1. Introduction
Welcome to 1bi0 Technologies LLP ("Company", "we", "our", "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform and services.
2. Information We Collect
We collect information that you provide directly to us, as well as information automatically collected when you use our services.
Personal Information
- Name, email address, and contact details
- Account credentials and authentication data
- Billing information and payment details
- Business information and company details
- Communication preferences
Automatically Collected Information
- Device information (browser type, operating system)
- IP address and location data
- Usage data and interaction patterns
- Cookies and similar tracking technologies
Messaging & Integration Data
- WhatsApp Business messages (sent and received), including text, images, videos, documents, and other media
- Instagram Direct Messages (sent and received) and comment data
- WhatsApp and Instagram contact information (phone numbers, usernames, profile names)
- Conversation metadata (timestamps, read receipts, delivery status)
- WhatsApp Business profile information (business name, description, address, website)
- Message templates and their approval status
- Meta/Facebook account identifiers and API access tokens (stored encrypted)
- Webhook event data from Meta platforms
AI & Search Data
- Queries and prompts you submit to AI-powered search and chat features on 1bi0.ai
- AI conversation history (questions asked and responses generated)
- Business data indexed for AI search (product listings, course catalogs, service descriptions, and other publicly shared business information)
- AI usage analytics (query frequency, response ratings, feature usage patterns)
- Embedding vectors generated from your business content for search functionality
3. How We Use Your Information
- To provide, maintain, and improve our services
- To process transactions and send related information
- To send administrative messages, updates, and security alerts
- To respond to your comments, questions, and support requests
- To personalize and improve your experience
- To monitor and analyze usage trends and preferences
- To detect, prevent, and address technical issues and fraud
- To comply with legal obligations
- To send and receive WhatsApp and Instagram messages on your behalf
- To manage your WhatsApp Business profile and message templates
- To process and store messaging conversations for your business records
- To power AI-driven search and chatbot features using your business data
- To generate AI responses to customer queries about your products, services, and courses
- To create and maintain search indexes and vector embeddings for intelligent content discovery
- To improve AI response quality through anonymized usage analytics
4. Messaging Platform Integrations
Our platform integrates with third-party messaging services provided by Meta Platforms, Inc. ("Meta"). When you connect your WhatsApp Business or Instagram account, the following applies:
WhatsApp Business Platform
- When you connect WhatsApp via our platform, we use Meta's WhatsApp Business API (Cloud API) to send and receive messages on your behalf.
- We store your WhatsApp Business Account (WABA) credentials, phone number identifiers, and API access tokens. Access tokens are encrypted at rest using AES-256-GCM encryption.
- All messages you send and receive through WhatsApp are stored in our database to provide conversation history, contact management, and business analytics.
- Message content (text, media URLs, location data, contact cards) is stored on our servers. Media files are referenced by Meta-hosted URLs and are not separately downloaded or stored by us.
- WhatsApp messaging is subject to Meta's WhatsApp Business Policy (https://www.whatsapp.com/legal/business-policy) and WhatsApp Commerce Policy. You are responsible for compliance with these policies.
- Meta charges conversation-based fees for WhatsApp Business messaging. These charges are billed directly by Meta to your Meta Business account, not by 1bi0.
Instagram Messaging
- When you connect Instagram via our platform, we use Meta's Instagram Graph API to send and receive Direct Messages on your behalf.
- We store your Instagram account identifiers, page tokens, and API access tokens. All tokens are encrypted at rest.
- Instagram Direct Messages and conversation history are stored in our database.
- Instagram messaging is subject to Meta's Platform Terms (https://developers.facebook.com/terms) and Instagram Platform Policy.
Data Shared with Meta
- Message content and recipient information when you send messages through WhatsApp or Instagram.
- Your business profile information when setting up or updating your WhatsApp Business profile.
- Phone number verification requests during WhatsApp onboarding.
- Meta processes this data according to their Privacy Policy (https://www.facebook.com/privacy/policy). We encourage you to review Meta's policies.
Facebook SDK
During WhatsApp Business setup, we load the Facebook JavaScript SDK to facilitate the Embedded Signup process. This SDK may set cookies on your device and is subject to Meta's Cookie Policy. The SDK is only loaded when you initiate the WhatsApp connection process.
5. Artificial Intelligence (AI) Features
Our platform includes AI-powered features such as intelligent search (1bi0.ai), per-business AI chatbots, and automated customer support across WhatsApp and Instagram. The following explains how AI processes your data:
AI Data Processing
- All AI processing occurs on our own servers hosted in India. We use self-hosted, open-source AI models. Your data is NEVER sent to external AI providers such as OpenAI, Google, or any third-party AI service for processing.
- Business data you add to the platform (products, courses, services, contact information) may be indexed and used to generate AI responses for your customers.
- AI chat conversations are stored to provide conversation history and improve response accuracy.
- Vector embeddings (mathematical representations of your content) are generated and stored to enable intelligent search functionality.
1bi0.ai Search Portal
- The 1bi0.ai search portal allows end users to discover businesses, products, courses, and services across all tenants on our platform.
- Only business information that tenants have chosen to make publicly available is included in search results.
- Search queries submitted by end users are processed by our self-hosted AI models and are not shared with third parties.
- Search query data may be retained in anonymized form to improve search relevance and AI response quality.
Per-Business AI Chatbots
- Each business on our platform may have an AI chatbot accessible at their subdomain (e.g., yourbusiness.1bi0.ai) and integrated into their website, WhatsApp, and Instagram channels.
- These chatbots use the business's own data (products, services, courses, FAQs) to generate contextual responses.
- Conversations with AI chatbots are stored and accessible to the respective business owner for quality monitoring and customer service purposes.
- AI chatbot responses are generated automatically and may not always be accurate. They are provided for informational purposes only.
Premium AI Services
- We may offer premium AI features that utilize third-party AI models (such as Claude by Anthropic or GPT by OpenAI) for enhanced response quality.
- If you opt into premium AI features, your queries may be processed by these third-party providers subject to their respective privacy policies.
- Premium AI features are clearly labeled, and you will be informed before any data is sent to external AI providers.
- You can choose to use only self-hosted AI models at any time by not subscribing to premium AI features.
AI Model Training
We do NOT use your personal data or business data to train or fine-tune AI models. Your data is only used at inference time (when generating responses to queries) and is not incorporated into the AI models themselves. The AI models we use are pre-trained open-source models that remain unchanged by your data.
6. Information Sharing and Disclosure
We do not sell your personal information. We may share your information in the following situations:
Service Providers
We may share information with third-party vendors and service providers who perform services on our behalf, such as payment processing, data analysis, email delivery, customer service, and messaging platform integrations (Meta Platforms, Inc. for WhatsApp and Instagram).
Legal Requirements
We may disclose information if required by law, regulation, legal process, or governmental request, or to protect the rights, property, and safety of our company, users, or others.
Business Transfers
In connection with any merger, acquisition, or sale of company assets, your information may be transferred as part of that transaction.
7. Data Security
We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:
Security Measures
- AES-256-GCM encryption for sensitive API tokens and credentials at rest
- HMAC-SHA256 signature verification for all incoming Meta webhook events
- Encrypted connections (TLS/SSL) for all data in transit
- Role-based access controls and multi-tenant data isolation
- Regular security assessments and monitoring
Security Disclaimer
No method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security. If you become aware of any security breach, please notify us immediately at support@1bi0.com.
8. Data Retention
We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.
Messaging Data Retention
- WhatsApp and Instagram messages are retained for as long as your account is active and connected.
- Conversation history is preserved to provide continuity of your business communications.
- When you disconnect a messaging account, your message history is preserved but no new messages are sent or received.
- Upon account deletion or data deletion request (including requests from Meta), all associated messaging data (messages, conversations, contacts, templates) is permanently deleted.
- After subscription cancellation, messaging data is retained for 30 days before permanent deletion.
AI Data Retention
- AI conversation history is retained for as long as your account is active.
- Search queries on 1bi0.ai are retained in anonymized form for up to 12 months.
- Vector embeddings are automatically deleted when the source content is removed or the account is deactivated.
- Upon account deletion, all AI-related data (conversations, embeddings, knowledge base entries) is permanently deleted within 30 days.
General Data Retention
When we no longer need your information, we will securely delete or anonymize it. Account data is retained for as long as your account is active.
9. Your Rights and Choices
- Access and review your personal information
- Request correction of inaccurate data
- Request deletion of your data (subject to legal requirements)
- Opt-out of marketing communications
- Withdraw consent where processing is based on consent
- Request data portability
- Lodge a complaint with a supervisory authority
- Disconnect third-party integrations (WhatsApp, Instagram) at any time from your account settings
- Request deletion of messaging data through Meta's data deletion process or directly through our platform
- Request deletion of AI conversation history and associated data
- Opt out of AI-powered features and request removal of your business data from AI search indexes
10. Meta Platform Data Deletion
If you revoke our app's access to your Facebook/Meta account, or request data deletion through Facebook:
Data Deletion Process
- Meta will notify us via a secure callback when you request data deletion.
- We verify the request using cryptographic signature validation (HMAC-SHA256).
- All data associated with your Meta account is permanently deleted from our systems, including: messaging accounts, messages, conversations, contacts, templates, and stored tokens.
- You will receive a confirmation code and URL to verify the deletion status.
- Deletion is typically completed within 24 hours of receiving the request.
App Deauthorization
If you deauthorize our app from your Facebook/Meta settings, we immediately revoke all stored access tokens and disconnect your messaging accounts. Your message history is preserved but the account is marked as disconnected. To fully delete messaging data, you can request data deletion through Facebook or contact us directly.
11. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to collect and track information about your activities on our platform. During WhatsApp Business setup, the Facebook JavaScript SDK may set additional cookies. You can control cookies through your browser settings. For more information, please see our Cookie Policy.
12. Third-Party Links and Services
Our platform integrates with and may contain links to third-party services, including Meta Platforms (WhatsApp, Instagram, Facebook). These integrations are governed by the respective third-party's terms and privacy policies. We encourage you to review them:
Key Third-Party Policies
- Meta Privacy Policy: https://www.facebook.com/privacy/policy
- WhatsApp Business Policy: https://www.whatsapp.com/legal/business-policy
- WhatsApp Commerce Policy: https://www.whatsapp.com/legal/commerce-policy
- Instagram Platform Policy: https://developers.facebook.com/terms
- Razorpay Privacy Policy: https://razorpay.com/privacy
- Anthropic (Claude AI) Privacy Policy: https://www.anthropic.com/privacy (applicable only if you use Premium AI features)
- OpenAI Privacy Policy: https://openai.com/privacy (applicable only if you use Premium AI features)
13. Children's Privacy
Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child, we will take steps to delete such information.
14. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. This includes data processed by Meta Platforms, Inc. (headquartered in the United States) for WhatsApp and Instagram services. If you opt into Premium AI features, your queries may be processed by AI providers headquartered outside India. Core AI features use self-hosted models with all processing occurring on servers in India. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable laws.
15. Changes to This Policy
We may update this Privacy Policy from time to time, particularly when we add new integrations or features. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. Your continued use of our services after any changes indicates your acceptance of the updated policy.
16. Contact Us
If you have any questions about this Privacy Policy, our privacy practices, data handling for messaging integrations, or AI features, please contact us at: 1bi0 Technologies LLP, Email: support@1bi0.com
Questions about this policy? Contact us at support@1bi0.com