Privacy policy

Information we process

• Connected account information. Your name, email address, account identifiers, profile details, and permissions granted when you connect an application. For example, an Instagram connection can provide a professional account identifier and username.
• Authorization credentials. Access and refresh tokens where provided, used to maintain the connection. For OAuth connections, you authorize access with the application provider. Other connections may use an API key or credentials you choose to supply.
• Conversations. Messages, conversation participants, timestamps, attachments and attachment metadata, and staff assignments. This can include conversations with assistants and customer messages delivered by connected apps.
• Content and tasks. Instructions, files, saved knowledge, memories, routines, and information retrieved from connected apps when you authorize their use. Depending on the connection, this may include email, calendar entries, social media, comments, or account insights.
• Voice and device features. Audio you record for transcription, text selected for speech generation, and device or notification information when you use those features.
• Operational information. Account and session records, IP addresses, request timestamps, and error information needed to operate, secure, and troubleshoot the service. Privacy requests also include the contact details and information you send us.

How information is used

We use this information to authenticate users, operate authorized connections, deliver customer messages, assign conversations to staff or assistants, run requested tasks and routines, send replies or notifications, and investigate service or security problems.

When you use an AI assistant, relevant messages, history, instructions, memories, files, and connected-app content may be sent to the configured model, agent, or knowledge service. Voice features may send audio for transcription or text for speech generation. Scheduled tasks can continue processing after they are enabled. The providers involved depend on the selected configuration. Customer auto replies require the business to enable them.

Who processes the information

Authorized users and staff can access information within their account or workspace permissions. Hosting, storage, integration, notification, model, voice, and knowledge services process information needed for enabled features. Connected applications receive information needed to carry out authorized actions. An AI gateway may forward requests to another model provider according to its routing settings.

T15D's integration gateway receives events from connected applications and forwards them to the connected T15D server. That server stores the customer inbox. If another organization operates the connected server or configures an external service, that organization is responsible for its own processing and retention. We may also disclose information when required by law or to protect the security of the service.

Depending on the hosting and services selected, information may be processed outside your country. Third-party services apply their own policies and account settings. For Instagram connections, Meta's practices are described in its Instagram privacy policy. Contact us to ask which providers process a particular feature.

Retention and security

Connection credentials are encrypted in storage. Access to account information and integrations is restricted to authorized accounts and services. No online service can guarantee complete security.

We retain account information, content, and connection information while needed to provide the service and handle authorized requests. Pending gateway deliveries are retained until the receiving server acknowledges them; acknowledgement clears their message payload from the gateway queue. Conversation records on the receiving server remain until deleted under that server's practices. Disconnecting an account stops future access but does not by itself delete previously stored conversations.

Deletion requests apply to information under our control. Limited records may need to remain for security, legal obligations, or resolving disputes. Copies already held by a connected business or a third-party service follow that recipient's retention practices.

Request deletion or disconnect

1. To stop a connection, open T15D's Integrations screen, select the connected app, and choose Disconnect. You can also revoke access with the application provider, such as through Instagram's Apps and Websites settings. Stop active tasks and disable routines separately.
2. To request deletion of stored data, email thanabatd@gmail.com with the subject “Data deletion request”. Include the email or username associated with your account, the connected business or app if relevant, and which information you want deleted.
3. We may ask for enough information to verify that you are authorized to make the request. Do not send passwords, access tokens, or unnecessary identity documents. We will explain the outcome and any information we must retain.

If you messaged a business using T15D, you can also ask that business to delete your conversation from its inbox. Removing an integration does not delete information retained by the connected application.

Your choices and rights

You can choose which applications and features to enable, disconnect applications, and stop tasks and routines. The mobile app also offers AI data-sharing controls for new mobile actions. Withdrawing permission does not recall information already sent. Depending on applicable law, you may have rights to access, correct, delete, or obtain a copy of your information, and to object to or restrict processing. Use the contact below to make a request or ask about the services processing your data.

Changes to this policy

We will update this page when our practices change and revise the date above. Material changes will be communicated through an appropriate service or contact channel.

Contact

For privacy questions and requests, contact T15D.
thanabatd@gmail.com