Privacy Policy

1. Introduction

Anito Connect ("we", "our", or "us"), operated by Daloy Tech Solutions, provides an AI-powered customer engagement, booking, and e-commerce platform that works across multiple channels including Facebook Messenger and website chat. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our service.

2. Information We Collect

When you connect a channel (Facebook Page, website widget, etc.) to Anito Connect, we collect:

• Your Facebook Page ID and Page name
• A Page Access Token (used to send automated replies on your behalf)
• Page-Scoped User IDs (PSID) of your customers (to maintain conversation history and identify returning users)
• Messages and comments sent to your connected channels by end-users, including voice messages (which are transcribed to text by a speech-to-text service in order to generate a reply)
• Your account email address (via Supabase Auth)
• Business configuration data (e.g. business hours, knowledge base documents, AI personality settings) that you upload, including any historical Facebook conversation exports you choose to import into your knowledge base
• Booking and appointment data including customer names, contact info, and scheduled times
• Product catalog data including product names, descriptions, prices, and images
• Order and transaction data including order details and customer shipping/billing information
• Payment proof screenshots or receipts customers upload to verify a booking or order payment
• Payment account details you provide (e.g. GCash, Maya, or bank account information) so we can tell your customers where to send payment
• Support ticket details submitted by your customers through the AI
• A consolidated customer profile (a "contact") that links the identities one customer uses across your connected channels, holding their name, email address, phone number, and their answers to the intake questions you configure (for example address, company, or preferred branch) — collected when they share those details in chat, or when they provide them while booking or ordering
• Mobile phone numbers — yours (if you enable SMS alerts) and your customers' (when they provide one while booking or ordering, or when you add them to a Collections account) — used to send transactional SMS such as booking confirmations, reminders, and payment follow-ups; each SMS attempt is logged for audit and cost-tracking purposes
• If you use Collections: the people who pay you regularly (for example association dues, rent or installments) that you add or upload — their names, mobile numbers, email addresses, addresses or unit references, what they owe and what they have paid, the chat linked to each account, and the payment screenshots they send; and, from the chat, a request from someone asking to see their account (the name and reference they typed, kept only until you decide it) and a one-way keyed fingerprint of each mobile number or email typed to receive a code (so codes cannot be sent too often). You add this information as the business that is owed; we hold and process it on your behalf, only to keep those accounts, send the notices you set up, and show each payer their own account in a chat linked to it. We keep a payer's personal link and any one-time code sent to them only as a one-way hash, never the code itself; the text and email providers that deliver them keep their own copy of what was sent
• If you sign in with Google or Facebook, the basic profile information those providers share with us (your name, email address, and profile picture) — used only to create and secure your account, never to access your personal social media content
• Your customers’ Facebook display name and profile photo, retrieved from Meta when they message your Page — used to show a recognisable person in your Inbox and to address them naturally in replies, never to access their personal social media content
• If you invite team members, their email address and the module permissions you assign them
• If you invite the administrator of a Facebook Page to connect it to your business ("Invite Facebook owner"): that administrator's email address, the invitation's status and timestamps, the Page they connected — and, only between Facebook's permission dialog and the moment they choose the Page, a Facebook user access token that is deleted as soon as the Page is connected
• When you authorise Facebook, the app-scoped user ID Facebook assigns you for Anito Connect — a number that identifies you to us and to no one else. It is kept for one reason: Meta identifies a data-deletion request by that number and nothing else, so without it we could not recognise your request as yours. It is deleted with your access token the moment such a request arrives, and whenever you disconnect

3. How We Use Your Information

• To generate and send AI-powered replies to messages and comments on your connected channels
• To store your business knowledge base for context-aware responses
• To manage bookings, appointments, and scheduling on your behalf
• To display and manage your product catalog and process customer orders
• To keep the Collections accounts you set up: sending reminders, payment notices and acknowledgements in your name by Messenger (only within the 24 hours after the payer's own last message), SMS or email, filing the payment screenshots payers send, and showing each payer their own account only in a chat linked to it
• To provide analytics, lead tracking, and conversation insights
• To power the marketing features you choose to enable — grouping your contacts into segments and sending broadcast or automated follow-up campaigns by Messenger, SMS, or email, subject to the marketing consent recorded for each contact and to their right to unsubscribe at any time
• To manage your account and provide customer support
• To improve and develop our services

4. Facebook Data and Required Permissions

To provide our AI engagement services, we access your Facebook Page data strictly through the Meta Graph API. During the OAuth flow, we request specific permissions. Here is exactly what they are used for:

• pages_show_list: Used to show the list of Facebook Pages you manage during onboarding and connection setup.
• pages_manage_metadata: Used to subscribe the selected Page to webhook events for receiving customer messages and comments.
• pages_messaging: Used to send support replies to customer-initiated Messenger messages within the standard 24-hour response window (or up to 7 days for human agent interventions).
• pages_read_engagement: Used to detect comments and engagement events on connected Page posts via webhooks.
• pages_read_user_content: Used to read customer comment text so our AI support assistant can understand the question and generate a relevant reply.
• pages_manage_engagement: Used to post Page replies under customer comments on connected Page posts.

Invited Page administrators: a customer may invite the administrator of a Facebook Page to connect it to the customer's business. That administrator approves the same permissions above inside their own Facebook session. We store their email address and the Page connection on the customer's business — never on an account of their own, and we create none — and we use the email address only to send the invitation, a confirmation once the Page is connected, and a reconnection request if Facebook later withdraws the Page token. Nothing on their personal profile is read or posted. They can withdraw the connection at any time from Facebook → Settings → Business Integrations, and the customer can disconnect it from their dashboard.

5. Google Calendar Data and Limited Use

If you choose to connect your Google Calendar, we access it strictly through the Google Calendar API using a single OAuth permission — https://www.googleapis.com/auth/calendar.events — which is the narrowest scope that supports the feature (we do not request access to your calendar settings, sharing/permissions, or your other calendars). We use it only to keep your Anito Connect appointment bookings in sync with your calendar: we create a calendar event when a customer books an appointment, update it when a booking is rescheduled, delete it when a booking is cancelled, and read your existing events (with change notifications) so times you are already busy are automatically blocked and not double-booked. You can disconnect Google Calendar at any time from your dashboard settings, which revokes our access and removes the events we created.

Limited Use: Anito Connect's use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Although Anito Connect uses AI language models to operate the Service, we do NOT use, transfer, or sell Google Workspace (Google Calendar) user data — whether raw, aggregated, or derived — to create, train, or improve any generalized or foundational artificial intelligence or machine learning models. Google Calendar data is used solely to provide the calendar-sync feature described above.

6. Data Sharing and Protection

We do NOT sell, share, or transfer Facebook user data to third parties, except as required to operate the core service (e.g., Supabase for encrypted database storage; Google Gemini and OpenAI for AI-generated replies, knowledge base search, and voice message transcription; PayMongo for payment processing; Semaphore for SMS delivery; Sentry for error monitoring). We strictly adhere to the Meta Platform Terms and Developer Policies. Data is never used for targeted advertising. Team Members: if you invite staff to your workspace, they can access the customer conversations, bookings, orders, and support tickets of YOUR business according to the module permissions you grant them. You are responsible for who you invite; you can revoke a team member's access at any time from Settings → Team, which takes effect immediately. Admin Access for Debugging: Authorized Anito Connect administrators have the technical ability to temporarily access and impersonate your account. This capability is strictly limited to debugging software issues, resolving complex customer support inquiries, and providing hands-on technical assistance at your request. All such administrative access events are securely audited and logged for security and compliance purposes.

7. Data Retention

We retain your data for as long as your account is active or as needed to provide services. Booking and order data is retained for business record-keeping purposes, and so are Collections accounts with their charges and payments: they are your records of what was owed and paid, kept while your account is active and deleted with it. If you delete your account, we immediately pause your AI and disconnect all your channels, then permanently delete your data within 30 days. You may request deletion of your data at any time via our Data Deletion page. Some third-party processors (e.g. our error-monitoring and AI providers) may retain limited technical logs for a shorter period under their own retention policies, independent of our systems.

Facebook Page invitation records (the invited administrator's email address, status, timestamps and the Page connected) are kept for as long as the business they connect remains in the customer's account, and are deleted with it. The temporary Facebook user token held during a connection is deleted the moment the Page is connected, when the invitation is cancelled, and in any case once the invitation has expired.

8. Third-Party Services

We use the following third-party services to operate Anito Connect:

• Supabase – Database, file storage, and authentication (including Google and Facebook sign-in)
• Google Gemini, Anthropic (Claude) and OpenAI – AI language models for generating replies and searching your knowledge base; which provider serves a given reply is configured by us and may change. Customer message content and relevant business context are sent to the provider serving that reply. OpenAI is additionally used to transcribe customer voice messages to text
• PayMongo – Payment processing for subscriptions, add-ons, and (where enabled) customer bookings/orders
• Semaphore – SMS delivery within the Philippines (booking confirmations, reminders, payment follow-ups, and owner alerts)
• Sentry – Error monitoring, used to diagnose issues; error reports may incidentally include recent message content or business context needed to reproduce the issue
• Resend – Transactional email delivery
• Upstash – Rate-limiting infrastructure (processes IP addresses and account emails solely to prevent abuse)
• Netlify – Application hosting; service traffic transits its infrastructure
• Meta (Facebook) Graph API – Page messaging integration and (optionally) Facebook sign-in
• Google Calendar API – Optional two-way calendar sync for your appointment bookings, active only if you connect your Google account (see Section 5)

If you disconnect a channel, the customer data that channel provided — message transcripts, comment records, the platform identifiers behind them, and any display name or profile photo we retrieved — is permanently deleted 30 days later. Your own business records (bookings, orders, payments and support tickets) are kept, because they are your commercial history rather than data the platform gave us.

9. Security

We implement industry-standard security measures including encrypted storage of access tokens, HTTPS-only communication, row-level security policies on all database tables, and server-side validation of all user actions. However, no method of electronic transmission or storage is 100% secure.

10. Cookies and Local Storage

We use essential cookies to maintain your session and store your active page selection. We do not use tracking cookies or third-party advertising cookies.

11. Your Rights

You have the right to access, correct, or delete your personal data. You may disconnect your channels at any time through the dashboard. To exercise data deletion rights, visit our Data Deletion page or contact us at support@daloytechsolutions.com. If you ask Facebook to delete your data from Anito Connect, or you remove the app from your Facebook account, Facebook notifies us directly and the deletion runs immediately — you receive a confirmation code and a link showing what was removed and when. Messages, anything the assistant remembered, comments, support tickets and notifications are erased outright; where you booked or ordered something, that record is anonymised rather than deleted — your name, contact details and platform identifier are removed while the amount, date and status remain as the business's own accounting record of a transaction it performed, which it is entitled to keep. Nothing in an anonymised record identifies you. Where a business keeps a Collections account for you, your chat is unlinked from it, your personal link is cancelled and your payment screenshots are deleted from storage. The account itself (the name, number and email the business entered for it, and what was owed and paid) is the business's own record of money owed to it: it stays with the business, and you can ask the business to correct it or remove it. For users in the Philippines, we process personal data in accordance with the Data Privacy Act of 2012 (RA 10173) and its IRR; you also have the right to lodge a complaint with the National Privacy Commission (privacy.gov.ph). Data may be processed and stored on servers located outside the Philippines by the providers listed in Section 8, each bound by their own data-protection commitments.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page with an updated date.

13. Contact Us