Privacy Policy
Last updated: July 2026 · Template — review with your lawyer before launch.
Who we are
NibaChat Agent (“we”) provides AI-assisted messaging for businesses on Facebook Messenger and Instagram Direct. Contact: privacy@nibachat.agency.
Data we process
Business account data (email, name), connected Page/Instagram identifiers, encrypted access tokens, customer conversation content needed to generate replies, collected order details (name, address, phone), and usage analytics.
Why we process it
To deliver the service a business configures: answering its customers, collecting orders it requested, notifying its team, and showing it analytics. We do not sell personal data or use it for advertising.
Storage & security
Data is stored in our database hosting (Neon Postgres, EU/US regions). Access tokens are encrypted at rest (AES-256-GCM). Access is limited to the business that owns the data and platform administrators bound by confidentiality.
Retention & deletion
Conversation and order data is retained while the business account is active. Businesses can request export or deletion at any time — see Data Deletion Instructions. Customer end-users can request deletion through the business or directly via our data deletion page.
Meta platform data
Data received via Meta's platform is handled according to Meta's Platform Terms and Developer Policies, used only to provide the messaging service, and deleted on request.