Privacy Policy

1.1 Information provided by the user:

• Registration Information: Name, email address, phone number, and other information relevant to creating your account.
• Payment information: Data required to process payments, such as credit/debit card or billing information.
• Contact information: Information entered into contact or support forms.

1.2 Information collected automatically:

• Usage Data: Information about your activity on our platform, such as pages visited, browsing time, and interaction patterns.
• IP address and device data: Including device type, operating system, web browser, and approximate location.
• Cookies: We collect information through cookies to enhance your experience. For more details, see our Cookie Policy.

1.3 Meta Ads & Pages Data (Facebook)

When you connect your Meta (Facebook) account to ASIO, we collect and process the following data from Meta's APIs:

• Profile information (name, email, public profile)
• List of Pages you administer and basic Page metadata (name, category, profile information)
• Ad accounts you have access to, ad spend, and campaign performance data
• Campaigns, Ad Sets, Ads, and Creatives created on your behalf by ASIO
• Lead Form submissions delivered via Meta's Webhooks (leadgen field), including the field data the lead provided (name, email, phone, custom answers)
• Page access tokens used to subscribe Pages to lead notifications

How we use Meta data: solely to operate the AI Campaign Agent — generating tailored ad creative, publishing campaigns to your ad account, subscribing your Page to lead notifications, and ingesting leads into your ASIO CRM.

Retention: Meta-derived data is retained while your account is active. Upon disconnection or account deletion, we revoke our access tokens within 24 hours and delete cached Meta data within 30 days.

Deletion: you can disconnect Meta at any time via Settings → Integrations → Disconnect, which immediately revokes our tokens. To request full data deletion, email dev@asiomarketing.com.

No resale: ASIO does not sell, rent, or share Meta data with third parties beyond the sub-processors required to operate the service (AWS for hosting/storage, Stripe for payments, AI model providers for creative generation).

1.4 WhatsApp Business Data

When you connect a WhatsApp Business Account (WABA) to ASIO, we collect and process the following data through Meta's WhatsApp Business Cloud API:

• WhatsApp Business Account identifier and metadata (business name, business profile)
• Phone numbers registered in the WABA
• Approved message templates (name, language, category, content)
• Messages sent through ASIO on behalf of the business customer
• Message delivery statuses (sent, delivered, read, failed)
• Inbound messages from end customers (via webhook) when the business customer enables the inbox feature
• Conversation metadata (timestamps, participants)

How we use WhatsApp data: solely to operate the ASIO platform — sending approved template messages on behalf of business customers, tracking delivery statuses, displaying messages in the unified inbox, scheduling automations, and providing analytics. When the business customer enables AI-powered automated replies, the end user's message content may be processed by AI model providers (for example, OpenAI, Anthropic, Google) solely for the purpose of generating a response. These providers do not use the data to train their models.

Retention: WhatsApp message data is retained while the business customer's account is active. Upon disconnection or account deletion, we revoke access tokens within 24 hours and delete cached WhatsApp data within 30 days.

Deletion: business customers can disconnect WhatsApp at any time via Settings → Integrations → Disconnect, which immediately revokes our tokens. To request full data deletion, email dev@asiomarketing.com.

No resale: ASIO does not sell, rent, or share WhatsApp data with third parties beyond the sub-processors required to operate the service (AWS for hosting/storage, AI model providers for automated replies when the business customer enables them).

End-user consent: Business customers are responsible for obtaining the express and informed consent of their end customers before initiating WhatsApp conversations. ASIO does not initiate messages to end users without the business customer's authorization.

1.5 Google Workspace Data

When you connect your Google account to the ASIO Dashboard, we access the following data through Google Workspace APIs (Google Calendar and Google Sheets):

• Basic Google account profile (name and email address) obtained during sign-in
• Google Calendar calendars and events (titles, dates, times, attendees, and descriptions) for the calendars you authorize
• Google Sheets spreadsheets you authorize, including the cell data ASIO reads or writes (for example, lead and campaign records)
• OAuth access and refresh tokens used to call the Google Calendar and Google Sheets APIs on your behalf

How we use Google data: solely to operate the ASIO Dashboard — creating and syncing appointments and events on the Google Calendars you connect, and reading from and writing to the Google Sheets you authorize (for example, syncing leads and campaign data). We do not use Google Workspace data for advertising, and we do not use it to develop, improve, or train generalized AI/ML models.

Limited Use: ASIO Dashboard's use and transfer of any information received from Google Workspace APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google API Services User Data Policy

Retention: Google-derived data is retained while your account is active. Upon disconnection or account deletion, we revoke our access tokens within 24 hours and delete cached Google data within 30 days.

Deletion: you can disconnect Google at any time via Settings → Integrations → Disconnect, which immediately revokes our tokens. You can also revoke ASIO's access directly from your Google Account at https://myaccount.google.com/permissions. To request full data deletion, email dev@asiomarketing.com.

No resale: ASIO does not sell or rent Google Workspace data. We do not transfer it to third parties except: with your consent, where necessary to provide or improve the ASIO Dashboard; to service providers that process it on our behalf under obligations consistent with this policy (for example, AWS for hosting and storage); to comply with applicable law; or as part of a merger or acquisition, after obtaining your explicit prior consent. These transfers adhere to the Limited Use requirements.

1.6 Messenger & Instagram Data

When you connect your Facebook Pages and/or Instagram professional accounts to ASIO to use the messaging inbox and automations, we collect and process the following data through Meta's Messenger Platform and Instagram Messaging API:

• Identifiers and metadata of the connected Facebook Pages and Instagram professional accounts (name, username, profile picture, category)
• Page access tokens used to subscribe the Pages and Instagram accounts to message notifications (webhooks)
• Messenger and Instagram Direct messages sent and received through ASIO, including their content (text, images, attachments and replies)
• End-user information for people who message the business (page/app-scoped identifier — PSID/IGSID —, name and profile picture as provided by the API), needed to display and reply to the conversation
• Message delivery and read states
• Conversation metadata (timestamps, participants, source channel)

How we use Messenger and Instagram data: solely to operate the ASIO platform — display messages in a unified inbox, send and reply to messages on behalf of the business customer, run automations and flows (for example, keyword replies or sequences) and provide analytics. When the business customer enables AI auto-replies, the end user's message content may be processed by AI model providers (for example, OpenAI, Anthropic, Google) solely to generate a reply. These providers do not use the data to train their models.

Retention: Messenger and Instagram message data is retained while the business customer's account is active. Upon disconnection or account deletion, we revoke the access tokens within 24 hours and delete cached data within 30 days.

Deletion: business customers can disconnect Facebook/Instagram at any time from Settings → Integrations → Disconnect, which revokes our tokens immediately. To request full data deletion, write to dev@asiomarketing.com.

No resale: ASIO does not sell, rent or share Messenger or Instagram data with third parties beyond the sub-processors necessary to operate the service (AWS for hosting/storage, AI model providers for auto-replies when the business customer enables them).

End-user consent: Business customers are responsible for obtaining the necessary consent and complying with Meta's Platform Policies before messaging end users. ASIO respects Meta's messaging windows and policies (for example, Messenger's 24-hour window).