Privacy Policy
Last updated: January 2026
Table of Contents
1. Introduction
Central AI ("we", "us", or "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our AI-powered chatbot and CRM platform services, including when a business connects its Facebook Page, Instagram account or WhatsApp Business number to Central AI.
2. Information We Collect
2.1 Personal Information You Provide
- Account Information: When you register, we collect your name, email address, username, and password.
- Company Information: Business name, domain, address, and logo for company accounts.
- Payment Information: Billing details processed through our payment partner PayStation for subscription payments.
- Contact Information: Email, phone number, and address when you contact us or submit forms.
- Newsletter Subscription: Email address when you subscribe to our newsletter.
2.2 Information Collected Automatically
- Chat Conversations: Messages exchanged through our AI chatbot widget embedded on your website, on our platform, and on messaging channels a business has connected (Facebook Messenger, Instagram and WhatsApp).
- Lead Data: Contact information (name, email, phone) collected through chatbot interactions.
- Usage Data: Session information, pages visited, features used, and interaction timestamps.
- Device Information: Browser type, IP address, and device identifiers.
2.3 Knowledge Base Data
If you upload documents, FAQs, or website content to train your AI chatbot, we store this data securely to provide our services.
2.4 Data from Facebook, Instagram and WhatsApp
When a business connects a Meta channel, we receive data from Meta as described in section 5.
3. How We Use Your Information
We use the collected information to:
- Provide, maintain, and improve our AI chatbot and CRM services
- Process transactions and send billing notifications
- Respond to your inquiries and provide customer support
- Send newsletters and marketing communications (with your consent)
- Improve the quality of our AI responses. We do not use data received from Facebook, Instagram or WhatsApp to train AI models.
- Analyze usage patterns to enhance user experience
- Detect and prevent fraud and security issues
- Comply with legal obligations
4. Data Sharing and Disclosure
We do not sell your personal information. We may share data with:
- Service Providers: Payment processors (PayStation), cloud hosting providers, and email services that assist in our operations.
- AI Service Providers: To generate chatbot replies, message text is processed by our AI providers (such as Google Gemini or OpenAI). They act as our data processors and may not use this data for their own purposes.
- Integrations: When you connect third-party services (such as Odoo CRM), data may be shared per your configuration.
- Legal Requirements: When required by law, court order, or government authority.
- Business Transfers: In case of merger, acquisition, or sale of assets.
5. Facebook, Instagram and WhatsApp (Meta) Data
Businesses can connect their Facebook Page, Instagram professional account or WhatsApp Business number to Central AI so that our AI assistant can answer their customers' messages. When a business connects, we receive and store:
- the ID and name of the connected Page, Instagram account or WhatsApp number, and the access token Meta issues for it (stored encrypted);
- messages customers send to that business and the replies sent back, with the sender's Meta-provided ID and, where Meta provides them, their name and profile picture.
How we use it: only to provide our service to the connected business: to receive customer messages, generate and send replies, and show conversations to the business in its Central AI account. We do not sell this data, do not use it for advertising, and do not use it to train AI models.
Retention: conversations are kept while the business's account is active. When a business disconnects a channel or closes its account, we delete the access token immediately and the related conversations within 30 days.
How to delete your data: you can remove Central AI's access at any time in Facebook (Settings & privacy → Settings → Business integrations → Central AI → Remove), which tells us to delete the data we hold about you. You can also email [email protected] and we will delete it within 30 days.
6. Data Security
We implement industry-standard security measures including:
- HTTPS encryption for all data transmissions
- Secure password hashing
- Encryption of access tokens for connected channels
- Access controls and authentication
- Regular security audits
- Secure cloud infrastructure
7. Data Retention
We retain your personal data for as long as:
- Your account remains active
- Necessary to provide our services
- Required by legal obligations
- Chat histories are retained for the duration of your subscription
- Data received from Facebook, Instagram and WhatsApp is kept and deleted as described in section 5
8. Your Rights
You have the right to:
- Access: Request a copy of your personal data
- Correction: Update or correct inaccurate information
- Deletion: Request deletion of your data (subject to legal requirements). For data received from Facebook, Instagram or WhatsApp, see section 5.
- Data Portability: Export your data in a machine-readable format
- Opt-out: Unsubscribe from marketing communications
- Withdraw Consent: Revoke previously given consent
9. Cookies and Tracking
Our website uses cookies and similar technologies for:
- Session management and authentication
- Remembering your preferences
- Analytics and performance monitoring
You can control cookies through your browser settings.
10. Third-Party Links
Our platform may contain links to third-party websites. We are not responsible for their privacy practices. We encourage you to review their privacy policies.
11. Children's Privacy
Our services are not intended for children under 16. We do not knowingly collect personal information from children.
12. International Data Transfers
Your data may be processed in countries other than Bangladesh, including by our hosting and AI service providers. We ensure appropriate safeguards are in place for international transfers.
13. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of significant changes via email or platform notification. Continued use after changes constitutes acceptance.
14. Contact Us
For privacy-related inquiries or to exercise your rights, contact us at:
- Email: [email protected]
- Address: 64/3, Lake Circus (2nd floor), Mirpur Rd, Dhaka 1205, Bangladesh
This Privacy Policy is effective as of October 2026.