Privacy policy

1. Who we are

AsistentiAI (https://asistentiai.com) is an Albanian platform, operated by Jurgen Bode (sole proprietor, Durrës, Albania), that gives businesses an artificial-intelligence agent to answer their customers on the website, Facebook Messenger, Instagram and WhatsApp. For any privacy question, write to us at kontakt@asistentiai.com.

For customers' conversations with a business, the data controller is the business you are talking to; AsistentiAI processes that data on its behalf. For business accounts on the platform, we are the controller.

2. What data we process

Business account data. Name and email of dashboard users, hashed password, business name and its settings.
Business knowledge. Content the business uploads or that is read from its public website: products, services, prices, hours, contacts, policies.
Channel connection data. When a business connects a Facebook Page, Instagram account or WhatsApp number, we store their identifiers and the access tokens Meta issues. Tokens are stored encrypted and used only to receive and send that business's customer messages.
Conversation data. Messages the customer sends to the business and the replies sent back, the customer's identifier on the channel (e.g. WhatsApp number or Instagram ID), the display name where the platform provides it, and an optional 1–5 rating. Photos a customer sends are analysed to answer but are not stored.
Data the customer provides for a booking, order or contact: name, phone, email and the requested service.
Technical data. IP address and request counters, only to prevent abuse.

We do not ask for, nor encourage customers to provide, sensitive data (health, financial, identity documents) through the conversation.

3. Why we process it

Only to provide the service: answering customer messages on the business's behalf, showing the business its conversations in its dashboard, handing a conversation to a person when needed, and improving the agent's answers for that business. We do not sell data, we do not use it for advertising, and we do not use it to train general-purpose AI models.

4. Data from Meta's platforms

Data we receive through Meta's APIs (Messenger, Instagram, WhatsApp) is used only for the messaging features described here, in accordance with Meta's Platform Terms and Developer Policies. We never sell it, never transfer it to data brokers and never use it for profiling or advertising. When a business disconnects a channel, the access tokens are deleted immediately.

5. Who we share it with

We use these service providers (sub-processors), each receiving only what its function requires:

The artificial-intelligence provider that generates replies: Anthropic by default; if the platform assigns another provider to a business (e.g. OpenAI or Google), that business's messages are processed by that provider.
Voyage AI — indexing knowledge for semantic search.
Supabase — the database, in the European Union (Frankfurt).
Vercel — application hosting.
Meta Platforms — message delivery on connected channels.
Email provider — system emails (sign-in codes, notifications).

Some of these providers may process data outside Albania (in the EU or the US), under the contractual safeguards they offer. Every business has its own isolated space: one business's knowledge and conversations are never shown to other businesses.

6. Retention and deletion

Data is kept while the business's account is active, or until the business deletes it. A business can disconnect any channel at any time, and the tokens are deleted immediately. When a business is removed from the platform, we delete its account, knowledge, tokens, conversations and messages. Anyone can request deletion of their own data on the Data deletion page.

7. Your rights

Under Albanian personal-data protection law and the GDPR, you have the right to request access to, correction or deletion of your data, and to object to processing. If you chatted with a business's agent, you may contact that business or us directly at kontakt@asistentiai.com or through the deletion form; we help the business fulfil the request. You also have the right to complain to Albania's Commissioner for the Right to Information and Personal Data Protection.

8. Children

The service is aimed at businesses and their adult customers. We do not knowingly collect data from children under 16.

9. Cookies

The public website uses only a technical cookie for your chosen language, with no tracking or advertising. The dashboard uses one strictly necessary technical cookie to keep you signed in.

10. Security

Passwords are stored hashed (scrypt), channel tokens are stored encrypted, connections go over HTTPS, and dashboard access is controlled by roles and two-step verification. No system is completely invulnerable, so we work continuously to improve protection.

11. Changes

If we change this policy, we update the date above and, for significant changes, notify our business customers.