Privacy Policy — Letztak AI

Introduction

Letztak AI ("we", "our", or "us") operates an AI-powered customer support platform accessible at https://letztak.com. This Privacy Policy explains how we collect, use, disclose, and protect information when you use our services.

By using Letztak AI, you agree to the collection and use of information in accordance with this policy. If you do not agree, please discontinue use of our platform.

      This Privacy Policy applies to all users of Letztak AI, including business owners who connect their Facebook Pages and Instagram Business accounts to our platform, and their customers who interact via those connected accounts.
    

Information We Collect

We collect the following categories of information:

1. Account Information

Name, email address, and password when you register
Company name and business details
Billing information (processed securely via payment providers)

2. Meta Platform Data (via Facebook Login & Webhooks)

Facebook Page access tokens and Page IDs
Instagram Business account details and usernames
Messages and DMs received on connected Facebook Pages and Instagram accounts
Post comments and mentions on connected accounts
Customer names and profile IDs (PSIDs) of people who message your Page

3. Customer Interaction Data

Messages sent to your Facebook Page or Instagram by your customers
Lead information collected during AI conversations (name, phone, email, city, budget, requirements)
Conversation history and AI-generated replies

4. Usage and Technical Data

IP addresses and browser information
Pages visited and features used within the platform
API call logs and error logs
OpenAI API usage (token counts, costs)

How We Use Your Information

Purpose	Data Used
Provide AI customer support automation	Messages, conversation history, knowledge base content
Send automated replies via Facebook/Instagram	Customer PSIDs, page access tokens, AI-generated replies
Lead qualification and CRM management	Customer details collected during AI conversations
Account management and billing	Account information, subscription data
Platform analytics and improvements	Usage data, AI response accuracy metrics
Security and fraud prevention	IP addresses, session data, audit logs

We do not sell your personal data or your customers' data to third parties. We do not use your customers' messages for advertising purposes.

Meta Platform Integration

Letztak AI integrates with Meta's platforms (Facebook and Instagram) using the Meta Graph API. When you connect your Facebook Page or Instagram Business account:

We request only the permissions necessary to read and send messages on your behalf
Page access tokens are stored encrypted using AES-256-CBC encryption
We subscribe to webhook events to receive real-time messages and comments
We act as a data processor on behalf of your business (the data controller)
Messages from your customers are processed through OpenAI's API to generate replies

      Meta Permissions Used: pages_messaging, pages_show_list, pages_read_engagement, instagram_basic, instagram_manage_messages, instagram_manage_comments, business_management
    

We comply with Meta's Platform Terms and Developer Policies. Data obtained via Meta APIs is used solely to operate our messaging automation service and is not shared with unauthorized parties.

OpenAI Data Processing

Letztak AI uses OpenAI's API (GPT-4o) to generate automated replies. When a customer sends a message:

The message content is sent to OpenAI's API along with your knowledge base content and conversation history
OpenAI processes this data under their own Privacy Policy
We use OpenAI's API in a way that opts out of training data use by default per their API terms
No personally identifiable customer data is stored by OpenAI beyond the API call

Data Storage and Security

Your data is stored on secured servers hosted by Hostinger. We implement the following security measures:

Encryption at rest: Sensitive data including access tokens encrypted with AES-256-CBC
Encryption in transit: All data transmitted over HTTPS/TLS
Access control: Role-based access (Owner, Manager, Agent) limits data access
CSRF protection: All forms protected against cross-site request forgery
Password hashing: Passwords stored using bcrypt with cost factor 12
Session security: HTTP-only, secure cookies with SameSite=Lax

While we take reasonable precautions, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security of your data.

Data Retention

Account data: Retained while your account is active. Deleted within 30 days of account closure upon request.
Conversation messages: Retained for 12 months by default, or as configured by your account settings.
Webhook logs: Retained for 30 days for debugging purposes.
AI usage logs: Retained for 90 days for billing and analytics.
Access tokens: Deleted immediately when you disconnect an account.

Your Rights

Depending on your location, you may have the following rights regarding your personal data:

Access: Request a copy of data we hold about you
Correction: Request correction of inaccurate data
Deletion: Request deletion of your account and associated data
Portability: Request export of your data in a machine-readable format
Objection: Object to processing of your data for certain purposes
Withdrawal: Disconnect your Meta accounts at any time from Settings

To exercise any of these rights, contact us at the email below.

Third-Party Services

Letztak AI uses the following third-party services:

Service	Purpose	Privacy Policy
Meta (Facebook/Instagram)	Messaging platform integration	facebook.com/policy.php
OpenAI	AI reply generation	openai.com/privacy
Hostinger	Server hosting	hostinger.com/privacy

Cookies

Letztak AI uses only essential session cookies to maintain your login state. We do not use advertising cookies, tracking pixels, or analytics cookies. The cookies we use:

ltzk_sess — Session identifier, expires when browser closes or after 2 hours of inactivity. Required for platform functionality.

Children's Privacy

Letztak AI is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of significant changes by email or by displaying a notice on the platform. The "Last updated" date at the top of this page indicates when it was last revised.

Continued use of Letztak AI after changes are posted constitutes acceptance of the updated policy.

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

Letztak AI
Website: https://letztak.com
Email: privacy@letztak.com
Support: support@letztak.com

We will respond to privacy requests within 30 days.