their own privacy terms.
6. Data Retention
- Account and Page connection data is retained while the account remains active.
- Messenger conversation data is retained to provide inbox history to the business user unless deleted earlier by the account owner or upon valid deletion request.
- When a Page is disconnected or an account is deleted, associated automation data is removed or anonymized within a reasonable period, except where retention is required by law or legitimate security needs.
7. Data Security
We use industry-standard safeguards including encrypted transport (HTTPS), access controls, account-scoped database isolation, and secure storage of Page access tokens. Only authorized systems and personnel may access production data for support, security, or maintenance purposes.
8. Your Choices and Rights
- Business users can delete their entire account instantly from the ConvaiBD dashboard under Account → Delete account.
- Business users can disconnect a Facebook Page at any time from the ConvaiBD dashboard.
- Business users can request account deletion by emailing support@convaibd.com.
- End customers who message a connected Page may request deletion of their Messenger conversation data by contacting the Page owner or emailing us at the support address above.
See our Data Deletion Instructions for step-by-step details.
9. International Processing
Our infrastructure and subprocessors may process data in countries outside Bangladesh. We take reasonable steps to protect data regardless of processing location.
10. Children
ConvaiBD is a business service and is not directed to children under 13. We do not knowingly collect children's personal data.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date on this page.