Privacy Policy

Information We Process

For AIBO app account holders, we process the username, display name, verified email address, password hash, two-step authentication settings, session and security records, team role, project memberships and actions taken in the business workspace. The Android app may register an optional device push token so AIBO can send generic update alerts; alerts do not contain customer message text. When enabled, Google Firebase Cloud Messaging receives the device push token to deliver those alerts. We use these records to sign users in, enforce project access, deliver invitations and account notices, and maintain an audit trail.

When you message a business account connected to AIBO, AIBO may process information provided by the communication channel and by your conversation, including:

• channel identifiers, such as Facebook Page-scoped IDs, Instagram-scoped IDs, TikTok conversation and account IDs, Telegram chat IDs, WhatsApp chat IDs, and related page or account IDs;
• public or channel-provided profile details, such as display name, username or handle, profile picture when available, and the channel used. AIBO keeps its own copy of the profile picture, because the platform's picture links expire, and deletes it with the rest of your data;
• message content, media attachments, captions, delivery status, timestamps, and conversation history;
• CRM information created by authorized staff, such as lead status, category, tags, follow-up notes, customer preferences, and scheduled actions;
• operator replies, AI-assisted draft content, review actions, audit records, and technical logs needed to secure and operate the service.

How We Use Information

We use this information only to provide and improve customer communication and CRM operations, including to:

• receive, route, and display customer conversations to authorized staff;
• send human-reviewed replies and attachments through the channel where the conversation occurred;
• manage leads, follow-ups, pipeline status, and customer support history;
• generate supervised AI draft replies for staff review before sending;
• protect the service, verify webhooks, prevent misuse, troubleshoot delivery, and maintain audit records;
• comply with applicable law, platform policies, and valid deletion or security requests.

Safety reports

When you report AI content, AIBO receives only the AI text you select and your optional note, with basic project, platform, reason and review metadata. No conversation history is automatically attached. Remove private details and secrets before submitting; common email addresses and telephone numbers are masked. Reports are encrypted, available only to authorized AIBO safety staff, retained for up to 28 days, and removed earlier with the associated source or reporter deletion where applicable. They are used to investigate unsafe output and record mitigation, not to train general-purpose AI models. Reports about customer content are handled separately by your business moderators.

Meta Platform Data

For Facebook Messenger and Instagram, AIBO processes Meta-provided user data only for the connected business messaging experience described above. We do not sell Meta user data, use it for unrelated advertising, or transfer it except to service providers that help operate AIBO under confidentiality and security obligations. When a business connects its Instagram professional account, AIBO also reads that account's public details (its username, name, profile picture, follower count and number of posts) to show the business's staff which account is connected. When a business allows comments and insights, AIBO also reads the comments and mentions on that business's Facebook Page and Instagram posts (the commenter's name or username, the comment and any photo in it), and the posts' own numbers (views, reach, likes, comments, shares and saves). AIBO uses them only to show them to the business's staff, suggest replies for staff to review, send the replies, private messages or hides that staff choose, and report how the business's posts perform. A commenter's comments are deleted with the rest of their data.

TikTok Data

For TikTok, AIBO connects only TikTok Business Accounts whose owners authorize it on TikTok's consent page, through TikTok's Business Messaging API. AIBO receives the direct messages customers send to that business account and the replies the business sends, including photos, videos, stickers, and shared posts, plus the ad or link a customer came from when TikTok provides it. AIBO replies only after the customer has written first and within TikTok's messaging limits; it never starts conversations or sends unsolicited messages. TikTok data is used only to provide the connected business's customer conversations and CRM records. It is visible only to that business's authorized staff, is never sold, shared with other businesses, or used for advertising, and access tokens and app secrets are encrypted at rest. TikTok Business Messaging is not used for accounts or customers in the European Economic Area, Switzerland, or the United Kingdom.

Sharing

We share information only as needed to operate the service: with the messaging platforms used to receive and send messages, with hosting/security/service providers that operate AIBO on our behalf, with the connected business's authorized staff, or when required by law or platform policy. We do not sell personal information.

Requests From Public Authorities

AIBO requires a review of the legality of any request from a government or other public authority before disclosing personal information processed through AIBO. We verify that the request has a valid legal basis, comes from an authorized authority, and identifies the information sought. Requests that cannot be validated are not fulfilled unless disclosure is otherwise required by applicable law.

Retention

The mobile app accesses a photo, video, document or client-data file only when you choose it with the system picker. Microphone access is optional and requested only when you tap Record voice note; recording stops when you stop it, leave the app or reach the displayed limit. A recording is sent to AIBO only when you submit the reply. Selected uploads, voice notes and business data follow the same project access and retention controls as the dashboard. Private downloaded previews and exports use temporary app storage, cleared when you switch projects or sign out; copies you explicitly open or save in another app are controlled by that app.

Conversation and CRM records are retained while needed for customer support, lead management, service quality, security, audit, dispute resolution, and legal or platform compliance. When data is no longer needed, or when a valid deletion request is approved, records are deleted or anonymized unless retention is required for legal, security, fraud prevention, dispute, or compliance reasons.

Security

AIBO uses administrative, technical, and access controls appropriate for a customer messaging system. Provider credentials and tokens are encrypted server-side, webhook signatures are verified where supported, reviewer access is restricted, and operational access is limited to authorized personnel.

Your Choices And Deletion Path

AIBO account holders can request account deletion in Settings > Account or in the Android app's Settings. The request immediately revokes sessions. We then verify transfer or erasure of any business projects and shared customer records, remove associated personal account data and confirm completion. The account deletion instructions also provide a web route for people who cannot sign in.

You may request access, correction, or deletion of personal data processed by AIBO. Email admin@aibo.world (admin [at] aibo [dot] world) or message the same Facebook Page, Instagram professional account, or TikTok business account where the conversation happened with the phrase: "Please delete my AIBO conversation data." Include the channel used and approximate conversation date so we can locate the correct record.

For detailed deletion instructions, visit /data-deletion.

Contact

For privacy, security, or data deletion requests, contact admin@aibo.world (admin [at] aibo [dot] world).