سياسة الخصوصية

1. Introduction

OT1-Pro ("we", "us", or "our") operates a unified social media inbox platform that allows businesses to manage messages from multiple social platforms in one place. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service at ot1-pro.com.

By using OT1-Pro, you agree to the collection and use of information in accordance with this policy. If you disagree with any part of this policy, please do not use our service.

2. Information We Collect

2.1 Account Information

When you create an account, we collect your name, email address, and password (hashed). If you register via Google OAuth, we receive your Google profile name and email.

2.2 Connected Platform Data

When you connect a social media account, we collect and store:

• OAuth access tokens and refresh tokens required to communicate with the platform API
• Your page/account name, ID, and profile information as returned by the platform
• Incoming messages, conversation threads, and sender metadata (name, ID, avatar) from your connected accounts
• Message timestamps, read status, and delivery receipts

Platforms currently supported: Facebook Messenger, Instagram Direct, WhatsApp Business, Telegram, TikTok Direct Messages, and Email (IMAP/SMTP).

2.3 TikTok-Specific Data

When you connect your TikTok Business account, we access the following permissions with your explicit consent:

• message.list.read — To retrieve and display incoming direct messages in your inbox
• message.list.send — To send replies to direct messages on your behalf
• message.list.manage — To manage conversation state (e.g., mark as read) within your inbox

We do not access your TikTok content, followers, analytics, videos, or any data beyond what is required for the Business Messaging inbox functionality. TikTok data is used solely to display and manage your direct messages within OT1-Pro and is never shared with or sold to third parties. You can revoke access at any time by disconnecting TikTok from your Connections settings.

2.4 Usage Data

We automatically collect certain information about how you interact with our service, including browser type, IP address, pages visited, and actions performed within the app. This data is used solely to improve service performance and reliability.

2.5 AI Interaction Data

When you use our AI-powered auto-reply feature, message content is sent to our AI provider (Google Gemini) to generate responses. No message content is stored by the AI provider beyond the immediate API call.

3. How We Use Your Information

• To provide and operate the OT1-Pro service, including fetching, displaying, and sending messages on your behalf
• To generate AI-powered reply suggestions and auto-responses when you enable that feature
• To display analytics and conversation statistics in your dashboard
• To send you transactional emails (e.g., password resets, billing receipts)
• To detect and prevent fraud, abuse, or violations of our Terms of Service
• To improve and develop new features based on usage patterns
• To comply with legal obligations

We do not sell, rent, or trade your personal data or your customers' data to any third party for marketing purposes.

4. Data Sharing & Third Parties

We share data only in the following circumstances:

• Platform APIs: Data is exchanged with Meta (Facebook, Instagram, WhatsApp), Telegram, TikTok, and email servers solely to provide the inbox functionality.
• AI Providers: Message content may be sent to Google Gemini for AI reply generation. This is opt-in and can be disabled.
• Payment Processor: Billing and payment data is handled by Paddle (paddle.com), our authorised reseller and Merchant of Record. When you subscribe, Paddle collects your payment information directly. We do not store your card details. Paddle's privacy policy applies to payment data: paddle.com/legal/privacy.
• Infrastructure Providers: We use cloud infrastructure providers (servers, databases) that process data on our behalf under data processing agreements.
• Legal Requirements: We may disclose information if required by law, court order, or to protect the rights and safety of our users.

5. Data Retention

We retain your account data for as long as your account is active. Conversation data (messages, contacts) is retained indefinitely to provide your inbox history, but you may delete individual conversations or your entire account at any time.

When you disconnect a social platform or delete your account, associated access tokens are deleted immediately. Message history may be retained for up to 30 days before permanent deletion.

6. Data Security

We implement industry-standard security measures including:

• TLS/SSL encryption for all data in transit
• Encrypted storage for OAuth tokens and credentials
• Access controls limiting data access to authorized personnel
• Regular security reviews and dependency updates

No method of transmission over the internet is 100% secure. We strive to protect your data but cannot guarantee absolute security.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate data.
• Erasure: Request deletion of your personal data ("right to be forgotten").
• Portability: Request an export of your data in a machine-readable format.
• Objection: Object to processing of your data for certain purposes.
• Withdrawal of Consent: Disconnect any social platform at any time via your Connections settings.

To exercise any of these rights, email us at privacy@ot1-pro.com. We will respond within 30 days.

7a. Data Deletion (Meta Apps)

If you connected OT1-Pro via Facebook or Instagram and want all data we hold about you removed, you have two options:

• Visit Facebook → Settings → Apps & Websites and remove OT1-Pro Business — Meta will then automatically notify our system to delete your data.
• Or email us directly at privacy@ot1-pro.com with the subject "Data Deletion Request".

Either method removes the connected account, contact profile, conversations, messages, and lead score events linked to your Facebook or Instagram identifier within 30 days. We send a confirmation page where you can verify the deletion completed.

8. Cookies

We use only essential cookies required to maintain your authenticated session. We do not use advertising cookies, cross-site tracking cookies, or analytics cookies from third-party services.

9. Children's Privacy

OT1-Pro is a business tool intended for users aged 18 and older. We do not knowingly collect personal information from individuals under 18. If we become aware that a minor has provided us data, we will delete it promptly.

10. International Data Transfers

Your data may be processed in countries outside your own. By using OT1-Pro, you consent to your data being transferred to and processed in these countries. We ensure appropriate safeguards are in place for such transfers.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by displaying a prominent notice in the app. Continued use of OT1-Pro after changes constitutes acceptance of the updated policy.

12. Contact Us

For privacy-related questions, data requests, or concerns, contact us at: