Privacy Policy

This Privacy Policy describes how AI Business Agent ("we", "us", "our") collects, uses, and protects information when you use our AI-powered business messaging platform at kaka2026net.xyz.

1. Information we collect

• Account data: name, email, password hash, organization/workspace details.
• Business data: services, knowledge base entries, working hours, customer records, conversations, and appointment information you or your customers provide.
• Channel data: messages received via connected channels (e.g. web chat, WhatsApp, Instagram, email) including sender identifiers and message content.
• Technical data: IP address, browser type, device information, usage logs, and security audit events.
• Payment data: billing status and subscription metadata processed by Stripe. We do not store full card numbers.

2. How we use information

• Provide and operate the service, including AI-assisted replies and appointment booking.
• Authenticate users and enforce multi-tenant data isolation.
• Process subscriptions and usage-based billing.
• Improve reliability, security, and customer support.
• Comply with legal obligations and respond to lawful requests.

3. AI processing

When AI features are enabled, message content and relevant business context may be sent to configured AI providers to generate responses. We instruct the system not to invent business facts. You control what information is stored in your knowledge base and business profile.

4. Third-party services

We may use trusted processors such as:

• Hosting (Vercel)
• Database (Neon PostgreSQL)
• Payments (Stripe)
• Messaging platforms (Meta/WhatsApp, Instagram, Google/Gmail) when you connect them
• AI providers (e.g. OpenAI) when mock mode is disabled

Each processor is used only to deliver the features you enable.

5. Data retention

We retain data while your account is active and as needed for legal, billing, or security purposes. You may request deletion as described on our Data Deletion page.

6. Security

We use industry-standard measures including encrypted connections (HTTPS), password hashing, tenant isolation, access controls, and audit logging. No method of transmission or storage is 100% secure.

7. Your rights

Depending on your location, you may have rights to access, correct, delete, or export your personal data, and to object to or restrict certain processing. Contact us using the details on the Data Deletion page.

8. International transfers

Data may be processed in countries where our infrastructure providers operate. We take steps to ensure appropriate safeguards where required.

9. Children

Our service is intended for businesses and is not directed to children under 16.

10. Changes

We may update this policy. Material changes will be posted on this page with a revised date.

11. Contact

Privacy inquiries: privacy@aibusinessagent.app