Legal
Privacy Policy
Last updated: 14 July 2026
This Privacy Policy explains what data Blinkerbot processes when a business connects its messaging channels and its customers converse with an AI assistant, and how that data is protected. This is a template — have it reviewed by counsel before launch.
Who we are
Blinkerbot is a business messaging platform. A "workspace" belongs to a business customer (the data controller for its end-customer conversations); Blinkerbot acts as the data processor on that customer's behalf.
Data we process
Account data (name, email, hashed password); workspace and billing data; connected-channel identifiers and access tokens (stored encrypted at rest); end-customer messages, contact profile names and message metadata routed through connected channels; and usage/diagnostic logs. We never store social-provider passwords.
How we use it
To deliver the service: route inbound messages, generate AI replies with the AI model Blinkerbot operates for the workspace, meter usage, and provide analytics. Message content is sent to the configured AI provider solely to generate a reply. We do not sell personal data.
Provider data (Meta, Instagram, WhatsApp, TikTok)
When a business connects a channel, we receive only the tokens and asset identifiers needed to send and receive messages on its behalf, scoped to the permissions granted. Access tokens are encrypted with AES-256-GCM. Removing the app on the provider triggers our deauthorize handler, which purges the stored credentials.
Retention and deletion
Data is retained while a workspace is active. A business can disconnect a channel at any time. End-users may request deletion of the data associated with them through the provider's data-deletion flow or by contacting the business; see the Data Deletion page.
Security
Credentials are encrypted at rest, transport is over TLS, webhook payloads are signature-verified, and access is scoped per workspace. No method is perfectly secure, but we apply industry-standard safeguards.
Contact
Questions about this policy: privacy@blinkerbot.com.