Privacy Policy.

KraftNest Automations operates an automated messaging service on Instagram and Facebook. Businesses connect their Instagram or Facebook account to our service, and when someone sends that business a direct message, our system reads the message, generates a relevant reply using AI, and sends the reply back inside the same conversation.

This policy explains what data that service handles, why it handles it, who else processes it, and how you can have it removed. It applies to anyone who messages a business account that uses KraftNest, as well as to the businesses that operate those accounts.

We only receive what Meta's messaging platform passes to us when you send a direct message to a business account using our service. That is:

• ·Your Instagram or Facebook user ID — the account identifier Meta provides, along with the public username or display name attached to it.
• ·Message content — the text you send to the business account, and any text our AI sends back to you.
• ·Timestamps — when each message was sent and received, used to keep the conversation in order and to maintain operational logs.

We do not collect or have access to your Instagram or Facebook password, your login credentials, your payment or card details, or any part of your account we are not explicitly sent by Meta. We do not scrape your profile, your followers, your posts, or your activity outside of the conversation you started with the business.

Your information is used for exactly one purpose: to read your message, generate an automated reply, and send that reply back to you within the same conversation. That is the entire function of the service.

We do not sell your data. We do not rent, trade or share it with data brokers. We do not use it for advertising, ad targeting, retargeting, audience building, or profile enrichment. We do not use it to contact you on any other channel, and we do not build a marketing profile about you.

Our service uses Meta's Instagram Messaging API and Facebook Messenger Platform API to receive and send messages on behalf of the connected business account. Any data we obtain through those APIs is Platform Data.

We handle all Platform Data in accordance with Meta's Platform Terms and Developer Policies. We only request the permissions the service actually needs to read and reply to messages, we only use Platform Data to provide that messaging functionality, and we do not transfer it to any party except the processors described in the next section.

To generate a reply, your message content is processed by third-party services acting on our behalf:

• ·Google Gemini — message content is sent to Google's Gemini AI so that a relevant reply can be generated and returned.
• ·n8n — we use n8n as the workflow automation platform that connects the messaging APIs to the AI and moves the message through each step of that process.

These providers process message content only to deliver the reply back to you. They are not permitted to use your data for their own independent purposes, and no other third parties receive your message data.

We retain data only for as long as it is necessary to operate the service and to maintain operational logs — the records that let us keep conversations coherent, diagnose failures, and confirm the system is replying correctly.

Once that data is no longer needed for those purposes, it is deleted. If you ask us to delete your data sooner, we will do so on request as described below.

You can ask us at any time to tell you what data we hold about you, or to delete it entirely. To make either request, email hello@kraftnest.co from or about the account you messaged with, and we will action it.

Step-by-step instructions, including exactly what to include in your request and what happens after you send it, are on our data deletion page.

If you have questions about this policy or about how your data is handled, contact us:

• ·KraftNest Automations
• ·hello@kraftnest.co

We aim to respond to every privacy or deletion enquiry sent to hello@kraftnest.co promptly.