Privacy Policy

We collect information necessary to provide and improve our platform:

• Business account data — name, email, phone, and business details provided during onboarding.
• Customer data — name, email, phone number, and preferences shared during conversations.
• Conversation messages — message content between customers and the automated system on Facebook Messenger and Instagram.
• Usage data — aggregated platform usage information to improve the service.

Your information is used to:

• Provide the booking and customer communication service.
• Process conversations and respond to customer inquiries on behalf of the connected business.
• Send notifications including booking confirmations, reminders, and updates.
• Improve the platform and develop new features.
• Ensure the security and integrity of the service.

hapsay uses automated systems to process customer messages and generate responses on Facebook Messenger and Instagram. When customers interact with a business through these channels:

• Messages are processed by third-party service providers to generate automated responses.
• Messages are transmitted securely and solely for the purpose of generating a response on behalf of the business.
• We do not use customer conversation data to train models or for any purpose beyond providing the service.
• Automated responses are assistive in nature — businesses are responsible for verifying the accuracy of booking information.

We integrate with the following categories of third-party services:

• Messaging platforms — Meta (Facebook Messenger and Instagram) for customer communication.
• Email providers — for sending notifications and reminders.
• Hosting and infrastructure — Vercel (application hosting), Neon (PostgreSQL database).
• Processing providers — third-party services for automated message processing.

Each third-party service operates under its own privacy policy. We only share the minimum data necessary for each service to function. All integrations comply with Meta Platform Policies.

hapsayaccesses Facebook and Instagram data through Meta’s platform APIs. We handle this data in accordance with Meta Platform Policies:

• We only access data that is necessary to provide the service (responding to messages, managing conversations).
• We do not sell, license, or otherwise transfer Meta platform data to any third party.
• We do not use Meta platform data for advertising, analytics, or any purpose beyond providing the service.
• Businesses may request deletion of all Meta platform data at any time.

• Conversation sessions expire automatically after 24 hours of inactivity.
• Booking data is retained for as long as the business account remains active.
• Account data is retained until the business requests deletion or terminates the service.

We implement appropriate security measures to protect your data:

• All data is encrypted in transit using TLS.
• Access controls ensure that business data is isolated per tenant — each business can only access its own data.
• Database-level constraints prevent unauthorized cross-tenant data access.
• Staff authentication is managed through secure session-based access.

You have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Delete your data, subject to legal retention requirements.
• Export your data in a portable format.

To exercise these rights, contact us at [email protected].

We use minimal cookies necessary for the service to function:

• Authentication cookies — to maintain staff login sessions.
• Preference cookies — to remember user settings.

We do not use third-party advertising or tracking cookies.

We may update this Privacy Policy from time to time. When we make significant changes, we will notify affected users via email or through an in-platform notice. Continued use of the service after changes constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy or our data practices, contact us at:

[email protected]