Privacy Policy

Who we are

SaivPlus (“we”, “us”) is operated by [Company legal name], [address]. Contact: privacy@saivplus.com.

Information we collect

Account data from Facebook Login: your Facebook user ID, name and profile picture URL. We never receive or store your Facebook or Instagram password.

Connected asset data you authorize: Page and Instagram Professional account IDs, names and profile images, and Meta access tokens (stored encrypted with AES-256-GCM).

Engagement data delivered by Meta webhooks for your connected assets: comments, messages, and the public profile identifiers of people who interact with you. This is processed on your behalf as a data processor.

Business information you enter (business name, website, AI assistant knowledge), billing records from our payment provider, support tickets, and security logs (IP address, user agent, audit logs).

How we use information

To provide the service: receive events, run the automations you configure, send replies through Meta's official APIs, show your inbox and analytics.

To bill subscriptions, provide support, secure the platform, prevent abuse and comply with law.

When you enable the AI Assistant, the customer message and your configured business information are sent to our AI provider to generate a reply. AI providers do not receive your Meta tokens.

We do not sell personal data, and we do not use Meta Platform Data for advertising or to build user profiles unrelated to your use of SaivPlus.

Sharing

Sub-processors: hosting/database provider, payment processor (Stripe), AI provider (Anthropic), email provider. We share data only as needed to operate the service, or when legally required.

Retention

Account data is kept while your account is active. Webhook payloads and execution logs are retained for up to 90 days by default. After account deletion, data is removed within 30 days except where retention is legally required (e.g. invoices).

Your rights

You can export or delete your data from Settings → Privacy, disconnect assets at any time, and remove SaivPlus from your Facebook Business Integrations. You may also contact us to exercise access, rectification, erasure, restriction, portability and objection rights.

Data deletion

See our Data Deletion Instructions page. When you remove SaivPlus from Facebook, Meta notifies us and we delete associated data automatically.

Security

TLS in transit, encrypted tokens at rest, tenant isolation enforced server-side, role-based access control, audit logs and least-privilege access.

Changes

We will notify you of material changes through the app or by email.