Privacy Policy

Who we are

PunëtorAI ("we") is operated by Digita Dev, Tirana, Albania. PunëtorAI provides an AI customer-service assistant that businesses ("our customers") connect to their website chat, Facebook Messenger, Instagram, and WhatsApp. Contact: info@punetor.ai.

What we collect

• Business account data — name, email, and password hash of the business user; business name; the content the business provides or that we read from its public website (product data, policies, FAQs) to power its assistant.
• Channel connection data — when a business connects a Facebook Page, Instagram account, or WhatsApp number, we store the identifiers and access tokens Meta issues for that purpose, and use them only to receive and send that business's customer messages.
• Conversation data — messages customers send to a connected business and the replies sent back, plus the sender's display name where the platform provides it, and an optional 1–5 satisfaction rating the customer may leave. This data belongs to the business the customer contacted; we process it on that business's behalf.

How we use it

Solely to operate the service: answering customer messages with AI on the business's behalf, showing conversations to the business in its dashboard, escalating to a human when needed, and improving the assistant's answers for that business. We do not sell personal data, use it for advertising, or train general-purpose AI models on it.

Processors we rely on

Anthropic (AI answer generation), Neon (database hosting, EU region), Railway and Vercel (application hosting), Meta Platforms (message delivery for connected channels), Voyage AI (text search indexing), and Resend (transactional email). Each receives only what its function requires.

Retention & deletion

Data is kept while the business's account is active. Businesses can disconnect any channel at any time (this deletes the stored access tokens immediately) and can request full account deletion — see Data Deletion. Upon deletion we remove the account, its knowledge base, tokens, and conversations.

Your rights

Albanian data-protection law and the GDPR give you rights of access, correction, deletion, and objection. Customers of a connected business should address requests to that business first; we assist it in fulfilling them. You can also contact us directly at the email above.

Meta platform data

Data received via Meta's APIs (Messenger, Instagram, WhatsApp) is used only to provide the messaging features described here, in accordance with Meta's Platform Terms and Developer Policies, and is never sold or transferred to data brokers. Access tokens are stored securely and deleted on disconnect.