Privacy Policy

1. Who operates Aisella

Aisella ("we", "us", or "our") is an AI Seller Assistant operated by CKMICROWORKS COMPUTER PROGRAMMING SERVICES (CKMicroWorks). Aisella helps sellers connect a Facebook Page, product catalog, and related integrations so Aisella can assist with customer conversations in Messenger.

2. Information we handle

Depending on how Aisella is used, we may handle the following categories of information:

• Seller and account information, such as account details, Store information, business information, and settings provided to Aisella.
• Facebook and Meta integration information, such as Facebook Page ID and name, granted authorization information, encrypted Page access tokens, and a privacy-minimized hash of the Meta user identifier used to resolve valid deauthorization and data-deletion requests.
• Messenger information, such as customer/page-scoped identifiers, customer names when available from Meta, messages, conversation context, handover/control state, and delivery-related metadata needed to provide the service.
• Product Catalog information, such as product names, descriptions, categories, brands, options, prices, stock or availability data, source identifiers, seller corrections, and product photos.
• Integration information used for connected catalog sources or services, such as Google Sheets or Loyverse configuration and credentials where applicable.
• Subscription and service records, including plan, trial, billing or coverage status, usage/entitlement information, and related administrative records.
• Operational and security information, such as application logs, timestamps, error information, usage metrics, and records used to detect duplicate events, troubleshoot failures, protect accounts, and operate the service.

3. How we use information

We use information to provide and operate Aisella, including to authenticate users, connect authorized Facebook Pages, process Messenger conversations, search and present Product Catalog information, manage seller handover, maintain subscriptions and service limits, operate integrations, protect the platform, troubleshoot problems, and improve reliability.

We also use information to comply with valid Meta lifecycle requests, including deauthorization and Meta User Data Deletion requests.

4. AI processing and service providers

Aisella uses cloud infrastructure and AI inference services to provide its features. Current service providers may include Cloudflare, Groq, and Google services such as Gemini. Information supplied to a provider is limited to what is reasonably needed for the applicable Aisella function.

Connected third-party services may have their own privacy terms. Sellers should review the policies of services they choose to connect.

5. Facebook and Meta data

Aisella uses Facebook Login for Business and Messenger-related permissions to connect a seller-authorized Facebook Page and process customer messages for that Page.

Aisella stores Page access tokens server-side using its credential-protection architecture. For Meta lifecycle callback resolution, Aisella stores a SHA-256 hash of the authorizing Meta user identifier rather than persisting that raw identifier for this purpose.

6. Sharing and disclosure

We do not sell personal information. We may disclose or make information available to service providers that support Aisella's hosting, storage, messaging, AI inference, security, and connected integrations, subject to the services being used.

We may also disclose information when reasonably necessary to comply with applicable law, enforce agreements, protect Aisella or its users, investigate abuse or security incidents, or respond to a valid legal process.

7. Retention and deletion

We retain information for as long as reasonably necessary to provide Aisella, maintain security and operational continuity, meet contractual or legal obligations, resolve disputes, and enforce agreements. Different data categories may have different retention periods.

Meta User Data Deletion requests are processed through Aisella's Meta callback flow. A short-lived confirmation/status record may be retained to provide deletion status and idempotency, and is designed to expire rather than become a permanent identity record.

For broader deletion of Aisella account or Store data, see our Data Deletion page or contact support@aisella.ckmicroworks.com.

8. Security

We use technical and organizational safeguards appropriate to the service, including server-side authorization checks, tenant isolation, credential protection, request-signature verification for Meta callbacks, and measures intended to prevent secrets or raw internal errors from being exposed to users.

No system can guarantee absolute security, and users remain responsible for protecting their own account credentials and the credentials of third-party services they connect.

9. Your choices and requests

Sellers can disconnect a connected Facebook Page from Aisella. Facebook users may also use Facebook's Business Integrations controls and Meta's available deletion-request mechanism.

For access, correction, privacy, or broader deletion inquiries, contact support@aisella.ckmicroworks.com. We may need to verify identity or authority before acting on a request.

10. Changes to this policy

We may update this Privacy Policy as Aisella evolves or legal and operational requirements change. The effective date shown at the top identifies the current published version.