Privacy Policy

Your privacy matters to us. This Privacy Policy explains how Buddy Assist collects, uses, stores, and protects your information when you use our platform.

1. Who We Are

Buddy Assist is operated by Skill Seeds Enterprise Limited. If you have any questions about this policy, contact us at [email protected].

2. Information We Collect

Information you provide directly:

• Account registration details (name, email address, organisation name)
• Billing information (processed securely via our payment provider — we do not store card details)
• Data, documents, and content you upload or connect to the Service
• Support communications

Information collected automatically:

• Usage data (features used, queries made, session duration)
• Device and browser information (IP address, browser type, operating system)
• Log data (API request logs, error logs)
• Analytics events (page views, clicks, feature interactions)

Information from third-party integrations: When you connect platforms such as Notion, Confluence, GitBook, Zendesk, or others, we access only the data necessary to sync your content into Buddy Assist. We do not access any data beyond what you explicitly authorise.

Information from connected messaging channels: When you connect a Facebook Page, Instagram account, or WhatsApp Business number, we receive the messages and comments your customers send to those accounts, the sender's platform-assigned ID, and basic details of the account you connected. We use this only to generate and send replies on your behalf and to display the conversation in your shared inbox. We do not use it for advertising, we do not sell it, and we do not use it to train AI models. Each business's data is isolated from every other business's. You can disconnect a channel at any time from your dashboard, or revoke our access directly in your Facebook, Instagram, or WhatsApp account settings, which ends our access immediately.

3. How We Use Your Information

We use your information to:

• Provide, operate, and improve the Service
• Process billing and manage your subscription
• Sync and index your connected data sources to power the conversational layer
• Respond to support requests
• Send transactional emails (account verification, password reset, billing receipts)
• Send product updates and announcements (you can opt out at any time)
• Detect and prevent fraud, abuse, or security threats
• Comply with legal obligations

We do not:

• Sell your personal data to third parties
• Use your uploaded content to train AI models
• Share your data with advertisers

4. Your Data and AI Processing

Buddy Assist processes your connected data to build a searchable, conversational knowledge layer for your organisation. This processing is done exclusively to serve your queries. Your data is isolated per organisation — no data bleeds between organisations. The AI only answers from the data you provide.

5. Data Storage and Security

Your data is stored on secure cloud infrastructure (DigitalOcean). We use:

• Encryption at rest and in transit (TLS/HTTPS)
• Per-project namespace isolation in our vector database (Pinecone)
• Access controls and authentication on all internal systems
• Regular security reviews

While we implement strong security measures, no system is completely immune to risk. We will notify you promptly in the event of a data breach affecting your account.

6. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete your data within 30 days unless retention is required by law. You may request an export of your data before deletion.

7. Meta Platform Data (Facebook, Instagram and WhatsApp)

This section explains how we handle "Platform Data" — the information Meta's APIs make available to us when a business connects a Facebook Page, an Instagram account, or a WhatsApp Business number to Buddy Assist. It applies in addition to the rest of this policy.

What we receive

• Message and comment content sent to the connected account: the text of WhatsApp messages, Messenger messages, Instagram direct messages, and public comments on Facebook and Instagram posts, together with the time they were sent.
• Platform-assigned identifiers for the sender: the WhatsApp wa_id, the Messenger page-scoped ID (PSID), or the Instagram-scoped user ID. These are scoped to the connected business and are not a person's phone number, email address or Meta account name.
• The sender's display name as the platform supplies it, used so the business can tell conversations apart in the shared inbox.
• Identifiers and details of the connected account itself: the Page ID and Page name, the Instagram account ID and username, the WhatsApp phone number ID, WhatsApp Business account ID, display number and verified name, and the app-scoped ID of the Meta user who authorised the connection.
• Access tokens issued to us so we can read incoming messages and send replies on the business's behalf.

How we use it

We use Platform Data for one purpose: to operate the messaging assistant the business connected it for. In practice that means generating a reply from the business's own knowledge base, sending that reply back through Meta on the business's behalf, showing the conversation in the business's shared inbox so a human can take over, and — where the business has configured it — creating a lead or support ticket from the conversation.

We do not:

• sell, rent or trade Platform Data;
• use it for advertising, ad targeting, or to build advertising profiles;
• use it to train AI models, our own or anyone else's;
• combine it with data from other businesses — every business's data is isolated from every other business's;
• transfer it to data brokers or information-resale services.

The only third parties that ever see Platform Data are the infrastructure and AI providers we use to run the Service, acting on our instructions and under confidentiality obligations, and any escalation platform the business has itself configured (such as Slack, Zendesk or HubSpot). We also disclose data where the law requires it.

How long we keep it

Conversation and message history is retained while the business's account is active, so the business has a record of what its customers asked. Access tokens and connection details are retained only while the channel is connected, and are erased the moment it is disconnected. When an account is deleted, the associated Platform Data is deleted within 30 days.

How to have it deleted

Anyone can have their Platform Data removed, at no cost and without needing a Buddy Assist account. Removing Buddy Assist from your Facebook, Instagram or WhatsApp settings, or disconnecting the channel inside Buddy Assist, revokes our access on Meta's side and erases the stored credentials for that connection immediately. Emailing [email protected] deletes the account and everything in it. Full step-by-step instructions, what exactly is deleted, how long it takes, and a place to check the status of a request using the confirmation code Meta gives you, are on our Data Deletion page.

8. Sharing Your Information

We may share your information with:

• Service providers: Infrastructure providers, email delivery services, payment processors — only as necessary to operate the Service, and bound by confidentiality obligations
• Escalation platforms: If you configure human escalation to Zendesk, Freshdesk, Intercom, HubSpot, or Slack, conversation data is forwarded to those platforms per your configuration
• Legal requirements: If required by law, court order, or regulatory authority
• Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the successor entity

We do not sell, rent, or trade your personal data.

9. Cookies

We use cookies and similar tracking technologies to maintain your session, understand how the Service is used, and remember your preferences. You can control cookies through your browser settings. Disabling certain cookies may affect functionality.

10. Your Rights

Depending on your location, you may have the right to access, correct, delete, or port your personal data, and to object to or restrict processing. To exercise any of these rights, email us at [email protected]. We will respond within 30 days.

11. International Transfers

Buddy Assist is operated from Nigeria. If you access the Service from outside Nigeria, your data may be transferred to and processed in Nigeria or other countries where our service providers operate. We ensure appropriate safeguards are in place.

12. Children

The Service is not directed at children under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with their data, contact us and we will delete it promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or in-app notification. The updated policy will be effective from the date posted.

14. Contact Us

Buddy Assist / Skill Seeds Enterprise Limited
Email: [email protected]