AI Massage SaaS

Privacy Policy

Last Updated: August 8, 2026

1. Introduction

AI Massage SaaS ("we," "our," or "us") respects your privacy and is committed to protecting the personal data of our users and their customers. This Privacy Policy explains how we collect, use, store, and share information when you use our platform at https://automation.lazyskipper.shop.

2. Information We Collect

We collect information in the following categories:

Account Information: When you register as a tenant (business owner), we collect your name, business name, email address, password, and billing information.
Connected Channel Credentials: To automate communication, you connect your third-party accounts (Facebook Page, Instagram Profile, WhatsApp Business API, Twilio). We collect and store access tokens and page identifiers. To protect your credentials, these tokens are stored in the database in encrypted format using AES-256-CBC encryption.
Customer & Message Content: We process messages (text, audio, comments) sent by your customers to your connected Meta pages or phone numbers. This includes transcripts generated by AI service providers for voice notes.

3. How We Use Your Information

We use the collected data to:

  • Provide, operate, and maintain the multi-tenant automation workflows.
  • Forward customer messages to the AI engine (n8n/Groq) to generate automated responses.
  • Display orders, conversations, and usage charts in your tenant dashboard.
  • Verify API webhooks and secure the platform against unauthorized access.
  • Send transactional notifications, billing updates, and system alerts.

4. Data Isolation & Security

Our platform enforces database-level tenant isolation. Every query is filtered by a unique client_id, preventing any tenant from viewing, modifying, or accessing other business owners' or their customers' data. We use secure HTTPS connections for all API endpoints and industry-standard security measures to safeguard data against breach or misuse.

5. Meta Platform Data Compliance & Deletion

We comply with the Meta Platform Terms and Developer Policies. If you connect your Facebook, Messenger, Instagram, or WhatsApp accounts to our application, we only request the permissions necessary to run the automation flow.

How to request data deletion:

If you wish to remove our platform's access to your Meta page or delete the associated database records, you can do so directly by:

  1. Logging into your Tenant Portal, navigating to Connect Settings, and clicking Disconnect.
  2. Removing the "AI Massage SaaS" app under your Facebook Profile's Settings & Privacy > Apps and Websites menu.
  3. Sending a request to support@lazyskipper.shop for permanent removal of cached messages and logs. We will fulfill all deletion requests within 30 days.

6. Data Retention

We retain account and tenant data for as long as your account remains active. Raw webhook logs and transaction files are retained for a maximum of 90 days for troubleshooting and audit purposes, after which they are permanently purged.

7. Contact & Support

If you have questions about this Privacy Policy or our data processing practices, please contact us: support@lazyskipper.shop.