Data Collection & Usage

1. Overview

This document explains in detail what data OT1-Pro collects, why we collect it, and how we use it. It supplements our Privacy Policy and Terms of Service. For any questions, contact [email protected].

2. Data We Collect

2.1 Account & Authentication Data

When you create an account or sign in, we collect:

• Name and email address
• Password hash (we never store plaintext passwords)
• OAuth provider tokens if you sign in via Google (Google profile name, email)
• IP address and user agent at time of registration/login

2.2 Connected Platform Data

When you connect a social media account (Facebook, Instagram, WhatsApp, Telegram, TikTok, Email), we collect:

• OAuth access tokens and refresh tokens (encrypted at rest)
• Page/account name, ID, profile picture, and metadata from the platform
• Incoming messages, conversation threads, and sender metadata (name, ID, avatar)
• Message timestamps, read status, delivery receipts
• Contact profiles and conversation history

We only request the minimum permissions required for inbox functionality. See our Privacy Policy for platform-specific permission details.

2.3 Usage & Analytics Data

We automatically collect:

• Browser type, operating system, device information
• IP address (for security and fraud prevention)
• Pages visited, features used, actions performed within the app
• Session duration and login frequency

2.4 AI Interaction Data

When AI features are enabled:

• Message content sent to AI providers (Anthropic Claude, etc.) for reply generation
• AI-generated response content
• Lead scores and qualification data generated by AI
• Voice note audio sent to transcription provider (Groq) when voice-note handling is enabled

AI providers do not retain or train on your content per their data processing agreements.

2.5 Billing & Payment Data

Handled by our payment processor Paddle:

• Name, email, billing address
• Payment method details (card, bank transfer — handled entirely by Paddle)
• Subscription plan, billing history, invoices

3. Why We Collect This Data

• Service Delivery: To fetch, display, and send messages across connected platforms
• AI Features: To generate reply suggestions, auto-responses, lead scoring, and transcription
• Analytics: To show conversation volume, response times, team performance
• Security: To detect fraud, unauthorized access, and abuse
• Compliance: To meet legal obligations and platform policy requirements
• Improvement: To develop new features and optimize performance
• Communication: To send transactional emails (password resets, billing, critical updates)

4. Data Sharing

We share data only as follows:

• Platform APIs: With Meta, Telegram, TikTok, email servers — only to provide inbox functionality
• AI Providers: Message content to Anthropic Claude for AI replies — opt-in, can be disabled
• Payment Processor: Billing data to Paddle (Merchant of Record) — we never see card details
• Infrastructure: Cloud providers under data processing agreements
• Legal: When required by law, court order, or to protect rights/safety

We do not sell, rent, or trade your data or your customers' data to any third party for marketing purposes.

5. Data Retention

Account data: retained while account is active.

Conversation data: retained indefinitely for inbox history, but you can delete individual conversations or your entire account at any time.

OAuth tokens: deleted immediately when you disconnect a platform.

Message history: retained up to 30 days after account/platform deletion before permanent removal.

6. Your Rights

You have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request deletion of your data ("right to be forgotten")
• Export your data in machine-readable format
• Object to processing for certain purposes
• Withdraw consent by disconnecting platforms at any time

To exercise these rights, email [email protected]. We respond within 30 days.

7. Meta Data Deletion Callback

If you connected via Facebook/Instagram and want all data removed, you can:

• Use Facebook's Data Deletion Request at Facebook \u2192 Settings \u2192 Apps & Websites
• Email us at [email protected] with subject "Data Deletion Request"

This triggers our Meta Data Deletion Callback endpoint, which removes the connected account, contact profile, conversations, messages, and lead score events linked to your Facebook/Instagram identifier within 30 days.

8. Cookies

We use only essential session cookies to maintain authentication. No advertising, tracking, or third-party analytics cookies.

9. Contact

For questions about data collection: