Privacy Policy

1. Introduction

RC Agents ("we," "our," or "us") is a multi-tenant SaaS platform operated by Chabni Reda-El-Mustapha. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our platform, including our website at rcagents.space and our integrations with Meta Platforms, Inc. APIs (Facebook Messenger, WhatsApp, and Instagram).

By using RC Agents, you consent to the data practices described in this policy. If you do not agree, please discontinue use of our platform immediately.

2. Information We Collect

2.1 Store Information

When you onboard your store on RC Agents, we collect:

• Store name, description, and branding assets (logo, colors)
• Shopify store URL and API credentials (tokens with scoped permissions)
• Product catalog data (names, descriptions, prices, variants, images, inventory)
• Order data (customer names, phone numbers, addresses, order items, totals, statuses)

2.2 Customer Communication Data

Through our integrations with Meta APIs, we process:

• Facebook Messenger: Messages, page-scoped user IDs, names, profile pictures, and message timestamps
• WhatsApp Business: Messages, phone numbers, profile names, and message media (images, documents)
• Instagram: Messages, Instagram-scoped user IDs, usernames, and message media

2.3 Technical Data

We automatically collect certain technical information when you use our platform:

• IP address and browser/user-agent information
• Pages visited and features used within the dashboard
• Timestamps of API requests and responses
• Error logs for debugging and service improvement

3. How We Use Your Information

We use the collected data for the following purposes:

• Providing Services: To operate the AI customer support agent, process orders, manage shipments, and deliver dashboard analytics
• Communication: To enable automated and manual responses across Messenger, WhatsApp, Instagram, and Live Chat
• Improvement: To analyze usage patterns and improve our AI models, platform features, and user experience
• Security: To detect and prevent fraud, unauthorized access, and platform abuse
• Compliance: To comply with legal obligations and Meta Platform Terms

4. Data Storage and Security

All data is stored on secured servers with industry-standard encryption at rest and in transit (TLS 1.2+). We implement the following security measures:

• Encrypted API token storage (never stored in plain text in code)
• Database-level multi-tenancy (each store's data is isolated by store_id)
• HTTP Basic Authentication for dashboard and API access
• HMAC-SHA256 signature verification for incoming Meta webhooks
• Regular security audits and dependency updates

5. Data Sharing and Third Parties

We do not sell, rent, or share your personal data with third parties for their marketing purposes. We may share data only in the following circumstances:

• Meta Platforms, Inc.: To facilitate message delivery through Messenger, WhatsApp, and Instagram APIs in accordance with Meta's Platform Terms
• Shopify Inc.: To sync product catalogs, inventory, and order data through Shopify's Admin API
• ZR Express: To facilitate order delivery and tracking information across Algerian wilayas
• Service Providers: With third-party hosting (Render), AI model providers (DeepInfra), and payment processors as necessary to operate the platform
• Legal Requirements: When required by law, court order, or governmental regulation

6. Data Retention

We retain your data for as long as your account is active or as needed to provide services. You may request deletion of your data at any time by contacting us. Customer communication data is retained for the purpose of conversation continuity and may be archived after 12 months of inactivity.

7. Your Rights

7.1 Meta User Data Deletion Instructions

If you interact with our platform via Meta APIs (Facebook Messenger, Instagram, or WhatsApp) and wish to request the deletion of your personal data or Meta-sourced conversation history, you can:

1. Submit a deletion request directly by emailing contact@rcagents.space with the subject "Meta Data Deletion Request".
2. Include your Facebook / Instagram User ID or Store Domain in the email body.
3. Upon receipt, we will process and permanently delete all associated message logs and user identifiers from our active servers within 30 days, notifying you once completed.

Depending on your jurisdiction, you may also have the following rights:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your data (subject to legal obligations)
• Portability: Request transfer of your data in a machine-readable format
• Objection: Object to certain data processing activities

To exercise any of these rights, contact us at contact@rcagents.space.

8. Meta Platform Compliance

RC Agents complies with Meta Platforms' Platform Terms, Developer Policies, and Community Standards. We ensure that:

• User data obtained through Meta APIs is used only for the approved integration purpose
• We do not sell Meta-sourced data or use it for ad targeting without explicit consent
• We implement appropriate access controls for Meta-sourced data
• We promptly delete Meta-sourced data upon account termination or when no longer necessary
• We maintain clear Privacy and Terms pages as required by Meta App Review

9. Children's Privacy

Our platform is not intended for individuals under the age of 13 (or the equivalent minimum age in their jurisdiction). We do not knowingly collect personal data from children. If we become aware of such collection, we will take steps to delete the information promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised "Last updated" date. Continued use of the platform after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: contact@rcagents.space
• Operator: Chabni Reda-El-Mustapha
• Location: Tlemcen, Algeria