Privacy Policy

Effective Date: 11 September 2026
Last Updated: September 2026

1. Data controller

AllSaferAI OÜ (registry code 17591726) Tartu mnt 67/1-13b, Tallinn 10115, Estonia Email: privacy@allsaferai.com AllSaferAI OÜ is the controller of personal data processed through this website and its products, under the EU General Data Protection Regulation (GDPR).

2. Meta platform data (Facebook and Instagram)

Some of our products connect to Facebook and Instagram through Meta's official APIs. This section explains what we do with that data.

What we receive

When you connect a Facebook Page or Instagram business account, we receive: the page or account name and ID, messages sent to that page or account, comments left on its posts, the public name and profile picture of the person who sent the message or comment, and the time it was sent.

Why we use it

We use this data only to show you your messages in one inbox and to send the automatic replies you configured. We do not use it for advertising, profiling, or training AI models on your customers' personal data.

How long we keep it

Messages and comments are kept for as long as your account is active. If you disconnect a Page or account, we delete its messages and comments within 30 days. If you close your account, we delete all associated data within 30 days.

Who we share it with

We do not sell this data. We do not share it with third parties except infrastructure providers strictly needed to run the service (hosting and database). These providers process data on our instructions only.

Access tokens

Access tokens issued by Meta are stored encrypted and are never shown in our website code or written to our logs.

Your control

You can disconnect a Page or Instagram account at any time from your dashboard, which stops all access immediately. You can also remove our app from your Facebook or Instagram settings. To request deletion of your data, see our Data Deletion page.

3. Introduction

AllSaferAI OÜ ("we", "our", "us") is committed to protecting your privacy. This policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services.

4. Information We Collect

We collect the following when you use our website and services:

Personal Information: name, email address, phone number, and company name when you contact us.
Usage Data: browser type, device information, pages visited, time spent, and referring URLs.
Cookies and similar technologies — see our Cookie Policy.

5. Lawful Basis for Processing

Under Article 6 of the GDPR, we process your personal data on the following legal bases:

Performance of a contract (Art. 6(1)(b)) — to provide our services, manage your account, and process Meta platform data on behalf of business users who connect their Pages.
Consent (Art. 6(1)(a)) — for analytics cookies (Google Analytics) and marketing cookies (Meta Pixel, TikTok Pixel, LinkedIn Insight Tag). You may withdraw consent at any time via the cookie settings on this site.
Legal obligation (Art. 6(1)(c)) — to comply with applicable laws, including Estonian commercial law and EU regulations.
Legitimate interests (Art. 6(1)(f)) — for website security, fraud prevention, and service improvement, where our interests do not override your rights.

6. How We Use Your Information

We use the information we collect for the following purposes:

To provide, maintain and improve our services.
To communicate with you about projects and updates.
To analyse usage patterns.
To comply with legal obligations.

8. Sub-processors

We use the following third-party service providers to process personal data on our behalf. Each operates under a data processing agreement:

Google LLC (USA) — Google Analytics 4 for website analytics; Google Gemini for AI-powered features. Safeguard: EU–US Data Privacy Framework.
Supabase Inc. — database and authentication services. Data hosted in Frankfurt, Germany (within the EEA).
Vercel Inc. (USA) — website hosting and content delivery. Safeguard: Standard Contractual Clauses (SCCs).
Meta Platforms Inc. (USA) — social media APIs for Facebook and Instagram integrations. Safeguard: EU–US Data Privacy Framework.
Resend Inc. (USA) — transactional email delivery (e.g. contact form confirmations). Safeguard: Standard Contractual Clauses (SCCs).

9. International Data Transfers

AllSaferAI OÜ is established in the EU (Estonia). Some of our sub-processors are based in the United States. When personal data is transferred outside the European Economic Area, we rely on one of the following safeguards: • EU–US Data Privacy Framework — for providers certified under the framework (Google, Meta). • Standard Contractual Clauses (SCCs) — EU Commission-approved contractual terms that bind the recipient to EU-level data protection (Vercel, Resend). • Data stored within the EEA — Supabase hosts our database in Frankfurt, Germany, so that data does not leave the EEA. You may request a copy of the applicable safeguard by emailing privacy@allsaferai.com.

10. Data Security

We use appropriate technical and organisational measures to protect your data against unauthorised access, alteration, disclosure or destruction.

11. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

Right of access (Art. 15) — request a copy of the personal data we hold about you.
Right to rectification (Art. 16) — ask us to correct inaccurate or incomplete data.
Right to erasure (Art. 17) — ask us to delete your personal data (“right to be forgotten”).
Right to restriction (Art. 18) — ask us to temporarily limit how we process your data.
Right to data portability (Art. 20) — receive your data in a structured, machine-readable format.
Right to object (Art. 21) — object to processing based on legitimate interests.
Right to withdraw consent — where processing is based on consent (e.g. analytics or marketing cookies), you may withdraw it at any time via the cookie settings or by contacting us.
Right to lodge a complaint — with the Estonian Data Protection Inspectorate or your local supervisory authority (see Supervisory Authority section).

To exercise any of these rights, email privacy@allsaferai.com. We will respond within 30 days. If we need more time, we will inform you of the reason and the extension period (up to two additional months).

12. Supervisory Authority

As an Estonian company, our lead supervisory authority is: Andmekaitse Inspektsioon (Estonian Data Protection Inspectorate) Tatari 39, 10134 Tallinn, Estonia Email: info@aki.ee Website: https://www.aki.ee You have the right to lodge a complaint with this authority, or with the data protection authority in your EU/EEA member state of residence.

13. Data Retention

We keep personal data only as long as needed for the purposes described here or as required by law.

14. Children's Privacy

Our services are not directed to anyone under 16. We do not knowingly collect data from children.

15. Changes

We may update this policy. Changes are posted on this page with a new revision date.

16. Contact

Questions about this policy? Email us:

privacy@allsaferai.com