Privacy Policy

1. Introduction

Welcome to Boostfy.me (boostfy.me) ("we," "our," "us," or "the Platform"). Boostfy.me is an omnichannel messaging and customer engagement platform that enables businesses to manage conversations across multiple channels including Facebook Messenger, Instagram Direct Messages, WhatsApp, Telegram, SMS, Email, and more.

We are committed to protecting your privacy and being transparent about how we collect, use, store, and share your information. This Privacy Policy explains our data practices and your rights regarding your personal information.

By using Boostfy.me, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our services.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, password, company name, phone number, and billing information when you create an account.
• Profile Information: Optional profile details such as profile picture, job title, and company information.
• Payment Information: Credit card details and billing address (processed securely through third-party payment processors).
• Support Communications: Information you provide when contacting our support team, including support tickets, emails, and chat messages.

2.2 Information from Connected Services

• Facebook & Instagram: When you connect your Facebook Page or Instagram Business Account, we collect Page IDs, Instagram Account IDs, Page Access Tokens, page names, profile pictures, and follower counts. We also receive messages sent to your connected pages/accounts including sender information (Page-Scoped IDs), message content, timestamps, and media attachments.
• WhatsApp Business: Session information, phone numbers, message content, media files, and contact information from conversations.
• Telegram: Bot tokens, bot usernames, chat IDs, message content, and user information from bot interactions.
• Email Accounts: SMTP/IMAP credentials, email addresses, email content, and metadata.
• SMS Services: Phone numbers, SMS content, delivery status, and service provider credentials.
• Other Integrations: API keys, authentication tokens, and data from other third-party services you connect.

2.3 Message and Conversation Data

To provide our messaging services, we process:

• Message content (text, images, videos, documents, voice messages)
• Sender and recipient identifiers (PSIDs, phone numbers, email addresses, usernames)
• Timestamps and delivery status
• Conversation metadata (session IDs, channel information, read receipts)
• Contact information (names, profile pictures, custom fields)
• Chatbot interaction data (flow progress, variables, user inputs)

2.4 Automatically Collected Information

• Usage Data: Pages visited, features used, time spent, click patterns, and navigation paths.
• Device Information: IP address, browser type and version, operating system, device type, and unique device identifiers.
• Log Data: Server logs including API requests, response times, error messages, and system events.
• Cookies and Tracking: We use cookies and similar technologies to maintain sessions, remember preferences, and analyze usage patterns.

3. How We Use Your Information

We use the collected information for the following purposes:

3.1 Service Delivery

• Process and route messages across connected channels
• Execute chatbot flows and automated responses
• Manage customer conversations and support tickets
• Store and retrieve conversation history
• Deliver notifications and alerts
• Provide analytics and reporting features

3.2 Platform Operations

• Authenticate users and maintain account security
• Process payments and manage subscriptions
• Provide customer support and respond to inquiries
• Monitor system performance and troubleshoot issues
• Prevent fraud, abuse, and security threats

3.3 Improvement and Development

• Analyze usage patterns to improve features
• Develop new features and services
• Conduct research and testing
• Train and improve AI/ML models for chatbots and NLP

3.4 Communications

• Send service updates and announcements
• Provide technical support and assistance
• Send marketing communications (with your consent)
• Notify you of security alerts or policy changes

3.5 Legal Compliance

• Comply with legal obligations and regulations
• Respond to legal requests and prevent illegal activities
• Enforce our Terms of Service and protect our rights

4. Data Sharing and Disclosure

We do not sell your personal data. We may share your information in the following circumstances:

4.1 Third-Party Platforms

• Meta Platforms (Facebook & Instagram): We transmit messages and data to Meta's APIs to facilitate messaging on Facebook Messenger and Instagram Direct. This data is subject to Meta's Platform Terms and Data Policy.
• WhatsApp Business API: Message data is transmitted through WhatsApp's infrastructure subject to WhatsApp's Terms of Service.
• Telegram: Bot interactions are processed through Telegram's Bot API subject to Telegram's Terms of Service and Privacy Policy.
• SMS Providers: SMS content is transmitted through providers like Twilio subject to their terms and policies.

4.2 Service Providers

We work with trusted third-party service providers who assist in operating our platform:

• Cloud Hosting: AWS, DigitalOcean, or similar providers for infrastructure and data storage
• Database Services: PostgreSQL hosting providers for data storage
• Payment Processing: Stripe or similar payment processors for billing
• Email Services: Email delivery services for transactional emails
• Analytics: Analytics providers to understand usage patterns
• Customer Support: Support ticket and help desk systems

These providers are contractually obligated to protect your data and use it only for the purposes we specify.

4.3 Business Transfers

If Boostfy.me is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your information becomes subject to a different privacy policy.

4.4 Legal Requirements

We may disclose your information if required by law or in response to:

• Valid legal processes (subpoenas, court orders)
• Government or regulatory requests
• Protection of our rights, property, or safety
• Prevention of fraud or illegal activities

4.5 With Your Consent

We may share your information with other parties when you explicitly consent to such sharing.

5. Meta Platform Data Usage (Facebook & Instagram)

For data received through Facebook Login, Facebook Messenger API, and Instagram Messaging API, we comply with Meta's Platform Terms and the following principles:

• Limited Use: We use Platform Data only to provide the messaging and customer engagement features you requested. We do not use this data for any other purpose.
• No Surveillance: We do not use Platform Data for surveillance purposes or to track users across websites or apps.
• No Profiling: We do not build user profiles for advertising or marketing purposes using Platform Data.
• No Sale: We never sell Platform Data to third parties.
• Data Minimization: We only request and store the minimum data necessary to provide our services.
• Secure Storage: Platform Data is encrypted in transit and at rest using industry-standard security measures.
• Access Control: Only authorized personnel have access to Platform Data, and access is logged and monitored.
• Data Deletion: You can request deletion of your Platform Data at any time through our data deletion endpoint or by contacting support.

Instagram-Specific: For Instagram Business Accounts, we only access and process messages sent to your business account. We do not access personal Instagram accounts or content not explicitly shared with your business.

6. Data Retention

We retain different types of data for varying periods:

6.1 Account Data

Account information is retained as long as your account is active. After account deletion, we retain minimal data for 30 days to allow account recovery, then permanently delete it.

6.2 Message Data

Message content and conversation history are retained according to your configured retention settings (default: 90 days). You can configure custom retention periods in your dashboard settings. After the retention period, messages are automatically deleted or anonymized.

6.3 Analytics Data

Aggregated and anonymized analytics data may be retained indefinitely for service improvement and research purposes.

6.4 Legal Retention

We may retain certain data longer if required by law, for legal proceedings, or to protect our rights.

6.5 Backup Data

Deleted data may persist in backup systems for up to 30 days before being permanently removed.

7. Data Security

We implement comprehensive security measures to protect your data:

• Encryption: All data is encrypted in transit using TLS 1.2+ and at rest using AES-256 encryption.
• Access Controls: Role-based access control (RBAC) ensures only authorized personnel can access data.
• Authentication: Multi-factor authentication (MFA) available for all accounts.
• Monitoring: 24/7 security monitoring and intrusion detection systems.
• Regular Audits: Periodic security audits and penetration testing.
• Secure Infrastructure: Hosted on secure, SOC 2 compliant infrastructure.
• Data Isolation: Multi-tenant architecture with strict data isolation between accounts.
• Incident Response: Documented incident response procedures and breach notification protocols.

While we implement strong security measures, no system is 100% secure. We cannot guarantee absolute security but continuously work to improve our security posture.

8. Your Rights and Choices

Depending on your location, you may have the following rights:

8.1 Access and Portability

• Request a copy of your personal data
• Export your data in a machine-readable format
• Access your conversation history and analytics

8.2 Correction and Update

• Update your account information in dashboard settings
• Correct inaccurate or incomplete data
• Modify your preferences and settings

8.3 Deletion

• Delete your account and associated data
• Request deletion of specific data or conversations
• Remove connected integrations and their data

To request data deletion, visit our Data Deletion Instructions page or contact support.

8.4 Restriction and Objection

• Restrict processing of your data
• Object to certain data processing activities
• Opt-out of marketing communications

8.5 Withdraw Consent

Where processing is based on consent, you can withdraw consent at any time. This will not affect the lawfulness of processing before withdrawal.

8.6 Lodge a Complaint

You have the right to lodge a complaint with your local data protection authority if you believe we have violated your privacy rights.

To exercise any of these rights, please contact us at privacy@boostfy.me. We will respond within 30 days.

9. International Data Transfers

Boostfy.me operates globally and may transfer your data to countries outside your residence. We ensure appropriate safeguards are in place for international transfers, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy decisions for transfers to countries with adequate data protection
• Other legally approved transfer mechanisms

By using Boostfy.me, you consent to the transfer of your information to countries that may have different data protection laws than your country of residence.

10. Children's Privacy

Boostfy.me is not intended for use by individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately, and we will delete such information.

11. Cookies and Tracking Technologies

We use cookies and similar technologies for:

• Essential Cookies: Required for authentication and basic functionality
• Functional Cookies: Remember your preferences and settings
• Analytics Cookies: Understand how you use our platform
• Marketing Cookies: Deliver relevant advertisements (with consent)

You can control cookies through your browser settings. Disabling certain cookies may limit platform functionality.

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by:

• Posting the updated policy on our website
• Sending an email notification to your registered email address
• Displaying a prominent notice in the dashboard

Your continued use of Boostfy.me after changes become effective constitutes acceptance of the updated policy. We encourage you to review this policy periodically.

13. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We are committed to resolving privacy concerns promptly and will respond to your inquiry within 30 days.