Privacy Policy

We collect information necessary to provide and improve our platform:

• Business account data — name, email, phone, and business details provided during onboarding.
• Customer data — name, email, phone number, and preferences shared during conversations.
• Conversation messages — message content between customers and the automated system on Facebook Messenger and Instagram.
• Usage data — aggregated platform usage information to improve the service.

Your information is used to:

• Provide the booking and customer communication service.
• Process conversations and respond to customer inquiries on behalf of the connected business.
• Send notifications including booking confirmations, reminders, and updates.
• Improve the platform and develop new features.
• Ensure the security and integrity of the service.

hapsay uses automated systems to process customer messages and generate responses on Facebook Messenger and Instagram. When customers interact with a business through these channels:

• Messages are processed by third-party service providers to generate automated responses.
• Messages are transmitted securely and solely for the purpose of generating a response on behalf of the business.
• We do not use customer conversation data to train models or for any purpose beyond providing the service.
• Automated responses are assistive in nature — businesses are responsible for verifying the accuracy of booking information.

hapsay is operated by DorellWorks Software Development Services (Philippines), the data controller for personal data processed through the service. We rely on the following sub-processors to deliver the platform:

• Messaging platforms — Meta Platforms, Inc. (Facebook Messenger and Instagram) for customer communication.
• AI message processing — OpenAI, L.L.C. (United States) processes the conversation content needed to generate automated replies. We do not allow OpenAI to use this data to train its models.
• Email delivery — Zoho Corporation Pvt. Ltd. (Zeptomail; India and United States) sends booking confirmations, reminders, and account notifications.
• Hosting and infrastructure — Hetzner Online GmbH (Germany) hosts our application servers and PostgreSQL database.
• Error monitoring — Functional Software, Inc. (Sentry; United States) collects application error reports and performance traces. Error payloads may incidentally include user identifiers but never raw conversation content.

Each sub-processor operates under its own privacy policy (OpenAI, Zoho, Hetzner, Sentry). We only share the minimum data necessary for each service to function. All integrations comply with Meta Platform Policies.

hapsayaccesses Facebook and Instagram data through Meta’s platform APIs. We handle this data in accordance with Meta Platform Policies:

• We only access data that is necessary to provide the service (responding to messages, managing conversations).
• We do not sell, license, or otherwise transfer Meta platform data to any third party.
• We do not use Meta platform data for advertising, analytics, or any purpose beyond providing the service.
• Businesses may request deletion of all Meta platform data at any time.

• Conversation sessions expire automatically after 24 hours of inactivity.
• Booking data is retained for as long as the business account remains active.
• Account data is retained until the business requests deletion or terminates the service.

We implement appropriate security measures to protect your data:

• All data is encrypted in transit using TLS.
• Access controls ensure that business data is isolated per tenant — each business can only access its own data.
• Database-level constraints prevent unauthorized cross-tenant data access.
• Authentication is managed through secure session-based access.

You have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Delete your data, subject to legal retention requirements.
• Export your data in a portable format.

To exercise these rights, contact us at [email protected].

We use minimal cookies necessary for the service to function, such as maintaining login sessions and remembering user settings. We do not use third-party advertising or tracking cookies.

We may update this Privacy Policy from time to time. When we make significant changes, we will notify affected users via email or through an in-platform notice. Continued use of the service after changes constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy or our data practices, contact us at:

[email protected]