AI Sales Agent ("we", "us") provides a platform that connects a merchant's Instagram professional account to an AI-powered sales assistant. This policy explains what data we collect, why, and how it's handled.
Information we collect
- Merchant account data: name, email, and business details you provide when creating an account (business name, description, industry, location, policies).
- Instagram data: when you connect your Instagram professional account, we receive your Instagram account ID, username, and an access token, which we encrypt before storing. We receive and store message content, sender/recipient identifiers, and timestamps for conversations conducted through your connected account, in order to display them in your dashboard and generate AI responses.
- Product and order data: products you list, and orders and payment references created from conversations.
- Payment data: transaction references and amounts used to verify payments. We do not store full bank account credentials, and payments are made directly to the merchant's own account — we do not hold customer funds.
How we use this information
- To operate the core service: displaying conversations, generating AI responses, creating orders, and verifying payments.
- To send AI-generated replies through your connected Instagram account on your behalf, using product and business information you provide.
- To detect and prevent fraud, duplicate transactions, and abuse.
Sharing
We share data with the service providers necessary to operate the platform: Meta (Instagram messaging), Clerk (authentication), Convex (database and hosting), our payment provider, and our AI provider (used to generate response text from conversation and product data). We do not sell personal data.
Data retention and deletion
We retain conversation and order data for as long as your account is active, or as needed to comply with legal obligations. See our Data Deletion page for how to request removal of your data.
Security
Access tokens and other sensitive credentials are encrypted at rest. Access to merchant data is isolated per business account, and webhook events are verified before processing.
Contact
Questions about this policy: [replace with your support email before submitting for App Review].