Privacy Policy

Last updated: 27 August 2026

Twin Lions Chat Agent ("the Service") provides automated customer-service messaging for businesses on Facebook Messenger. This policy explains what we collect, why, and the choices you have. It covers both the businesses that use our dashboard and the people who message those businesses' Facebook Pages.

What we collect

• Messages. When you message a Facebook Page that uses the Service, we receive the message text and your Messenger identifiers (a page-scoped ID and, where permitted, your public name) through Meta's Messenger Platform, so the assistant can reply.
• Page and business data. When a business connects its Facebook Page, we receive the Page's name, ID, and an access token that lets the Service reply on the Page's behalf. Tokens are stored encrypted.
• Account data. Businesses using the dashboard provide a username, email address, and business details (branches, services, prices).

How we use it

• To generate and send automated replies on behalf of the business you messaged.
• To hand a conversation to a human staff member when needed.
• To show businesses their own conversation history and usage in the dashboard.
• To meter usage for billing.

Message text is processed by third-party AI language-model providers solely to generate replies. We do not sell personal data, and we do not use message content for advertising.

Storage and security

Data is stored on servers with encryption in transit (TLS). Page access tokens are encrypted at rest. Access to production systems is restricted to authorized operators.

Retention

Conversation messages are retained for as long as the business's account is active, subject to the business's retention settings, and are then deleted. Backups are pruned on a rolling 30-day schedule.

Sharing

We share data only with: Meta Platforms (to deliver messages through the Messenger Platform), our hosting provider, our AI language-model providers (message content only, to generate replies), and our error-monitoring provider (with sensitive values redacted). Each acts as a processor for the purposes above.

Your choices and rights

• You may stop interacting with a Page's assistant at any time; messaging a Page is always your choice.
• You may request a copy or deletion of your personal data — see our Data Deletion Instructions.
• Businesses may disconnect their Pages at any time, which invalidates the stored access tokens.

Changes

We will post any changes to this policy on this page with an updated date.