Privacy Policy

1What Data We Collect

To operate the Bartabox inbox management and sales assistance tool, we collect the following types of information:

• Account Information: Name, business email, password, and registered phone number.
• Business Details: Business name, address, website link, and delivery configurations.
• Connected Channel Data: Official Facebook Page IDs, WhatsApp Business Account IDs, phone number IDs, and system-level metadata.
• Customer Messages: Text, media, and metadata from inbound conversations initiated by customers.
• Customer Contact & Order Details: Buyer names, phone numbers, delivery addresses, and cart details extracted during order drafts.
• Product Catalog Info: Item names, pricing, and stock details configured for reply matching.
• System & Usage Logs: Logs tracking system actions, response latency, and AI suggestion activity.

2Why We Collect Data

We process information for the following business purposes:

• Providing the unified multi-channel messaging inbox dashboard.
• Providing artificial intelligence (AI) reply drafts based on your configuration.
• Allowing team members to search history, assign threads, and track responses.
• Generating order cards and delivery drafts to streamline checkout processes.
• Detecting, preventing, and auditing security issues or platform rule compliance.
• Improving reply performance and correcting suggestions.

3AI Processing of Customer Messages

Bartabox acts as a processor for customer messages. To generate response drafts, summarize conversations, and parse order details (such as names and addresses), message contents may be processed by AI model APIs.

These models process data strictly to fulfill request instructions (e.g. drafting a reply or summarizing an address) and are bound by privacy restrictions. They do not retain or use your customers’ messaging history to train global models.

4Data Sharing & Disclosures

We prioritize the confidentiality of your customer logs:

• We do not sell customer data. Your store logs, client profiles, and messages are never sold or rented.
• Infrastructure Providers: Data is shared only with hosting infrastructure, secure database providers, and standard communication channels (e.g. Meta Graph API) to perform basic routing.
• Regulatory Compliance: We may share data if required to comply with applicable laws, platform rules, or a verified governmental request.

5Data Retention & Deletion

Your store details and customer lists are retained for as long as your Bartabox account is active and in good standing. You can request deletion of your store details, profiles, and historical logs at any time.

Please visit our dedicated Data Deletion Request Page for instructions on how to purge your business record from our databases.

6Security Measures

We implement industry-standard organizational and physical safeguards:

• All information transmitted between your browser and our servers is secured using SSL/TLS encryption.
• We enforce access control to limit employee access to server configurations.
• Third-party platform API credentials are encrypted at rest.

7Contact Information

If you have any questions or security concerns regarding this policy, please reach out to us at: