Privacy Policy
Your trust matters to us. This policy explains what information we collect, how we use it, and what rights you have over your data at Zoppy AI.
Introduction
Welcome to Zoppy AI! We are committed to protecting the privacy of our users. This policy explains what information we collect when you use our platform and services, how we use it, and what rights you have over this information.
Information We Collect
When you use Zoppy AI, we collect information you provide directly, including:
- Account information (name, email, and profile details).
- Shop name, Facebook Page ID, OAuth access token, product listings, and settings.
- Information about comments on your Facebook posts to which the automation replies.
- Names, phone numbers, addresses, and order details coming in through your shop's automation/website.
- Messenger messages that pass through our automation layer.
- Webhook configurations and automation settings.
- Usage data, analytics, and performance metrics.
- Device information and technical data for service optimization.
- Reference information for subscription and order-related transactions (bKash/Nagad/Rocket, etc.). We do not store full card numbers or payment PINs.
- Product information, FAQs, and instructions you provide to train the AI.
- Browser type, IP address, pages visited, and timestamps (automatically, via server logs).
How We Use Your Information
We use the collected information only for the following purposes:
- Providing and maintaining the service: To operate, maintain, and develop the Zoppy AI platform, connect to social media accounts, manage comments and messages, and process automated interactions.
- AI-powered features: To generate intelligent replies using AI models, create personalized content suggestions, and provide automated response capabilities based on your preferences and context.
- Real-time communication: To enable instant messaging, comment management, webhook notifications, and real-time updates across your connected platforms.
- Improving the service: To analyze usage patterns, identify areas for improvement, build new features, and enhance our AI capabilities and platform integrations.
- Communicating with you: To send important service updates, notifications about your account activity, security alerts, and to respond to support requests.
- Ensuring security: To monitor and prevent fraudulent activity, abuse, and security incidents across all service features.
- To manage your shop's products, orders, and customer communications, and to send transactional emails such as email verification and password reset.
Facebook and Meta Data
When you connect a Facebook Page, we receive and store the Page ID and access token via OAuth. This data is used only to operate Messenger and comment automation on your behalf.
Meta Limited Use: Data obtained from Meta's API is used only for providing and improving the service. We do not post on your behalf, do not access your personal Facebook account data, and do not share your token with any third party. You can revoke access at any time by disconnecting the Page.
AI Processing and Sub-Processors
To provide the service, your messages and your customers' messages may be processed through trusted third-party AI and infrastructure providers, such as:
- AI service providers — for message analysis and reply generation.
- Automation/workflow and hosting providers — for message routing and data storage.
These sub-processors process data only according to our instructions, not for their own marketing.
Meta Platform Integration and Compliance
Zoppy AI integrates with Meta's platform through the Meta for Developers platform APIs, SDKs, and services. Our use of Meta's platform is governed by the Meta Platform Terms and Developer Policies.
Data access and use: When you connect your Facebook account to Zoppy AI, we access and process only your platform data to provide the following services:
- Managing comments and messages across your Facebook.
- Generating AI-powered replies to comments and messages using AI models.
- Providing real-time notifications and webhook integration for instant updates.
- Analyzing engagement metrics and performance data for your content.
AI Services and Model Providers
Zoppy AI provides AI-powered content generation and response capabilities using large language models. When you use our AI features:
- Your content and context data may be sent to our AI service provider for processing.
- The model processes this data to generate intelligent replies and content suggestions.
- The generated content is returned to Zoppy AI and presented for your review and approval.
- You have full control over whether to use, modify, or discard AI-generated content.
Use of your data by these providers is governed by their respective privacy policies and terms of use. We do not store or retain copies of data sent to these providers beyond what is necessary for service functionality.
Data Retention
We retain your account and shop data for as long as your account is active. Inbox messages and order records are retained for the convenience of running your business. You may request deletion of your account and associated data. Some data may be retained for legal requirements.
Data Sharing and Disclosure
We do not sell, rent, or trade your personal information. Data may be shared only in the following cases:
- With your explicit consent: If we need to share data for any purpose not mentioned here, we will first obtain your explicit consent.
- Service providers: Trusted third parties (such as AI, email delivery, hosting, payment) who process data under our instructions.
- Legal requirements: When required by law, or when necessary to protect the rights and safety of Zoppy AI or its users.
- Business transfers: If Zoppy AI is involved in a merger, acquisition, asset sale, or bankruptcy, your information may be transferred as part of that transaction. We will notify you via email and/or through a clear notice in our service before your information is transferred and becomes subject to a different privacy policy.
Except for the specific situations listed above, we do not share or transfer your data.
Data Deletion Requests
If you wish to delete your data or your customers' data, please make a request to info@zoppyai.com. To delete data obtained from Facebook/Meta, disconnecting your Page will delete the associated token and data. Data will be deleted within a reasonable time after receiving a valid request.
Data Security
At Zoppy AI, access tokens and other sensitive information are stored (at rest) using AES-256-GCM encryption. This is the same type of advanced encryption method used in TLS 1.3. As a result, even if unauthorized access to the stored data occurs, it cannot be read or modified.
Additionally, we apply industry-standard security measures including HTTPS encryption, hashed passwords, and access-controlled infrastructure. However, no transmission over the internet is 100% secure. So please use a strong password and keep your login information confidential.
Your Rights
Depending on your location, you may have certain rights regarding your personal information. These may include:
- Accessing the personal information we hold about you.
- Requesting correction of inaccurate or incomplete data.
- Requesting deletion of your personal data.
- Objecting to or restricting certain types of data processing.
- Requesting an export of your data in a portable format.
Children's Information
Zoppy AI is not intended for anyone under 18 years of age, and we do not knowingly collect personal information from children.
Changes to This Policy
We may update this Privacy Policy from time to time. In the case of significant changes, registered users will be notified via email. Continued use of the service after changes will be deemed acceptance of the modified policy.
Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us at info@zoppyai.com.
Questions about your privacy?
Our team is ready to help with any privacy-related request.