Privacy Policy

NibaChat Agent (“NibaChat”, “we”, “us”, or “our”) provides AI-powered customer support and messaging automation tools for businesses using channels such as websites, Facebook, Instagram, and other supported platforms.

This Privacy Policy explains how we collect, use, store, and protect information when you use NibaChat Agent.

1. Information We Collect

We may collect the following types of information:

Account Information:

• name
• email address
• password authentication data
• business name
• business website
• user role and permissions

Business Configuration Data:

• bot settings
• knowledge base content
• product information
• FAQs
• website URLs
• uploaded text files
• old chat examples provided by the business
• integration settings

Messaging and Customer Data: When a business connects Facebook, Instagram, or another supported messaging channel, we may process:

• customer messages
• sender or platform user IDs
• conversation history
• message timestamps
• attachments or image references where supported
• handoff and support status

Integration Data: Depending on the features used, we may process:

• Facebook Page ID
• Instagram Business Account ID
• Page access tokens
• webhook events
• Telegram bot token and chat ID
• OpenAI or other AI provider API keys
• related integration metadata

Technical Data:

• IP address
• browser type
• device information
• logs
• error reports
• usage analytics
• security events

2. How We Use Information

We use information to:

• provide and operate the NibaChat Agent service
• generate AI-assisted replies for connected businesses
• manage customer conversations
• maintain business knowledge bases and product catalogs
• connect and operate Facebook, Instagram, Telegram, and other integrations
• improve bot accuracy and service reliability
• provide analytics and usage reporting
• prevent abuse, fraud, and unauthorized access
• comply with legal and platform requirements

3. Facebook and Instagram Data

If a business connects Facebook or Instagram, NibaChat Agent may receive data through Meta APIs and webhooks.

We use this data only to:

• receive and process customer messages
• generate or assist replies
• manage conversations and handoffs
• display message history to authorized business users
• support the connected business account

We do not sell Facebook or Instagram user data.

We do not use Facebook or Instagram user data for unrelated advertising.

We do not share Facebook or Instagram user data with third parties except where necessary to provide the service, comply with law, or operate required infrastructure.

4. AI Processing

NibaChat Agent may use AI providers such as OpenAI or other configured providers to generate responses.

Only the information necessary to generate a relevant response may be sent to the configured AI provider.

Businesses are responsible for ensuring that the data they upload or connect to NibaChat Agent is lawful and appropriate for AI processing.

5. Data Storage and Security

We use reasonable technical and organizational measures to protect data, including:

• encrypted storage for sensitive tokens and API keys
• access controls
• business-level tenant isolation
• authentication and authorization checks
• audit logs where appropriate

No system is completely secure, but we work to protect information from unauthorized access, misuse, loss, or disclosure.

6. Data Sharing

We may share data with:

• infrastructure providers
• database and hosting providers
• AI processing providers
• messaging and integration platforms such as Meta, Telegram, or supported APIs
• legal authorities if required by law

We do not sell personal data.

7. Business Customer Responsibility

Businesses using NibaChat Agent are responsible for:

• informing their own customers that automated or AI-assisted messaging may be used
• ensuring they have the right to process customer messages
• keeping their uploaded knowledge, products, and policies accurate
• responding to customer privacy requests where applicable

8. Data Retention

We retain data for as long as needed to provide the service, comply with legal obligations, resolve disputes, maintain security, and operate business features.

Businesses may request deletion of their account or business data by contacting us.

9. User Data Deletion

Users may request deletion of their data by visiting: https://nibaagent.vercel.app/user-data-deletion

or by contacting: support@nibachat.app

For Facebook/Instagram related data, users may also remove the app connection through their Facebook settings. We will process deletion requests in accordance with applicable laws and platform requirements.

10. Your Rights

Depending on your location, you may have rights to:

• access your personal data
• correct inaccurate data
• request deletion
• object to processing
• restrict processing
• request data portability
• withdraw consent where processing is based on consent

To exercise these rights, contact us at support@nibachat.app.

11. Children

NibaChat Agent is intended for business use and is not directed to children. We do not knowingly collect personal information from children.

12. International Transfers

Data may be processed in countries other than your own, depending on our hosting providers, infrastructure, and AI providers.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a new “Last updated” date.

14. Contact

For privacy questions or deletion requests, contact:

NibaChat Agent

Email: support@nibachat.app

Legal entity: Aladdin21

Jurisdiction: United States