Privacy Policy
Last updated: October 17, 2026
This Privacy Policy explains how QUTLIYA MCHJ (Uzbekistan) (“we”, “us”), the operator of Teamworks AI (https://app.teamworks.uz), collects, uses, stores and deletes information. Teamworks AI lets businesses connect their Facebook Page and Instagram Business account so that an AI assistant can reply to Messenger and Instagram Direct messages on the business’s behalf.
1. Who this policy covers
- Business users — people who create an Teamworks AI account and connect a Facebook Page.
- Customers of those businesses — people who send a message to a connected Page on Messenger or to a connected Instagram account in Direct.
2. Information we access from Meta
| Data | Meta permission | Why we need it |
|---|---|---|
| Your basic Facebook profile (app-scoped user ID and name) | Facebook Login for Business | To know which Facebook user connected the account, and to honour data-deletion requests. |
| List of Pages you manage (name, ID, picture) | pages_show_list, business_management | To show you the Pages you manage so you can choose which one to connect. |
| Page access token and Page metadata | pages_manage_metadata, pages_read_engagement | To subscribe our app to the Page’s message webhooks and read basic Page information. |
| Linked Instagram Business account (ID, username, profile picture) | instagram_basic | To show which Instagram account is connected and route its Direct messages. |
| Messenger messages sent to your Page, and the sender’s name and profile picture | pages_messaging | To display the conversation in your inbox and reply on your behalf. |
| Instagram Direct messages sent to your account, and the sender’s name/username | instagram_manage_messages | To display the conversation in your inbox and reply on your behalf. |
We do not post content, read your personal Facebook feed, access friends lists, or use Meta data for advertising. We never sell personal data.
3. Information you give us directly
- Account data: email address and a password (stored only as a bcrypt hash).
- Business information you enter in AI settings: description, products and prices, working hours, tone and other preferences.
4. How we use information
- To generate and send replies to customer messages on behalf of the business that connected the Page, only in response to messages the customer sent first and only within Meta’s 24-hour messaging window.
- To show the business its conversations and let a human agent reply or take over.
- To keep a log of AI replies so the business can review what was sent.
- To secure the service, prevent abuse and fix problems.
5. How information is stored and protected
- Facebook user and Page access tokens are encrypted at rest with AES-256-GCM and are never sent to the browser.
- All traffic uses HTTPS. Incoming webhooks are verified with Meta’s signature (X-Hub-Signature-256); unsigned requests are rejected.
- Data is stored in a PostgreSQL database hosted by our VPS hosting provider. Access is limited to authorised staff.
- Each business can only see its own Pages and conversations.
6. Third-party processors
- Meta Platforms, Inc. — delivers messages between customers and the business (Messenger, Instagram).
- Google LLC (Gemini API) — generates reply text. We send it the business information from AI settings and up to the last 10 messages of the conversation. We do not send access tokens, email addresses or passwords.
- our VPS hosting provider — hosts our servers and database.
7. Retention
- Access tokens are deleted immediately when a business disconnects a Page.
- Conversations and AI logs are kept while the business account is active so the business can review its history, and for at most 12 months after the last message.
- All Meta data is deleted within 30 days of a deletion request (in practice, immediately — see Section 8), and when a business account is closed.
8. Your rights and data deletion
You may request access to, correction of, or deletion of your data at any time. To delete the data we obtained from Facebook, follow the steps on our Data Deletion page: remove Teamworks AI in your Facebook settings (we receive Meta’s deletion callback and erase your data automatically), use the “Delete all Meta data” button in your dashboard, or email us.
Customers of a business who want their messages deleted may contact the business or email us at the address below.
9. Children
Teamworks AI is a business tool and is not directed at children under 16.
10. Changes
We will post any changes on this page and update the “Last updated” date.
11. Contact
QUTLIYA MCHJ, Uzbekistan
Email: support@example.uz