Privacy Policy

Welcome to Pomeg AI. This Privacy Policy explains how Pomeg AI ("Pomeg AI", "we", "our", or "us") collects, uses, stores, and protects your personal information when you access or use our platform, website, AI tools, social media management features, and related services (collectively, the "Platform").

Pomeg AI is operated from Bangladesh and serves users both in Bangladesh and internationally. By using the Platform, you agree to the practices described in this Privacy Policy.

1. Information We Collect

1.1 Account Information

When you register for an account, we collect:

• Full name
• Email address
• Business or organisation name
• Password (stored in encrypted form; we never see your raw password)

1.2 Social Media & Third-Party Integration Data

When you connect third-party platforms such as Facebook, Instagram, LinkedIn, or others through OAuth, we may collect and store:

• Platform account or page ID and name
• Access tokens (encrypted at rest) required to act on your behalf
• Profile picture URL
• Permissions you have explicitly granted to our app
• Posts, comments, and messages associated with connected accounts, only to the extent necessary to provide the service

We access only the data you authorize and operate strictly within the permissions granted by you and the policies of each third-party platform. We do not access private content beyond what is required to deliver the specific features you have enabled.

1.3 Content You Create or Upload

We may store content you create or upload through the Platform, including:

• Social media posts, captions, and media files
• Knowledge base documents and files uploaded to train AI responses
• AI chat conversation history
• CRM records, lead information, and contact details you enter

1.4 Phone & Voice Data

If you use AI phone agent features, we may process:

• Phone numbers associated with your account or inbound callers
• Call timestamps and duration
• AI-generated call transcripts or summaries (where enabled)

Calls are processed solely to deliver the service and for quality assurance. Call data is not sold or shared with third parties for advertising purposes.

1.5 Usage & Technical Data

We automatically collect certain technical information when you use the Platform:

• IP address and approximate location (country/city)
• Device type, browser type, and operating system
• Pages visited and features used within the Platform
• Timestamps and session activity logs

This data is used for security, performance monitoring, and product improvement only.

2. How We Use Your Information

We use the information we collect to:

• Operate, maintain, and improve the Platform and its features
• Authenticate your identity and manage your account
• Connect and manage third-party social media integrations on your behalf
• Publish, schedule, and manage posts to your connected social accounts
• Provide AI-powered responses to comments and messages
• Deliver AI assistant, content generation, CRM, and phone agent services
• Send important service-related notifications (e.g., billing, security alerts)
• Detect, investigate, and prevent fraud, abuse, or security incidents
• Comply with applicable legal and regulatory obligations

We do not use your personal data or your connected social account data for advertising, profiling, or selling to third parties.

3. Meta Platform Data, Special Disclosure

Pomeg AI integrates with Meta platforms (Facebook and Instagram) to provide social media management features. When you connect a Facebook Page or Instagram account, the following applies:

• Data accessed: We access only the permissions you grant, including page content, comments, and messages where explicitly enabled by you.
• Data use: Meta platform data is used solely to provide the social media management features you have activated (posting, comment replies, DM management). It is not used for any secondary purpose.
• Data sharing: We do not share any Meta platform data with third parties, advertisers, or data brokers.
• Data retention: Access tokens from Facebook and Instagram are stored encrypted and are immediately invalidated and deleted as well as related social account data with that token will be deleted from our server when you disconnect a connected account.
• Data deletion: You may request deletion of all Meta-related data at any time. See Section 7 for instructions.

Our use of data obtained via Meta APIs is compliant with Meta's Platform Terms and Developer Policies.

4. Data Sharing & Disclosure

We do not sell, rent, or trade your personal data. We may share data only in the following limited circumstances:

• Service providers: Trusted third-party infrastructure providers (e.g., cloud hosting, database services, AI model providers) who process data on our behalf under confidentiality obligations.
• Legal requirements: When required by applicable law, court order, or government authority, we may disclose information as legally compelled.
• Business transfer: In the event of a merger, acquisition, or sale of assets, user data may be transferred as part of that transaction, with appropriate notice to users.

All third-party service providers are required to handle data securely and are prohibited from using your data for their own purposes.

5. Data Security

We implement industry-standard security measures to protect your data, including:

• Encryption of sensitive data (including access tokens) at rest and in transit (HTTPS/TLS)
• Secure, access-controlled infrastructure
• Regular security reviews and monitoring

While we take all reasonable precautions, no security system is 100% infallible. In the event of a data breach that affects your personal information, we will notify you promptly in accordance with applicable laws.

6. Data Retention

• Account data is retained for as long as your account remains active.
• When you disconnect a social media account, associated access tokens are immediately deleted.
• Social account data (messages, comments, posts, etc.) collected via integrations are retained until you disconnect the connected account.
• Upon account deletion, all personal data is permanently deleted within 30 days, except where retention is required by law.
• Backup copies may be retained for up to 90 days following deletion for disaster recovery purposes, after which they are purged.

7. Your Rights & Data Deletion

Regardless of your location, you have the right to:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request that inaccurate or incomplete data be corrected.
• Deletion: Request that your personal data be deleted from our systems.
• Withdraw Consent: Disconnect connected social accounts or revoke permissions at any time.
• Data Portability: Request an export of your data in a readable format.
• Objection: Object to the processing of your data in certain circumstances.

To exercise any of these rights, or to request deletion of your data (including any data collected via Meta/Facebook/Instagram integrations), please visit our Data Deletion Instructions page or contact us at: info@pomegai.com

We will respond to all valid requests within 30 days.

8. Cookies

We use essential cookies to operate the Platform (authentication, session management) and optional analytics cookies to improve performance. For full details, see our Cookie Policy.

9. International Users

The Platform is operated from Bangladesh and is available to users internationally. If you are located in the European Union, United Kingdom, or other regions with data protection laws (such as GDPR, UK GDPR, CCPA, or equivalent), we make reasonable efforts to respect those frameworks to the extent applicable. By using the Platform from your jurisdiction, you acknowledge that data may be processed and stored in Bangladesh and accept the practices described in this policy.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will update the "Last updated" date at the top of this page. Continued use of the Platform after such changes constitutes your acceptance of the updated Policy.

11. Contact Us

Company: Pomeg AI

Address: House 9, Road 12, Block D, Section 12, Mirpur, Dhaka 1216, Bangladesh

Email: info@pomegai.com