Privacy Policy

This policy explains how Empire Marketing ("we", "us") handles information in two situations: (1) when you message a Facebook Page or Instagram account that uses our AI messaging assistant, and (2) when a business ("Client") signs up for and uses our messaging assistant platform (the "Service").

1. Information we collect

From people who message a Client's Page ("customers"):

• Your name and Meta-scoped user ID, as provided by Meta's messaging platforms
• The messages you send and the replies sent to you
• Details you choose to share in the chat, such as contact details, a shop link or service interest
• Which advertisement or lead form led you to message the Page, where Meta provides this

From Clients:

• Account details: name, email address and business name
• Facebook Page identifiers and access tokens that you authorise when you connect a Page. Tokens are stored encrypted
• Content you enter into the dashboard, such as services, pricing and FAQs
• Billing details handled by our payment processor. We do not store full card numbers

2. How we use information

• To receive customer messages on a Client's Page and send replies on the Client's behalf
• To show Clients their conversations and leads, and let them take over a chat
• To operate, secure and improve the Service, and to provide support
• To process subscriptions and billing

We use customer message data only to provide the Service to the Client whose Page you messaged. We do not sell it, use it for advertising, or use it to build profiles for other purposes.

3. Automated replies and AI processing

Replies may be generated automatically by an AI model. To do this, the conversation text and the Client's business information are sent to OpenAI's API for processing. We do not permit OpenAI to use this data to train its models under the API terms we operate under. A Client or its staff can review and take over any conversation.

4. Meta platform data

We access Meta platform data only through permissions a Client grants when connecting a Page, and only to send and receive messages for that Page. We handle it in line with Meta's Platform Terms. A Client can disconnect a Page at any time in the dashboard or from Facebook's Business Integrations settings, which stops our access.

5. Sharing

We share information only with: the Client whose Page you messaged; service providers that help us run the Service (cloud hosting and database, AI processing, payments, email); and authorities when legally required. We do not sell personal information.

6. Storage, security and retention

Data is stored on cloud infrastructure and access is restricted to authorised people. Access tokens are encrypted. We keep conversation data for as long as the Client's account is active, and delete it within 30 days after the Client closes its account or asks us to delete it, unless the law requires us to keep it.

7. Your rights and choices

You may ask us to access, correct or delete personal information we hold about you. To delete the data connected to your Meta account, see our data deletion page. You can stop receiving messages at any time by blocking the Page through Meta's controls. Where Thai law (PDPA) or other applicable law gives you further rights, we will honour them.

8. Children

The Service is not directed at children under 13 and we do not knowingly collect their information.

9. International transfers

Our providers may process data outside Thailand. We take reasonable steps to ensure it is protected.

10. Changes

We may update this policy and will post the new date at the top of this page.

11. Contact

Empire Marketing ([LEGAL ENTITY NAME]), [REGISTERED ADDRESS], Bangkok, Thailand
Email: [email protected]