Legal & Compliance

Privacy Policy

Effective Date: September 13, 2026 • Last Reviewed: September 2026

1Introduction & Scope

Welcome to VBO Connect (“we,” “our,” or “us”), operated by VBOTech (“VBOTech Ltd.”). VBO Connect is an enterprise multi-tenant messaging, email marketing, and unified communication platform located at https://connect.vbotech.com.

We respect your privacy and are committed to protecting your personal and business communication data. This Privacy Policy explains how we collect, store, process, and safeguard information when you connect third-party platforms including Meta (Facebook Messenger, Instagram Direct, WhatsApp Business Cloud API), Google Gemini AI, and SMTP/IMAP email services.

2Information We Collect

Workspace & Authentication Data

Admin names, verified business emails, passwords (one-way bcrypt hashed), workspace tenant identifiers (tenantId), and encrypted JWT access tokens.

Meta Platform & Channel Tokens

OAuth access tokens, Facebook Page IDs, Instagram Professional Account IDs, WhatsApp Business Account IDs (WABA), and Phone Number IDs authorized through Meta Login for Business.

Inbound & Outbound Messages

Message contents, timestamps, sender IDs (PSID/IGSID), recipient addresses, delivery status receipts (sent, delivered, read), and media URLs exchanged via official Webhook events.

Telemetry & Campaign Analytics

Email campaign open/click rates, bounce telemetry, response latency, and system audit logs needed to ensure SLA uptime and deliverability reputation.

3How We Use Your Information

We process collected data exclusively for the following authorized operational purposes:

Omnichannel Unified Inbox: Aggregating customer inquiries from WhatsApp, Facebook, Instagram, and Website Live Chat into a real-time collaborative inbox.
AI-Powered Suggestions: Passing message snippets to our Google Gemini AI Copilot solely to generate contextual draft responses for human agent approval. (We do NOT use your proprietary messages to train foundation AI models).
Webhook Notification & Delivery: Subscribing your authorized Facebook Pages and WhatsApp numbers to receive real-time messaging events via secure HTTPS webhooks.
Enterprise ERP Synchronization: Relaying leads captured via Meta Lead Ads into your connected ERP/CRM (such as VBO ERP) through HMAC-SHA256 authenticated webhooks.

4Data Security & Strict Multi-Tenant Isolation

Security is engineered into our core architectural layer:

Strict Tenant Partitioning: Every database document, conversation thread, contact entity, and credential record is strictly partitioned by tenantId. No cross-tenant data leakage is architecturally possible.

AES-256-GCM Encryption at Rest: All third-party secrets, OAuth access tokens, SMTP passwords, and API keys are stored encrypted using industry-standard AES-256-GCM with hardware-backed encryption keys.

HMAC-SHA256 Signature Verification: Inbound Meta webhooks are cryptographically authenticated against x-hub-signature-256 to prevent spoofing.

5No Selling of Data & Third-Party Disclosure

We NEVER sell, rent, or trade your business data, customer contacts, or conversation histories to advertising networks, data brokers, or third parties. Data is only transmitted to downstream APIs (Meta Graph API, Resend, Gemini) strictly to execute the actions you initiate in the platform.

6User Rights & Data Deletion

In accordance with GDPR, CCPA, and Meta Platform Policies, you retain full rights over your data:

Right to access and export your customer contacts and campaign telemetry.
Right to disconnect Meta channels at any time with 1-click in Settings → Channels.
Right to complete erasure of your tenant data and associated Meta tokens.

For explicit step-by-step instructions on purging your data, visit our dedicated Data Deletion Instructions Page.

Contact Privacy & Legal Team

If you have questions regarding this Privacy Policy or wish to exercise data rights, please contact our Data Protection Officer at:

Email: privacy@vbotech.com / support@vbotech.com

Entity: VBOTech Ltd. • Platform: VBO Connect