Privacy Policy
Last updated: September 26, 2026
This Privacy Policy explains how Edgepoint Solutions LLC ("Edgepoint Solutions," "we," "us," or "our") collects, uses, shares, and protects information in connection with our AI messaging and appointment‑booking service (the "Service"). By using the Service, you agree to this Policy.
Who we serve. Our direct customers are businesses ("Business Clients") who use the Service to communicate with their own customers ("End Users") over Instagram and Facebook Messenger. For a Business Client's End Users, that Business Client is the controller of the conversation data, and we process it on their behalf.
1. Information We Collect
Business Client information
- Account details such as name, business name, email address, and phone number.
- Business knowledge you provide — hours, services, pricing, policies, and FAQs — used to generate accurate replies.
- Authorization tokens that let us connect to your Instagram, Facebook, Google, and Square accounts on your behalf. We never receive or store your passwords.
Data received through Meta (Instagram & Facebook)
- The content of messages sent to and from your connected Instagram and Facebook accounts.
- Basic sender identifiers (such as a scoped user ID and public profile name) needed to route and respond to a conversation.
- Message metadata such as timestamps and message IDs.
Data from connected scheduling tools
- When you connect Google Calendar or Square Appointments, we access availability and booking information solely to check openings and create appointments you request.
Technical data
- Logs, error reports, and usage metrics used to operate, secure, and improve the Service.
2. How We Use Information
- To generate, and (with your configuration) send, replies to messages your business receives.
- To check availability and book appointments on your behalf.
- To route uncertain conversations to a human for approval.
- To operate, maintain, secure, troubleshoot, and improve the Service.
- To comply with legal obligations and enforce our terms.
We do not sell personal information, and we do not use the content of messages to build advertising profiles.
3. How We Share Information
We share information only as needed to provide the Service:
- Meta Platforms, Inc. — to send and receive messages through the Instagram and Facebook messaging APIs.
- OpenAI — message content and your business knowledge are sent to our AI provider to generate reply drafts. Our provider does not use this data to train its models.
- Google and Square — when you connect those tools, to read availability and create bookings.
- Infrastructure providers — hosting, database, and logging vendors that operate the Service under confidentiality obligations.
- Legal — where required by law, regulation, legal process, or to protect rights and safety.
We may share aggregated or de‑identified information that cannot reasonably be used to identify you.
4. Data Retention
We retain conversation and account data for as long as your account is active or as needed to provide the Service. When a Business Client ends their account, we delete or de‑identify associated conversation data within 90 days, except where retention is required by law. End Users may request deletion of their data at any time (see Section 7).
5. Security
We protect information using industry‑standard measures including encryption in transit, access controls, and secret storage for access tokens. No system is perfectly secure, but we work to safeguard your data and promptly address issues.
6. Your Rights
Depending on where you live, you may have the right to access, correct, delete, or restrict processing of your personal information, and to withdraw consent. To exercise these rights, contact us at edgepointsolutionslimited@gmail.com. Because we process End User data on behalf of Business Clients, we may direct certain requests to the relevant Business Client.
7. Data Deletion
You can request deletion of your data at any time:
If you remove our app from your Facebook or Instagram settings, Meta notifies us automatically and we delete the associated data. See the Data Deletion page for details and status lookup.
8. Children's Privacy
The Service is not directed to children under 13 (or the minimum age in your jurisdiction), and we do not knowingly collect their personal information.
9. International Users
We operate in the United States. If you access the Service from outside the U.S., your information may be transferred to and processed in the U.S.
10. Changes to This Policy
We may update this Policy from time to time. We will post the updated version here and revise the "Last updated" date above.
11. Contact Us
Edgepoint Solutions LLC
Email: edgepointsolutionslimited@gmail.com