Privacy Policy

1. What we collect

When you create an account, we collect your email address and authentication credentials. When you use the service, we store the content you provide to train your chatbot (text, uploaded documents, or scraped website content) and the conversation history generated by your chatbot's visitors.

If you connect Facebook Messenger or Instagram, we additionally collect and store: the Page or Instagram account you connect and the access token needed to send replies on your behalf, and, for each conversation, the sender's platform user ID and the content of the messages exchanged. This is what lets your chatbot read and answer messages sent to your Page or Instagram account.

2. How we use your data

Your content is converted into embeddings and used solely to answer questions asked through your chatbot. Conversation logs — including those from Messenger and Instagram — are shown back to you in your dashboard so you can review what your visitors are asking. We do not sell your data or your visitors' conversation data to third parties.

3. Third-party processors

We rely on the following services to operate: Supabase (database, authentication), Voyage AI (text embeddings), an AI model provider (currently Google Gemini) to generate chatbot answers, and Meta (Facebook Messenger and Instagram) to deliver and receive messages for the channels you choose to connect. Content you submit for training, and questions asked by your visitors — on your website or through a connected Messenger/Instagram account — are sent to these providers solely to process your request.

4. Cookies

We use a session cookie to keep you logged into your dashboard. We do not use tracking or advertising cookies.

5. Data retention and deletion

We retain your account data and chatbot content for as long as your account is active. You can request deletion of your account and all associated data at any time by contacting us.

Conversation history (including Messenger and Instagram messages) is kept for up to 90 days and automatically deleted after that. If you disconnect Facebook Messenger or Instagram, we immediately delete the stored access token for that account — reconnecting requires re-authorizing from scratch.

If someone messages a connected Messenger or Instagram account and then deletes that message on the platform itself, we automatically delete our stored copy of it. Anyone who has messaged a chatbot through Messenger or Instagram can also request deletion of their conversation history before the 90-day window by contacting us with the account they messaged and roughly when — see Contact below.

6. Contact

Questions about this policy, or requests to delete your data (including data collected via a connected Facebook Messenger or Instagram account), can be sent to support@thebrainsite.com. If you have an account, you can also reach us from the Contact page in your dashboard.