Privacy Policy for BOBR AI

Version: July 13, 2026. This page is publicly available without login and applies to BOBR AI, including the web dashboard, website, integrations, and support channels.

1. Data controller and contact information

2. What BOBR AI does

BOBR AI is a SaaS customer communication platform for businesses. Business users connect their own communication channels, including Meta Page Messenger and Instagram Business messaging, so they can receive customer messages, answer them from one inbox, and use configured AI assistant workflows.

3. Meta Platform Data we process

When a business user connects a Facebook Page or Instagram Business account through Meta Login, we may receive and process only the data needed for the connected feature and only for assets the user explicitly authorizes.

• Facebook Page identifiers, names, access tokens, webhook subscription status, and the list of Pages available to the authorized business user.
• Instagram Business account identifiers and username/profile metadata needed to display and route the connected account.
• Messenger and Instagram Direct conversation identifiers, sender/recipient identifiers, message text, attachments, timestamps, delivery metadata, and reply status.
• Technical logs required for security, diagnostics, delivery troubleshooting, fraud prevention, and audit of the user's own connected integration.

4. Requested Meta permissions and purposes

• pages_show_list: to show the business user the Pages they administer and let them choose which Page to connect.
• pages_manage_metadata: to subscribe the selected Page to required webhooks and maintain messaging integration settings.
• pages_messaging: to receive and send Messenger messages for the selected Page in the context of customer support conversations.
• instagram_basic: to identify and display the connected Instagram Business account and route its messages correctly.
• instagram_manage_messages: to receive and send Instagram Direct messages for the connected Instagram Business account in the BOBR AI inbox.

5. How we use Meta data

We use Meta Platform Data only to provide the connected messaging functionality requested by the business user: account connection, message delivery, customer support workflows, AI assistant replies configured by the business, manual operator replies, routing, diagnostics, and security.

We do not sell Meta Platform Data. We do not use Meta Platform Data to build advertising audiences for third parties. We do not expose one customer's connected assets or conversations to another customer.

6. Legal basis and roles

For business users and their representatives, we process data to perform the service agreement, protect accounts, provide support, and comply with applicable law. For conversations and customer data imported through a customer's connected channels, the business customer is generally the controller of its own customer data, and BOBR AI processes that data as a service provider/processor according to the customer's instructions and this Policy.

7. Data sharing and processors

Data may be processed by infrastructure providers, hosting providers, database and storage services, email/support tools, AI model providers selected for message generation, payment providers for billing, and communication platforms connected by the user. Access is limited to what is needed to provide, secure, and troubleshoot the service.

8. Storage and retention

We retain account and integration data while the customer account or connected integration is active. Message history and logs are retained according to the customer's settings, tariff, operational needs, legal requirements, and reasonable limitation periods. When an integration is disconnected or an account is deleted, we delete or anonymize related data unless continued retention is required by law, security, billing, dispute resolution, or abuse prevention.

9. Security

We use access controls, authentication, encrypted transport, logging, backup, segregation of customer accounts, monitoring, and operational security practices designed to protect personal data and Meta Platform Data. No system can be guaranteed to be completely secure, but we take reasonable technical and organizational measures appropriate to the risk.

10. User rights and data deletion

Users may request access, correction, deletion, restriction, or export of their personal data where applicable. To request deletion of Meta Platform Data or BOBR AI account data, email bobr.agency@gmail.com with the subject "Data deletion request" and include the account email and connected Page/Instagram account details if relevant.

We also provide a public data deletion instruction page: https://landing.bobr-service.ru/data-deletion.html.

11. International transfers

BOBR AI may use infrastructure and service providers located in different countries. Where required, we use contractual and organizational safeguards to protect transferred data and limit processing to the purposes described in this Policy.

12. Cookies and technical data

We use necessary cookies and similar technologies for login sessions, security, preferences, and service operation. Optional analytics may be used only where permitted and for aggregated product reliability and improvement.

13. Changes to this Policy

We may update this Policy when the product, integrations, legal requirements, or security practices change. The current version is always available on this public URL.

Русская версия

1. Оператор и область действия

Оператором персональных данных является Общество с ограниченной ответственностью "НЕЙРОПРОДАЖИ", ОГРН 1251600047016, ИНН 1683030137, КПП 168301001, адрес: 420500, Республика Татарстан, Верхнеуслонский район, город Иннополис, ул. Университетская, д. 5. Контакт по вопросам персональных данных и удаления данных: bobr.agency@gmail.com.

Политика применяется к платформе BOBR AI, сайту, личному кабинету, поддержке и подключаемым интеграциям, включая Facebook Page Messenger и Instagram Business messaging.

2. Какие данные Meta мы получаем

Когда пользователь бизнеса подключает свою Facebook Page или Instagram Business account через Meta Login, BOBR AI получает только данные, необходимые для выбранной функции и только по явно разрешенным пользователем активам: идентификаторы и названия страниц, идентификаторы Instagram Business account, username, токены доступа, статус webhook-подписки, идентификаторы диалогов, сообщения, вложения, временные метки, статусы доставки и технические журналы.

3. Цели обработки

Данные используются для подключения выбранного канала, приема и отправки сообщений, отображения диалогов в едином inbox, работы настроенного ИИ-ассистента, ручных ответов менеджеров, маршрутизации, диагностики, безопасности и исполнения договора с пользователем BOBR AI.

Мы не продаем данные Meta, не передаем их другим клиентам, не используем их для рекламных аудиторий третьих лиц и не используем их вне заявленного сценария работы подключенного канала.

4. Разрешения Meta

• pages_show_list — показать пользователю список страниц, которыми он управляет, чтобы он выбрал нужную страницу.
• pages_manage_metadata — настроить webhook-подписку и техническую доставку событий для выбранной страницы.
• pages_messaging — получать и отправлять сообщения Messenger от имени выбранной страницы в рамках диалога с клиентом.
• instagram_basic — определить и показать подключенный Instagram Business account.
• instagram_manage_messages — получать и отправлять Instagram Direct сообщения для подключенного бизнес-аккаунта.

5. Хранение, безопасность и удаление

Данные хранятся в течение действия учетной записи, подключенной интеграции, настроек тарифа и сроков, необходимых для работы сервиса, безопасности, расчетов, претензий и исполнения закона. После отключения интеграции или удаления аккаунта данные удаляются либо обезличиваются, если дальнейшее хранение не требуется законом, безопасностью или разрешением споров.

Для удаления данных направьте запрос на bobr.agency@gmail.com с темой "Запрос на удаление данных". Укажите email аккаунта BOBR AI и, если запрос касается Meta, подключенную Facebook Page или Instagram Business account.