1. Who we are
QuotyAI ("we", "us", "our") provides AI assistants for sales, booking, and customer support across websites, messaging channels (including Facebook Messenger, Instagram, WhatsApp, Telegram, and voice), and business tools. Website: https://quotyai.com/.
Contact for privacy questions: [email protected]. General support: quotyai.com/support/.
2. Data we collect
2.1 Account and business data
- Name, work email, business name, and account credentials when you sign up at portal.quotyai.com.
- Business content you provide: menus, prices, working hours, FAQs, service rules, and knowledge-base documents used to configure your AI assistant.
- Billing data processed by our payment provider (we do not store full card numbers).
2.2 Facebook / Meta data (when you connect a Facebook Page)
Only if you, as a business admin, explicitly connect your Facebook Page via Meta OAuth or Meta Business Suite:
- Facebook Page identifiers (Page ID, Page name), Page access tokens, and granted permissions / scopes.
- Messenger conversations with your Page: message text, attachments the customer sends to your Page, sender-scoped IDs (PSIDs), and timestamps — needed to generate AI replies and hand off to your team.
- Basic Meta account identifiers required for OAuth (Meta user ID, granted scopes). We do not request personal friends lists, photos, or unrelated profile data.
- Webhook events from Meta (messages, messaging postbacks, message reactions, opt-ins) for Pages you connected.
We do not collect data from personal Facebook profiles. We only process data for Facebook Pages whose admin explicitly installed and authorized the QuotyAI app.
2.3 Automatically collected data
- Log data: IP address, browser type, pages visited on quotyai.com, timestamps.
- Product logs: API calls, assistant runs, error logs — used for reliability, abuse prevention, and support.
3. How we use data
- Provide, operate, and improve the QuotyAI service (answer inquiries, take orders, book appointments, hand off to humans).
- Authenticate your Facebook Page connection and send replies through the Messenger Platform / Graph API on your behalf.
- Customer support, troubleshooting, security, fraud prevention, and compliance with Meta Platform Terms.
- Product analytics in aggregated or de-identified form.
We do not sell personal data. We do not use your business or customer message data for advertising, and we do not share it with data brokers.
4. How we share data
- Meta Platforms, Inc. — when you use the Messenger integration, messages and reply payloads are exchanged with Meta's Graph API / Messenger Platform as required to deliver the service.
- Infrastructure providers — hosting, database, logging, and payment processors acting as subprocessors under contract.
- Legal compliance — when required by law, court order, or to protect rights and safety.
5. Data retention
- Account and business knowledge-base data: retained while your account is active.
- Messenger conversation data: retained while your Page stays connected and your account is active, then deleted or anonymized within 30 days of disconnection or account closure, except where law requires longer retention.
- Logs: typically retained up to 12 months for security and debugging.
See User Data Deletion for how to request deletion.
6. Your rights
Depending on your jurisdiction (e.g., GDPR, CCPA/CPRA), you may request access, correction, export, restriction, objection, or deletion of your personal data. End-customers who messaged a business Page should contact that business directly; we act as a processor on the business's behalf and will assist the business in fulfilling the request.
To exercise your rights: email [email protected] or follow the steps at quotyai.com/data-deletion/.
7. Security
All traffic uses HTTPS. Page access tokens and secrets are stored encrypted. Access is restricted to authorized personnel. No method is 100% secure, but we apply industry-standard administrative, technical, and organizational safeguards.
8. Children's privacy
QuotyAI is a business tool and is not directed at children under 13 (or the minimum age in your jurisdiction). We do not knowingly collect personal information from children.
9. International transfers
Data may be processed in the country where our infrastructure operates. Where required, we use appropriate safeguards such as Standard Contractual Clauses.
10. Changes to this policy
We will update the "Last updated" date above and, for material changes, provide notice via the website or email before they take effect.
11. Contact
Privacy: [email protected]
Support: quotyai.com/support/
Terms: quotyai.com/terms-of-service/