1. What data we collect
- Account: your name, phone number, email address and profile picture, as provided by Auth.mn.
- Channels: the ID, name, profile picture and access token of each connected Facebook Page or Instagram account (access tokens are stored encrypted).
- Contacts: the Page-scoped ID (PSID), name and profile picture of people who interact with your Page; the messages and comments they send to your Page and the buttons they tap; and any tags and fields you assign to them.
- Payments: QPay invoice number, amount and status. BotX does not store any card details.
2. How we use your data
We use this data solely to operate your brand's services, including automated replies (Flows), the AI assistant, the live chat Inbox, Broadcasts, analytics and billing based on monthly active contacts. We never sell contact data for advertising, and we do not share it with third parties.
3. Third-party services
- Meta Platforms (Messenger and Instagram APIs) — to receive and send messages.
- Anthropic (Claude API) — to generate the AI assistant's replies; only the text of the relevant conversation and your knowledge base are shared.
- Auth.mn — authentication. QPay — payments.
4. Storage and security
Data is stored on MongoDB Atlas over encrypted connections. Page access tokens are encrypted with AES-256-GCM. Every webhook request is verified with Meta's signature. When a brand is deleted, all associated data is deleted within 30 days.
5. Your rights
You have the right to access, correct and delete your own data and your contacts' data. To request deletion, follow the instructions on our Data Deletion page.
6. Contact us
CloudHub LLC · togtokh.dev@gmail.com · botx.mn