Privacy Policy

Last updated: November 6, 2026

GisterChat is operated by OK Kenzo Innovatives Ltd. Contact us about privacy at Gisterchat@gmail.com.

What this service does

GisterChat helps businesses connect Facebook Pages and send automated replies in Messenger. We manage account information for the service and process Page conversation data to provide the automations configured by each business. The business operating a connected Page is responsible for its own use of customer information and messages.

Information we handle

• Account email, authentication information, and session cookies used to sign in. Password authentication is handled by Supabase.
• Authorized Facebook Page names, Page IDs, and encrypted Page access tokens.
• Reply templates, keywords, enabled settings, button labels, destination links, and media links entered by the business.
• Messenger sender IDs scoped to a Page, first-contact timestamps, and message identifiers used to recognize contacts and avoid duplicate processing.
• Incoming message text and event information processed to select a reply. The current application database does not store full conversation histories. A first name may be requested from Meta to personalize a reply where permitted.
• Technical request and error records handled by our hosting providers, and information you send when contacting support.

How we use information

We use information to authenticate users, connect selected Pages, send authorized replies, prevent duplicate processing, troubleshoot problems, protect the service, and respond to support and privacy requests. Saving a Messenger contact does not grant permission for unrestricted marketing. The current release does not include button click analytics.

Providers and sharing

We use Meta for Facebook and Messenger, Supabase for authentication and database services, and Vercel for hosting and operational logs. Data is shared with these providers as needed to deliver the service. Public media links and button destinations may be operated by third parties and have their own privacy practices. We do not sell personal information. We may disclose information where required by law or necessary to address fraud or security incidents.

Storage and international processing

Service providers may process information in multiple countries. The location of a database alone does not mean all processing stays in that country. Access tokens are encrypted before storage; access to account and Page data is restricted through authentication and ownership checks. No system can guarantee absolute security.

Retention and deletion

Account and connected-Page records remain while the account or connection is maintained, unless deleted sooner. Pending Page selections expire for use after 15 minutes and are removed on subsequent selection requests or reconnection; expiration is not an immediate physical purge. Disconnecting a Page deletes its saved connection, templates, contact records, and duplicate-message records from the active database. Deleting an account removes its account and dependent Page data.

Provider backups and operational logs may retain copies under their configured retention schedules. Removing data from GisterChat does not delete Facebook conversations or copies held by a business or other third parties. Contact us for details about retention or a particular deletion request.

Your choices and requests

You can disconnect Pages, delete your account, and withdraw Facebook permissions through Facebook Business Integrations. Revoking Facebook access alone may not remove stored GisterChat records. To request access, correction, or deletion, email us and identify the account or Page involved. We may request proportionate information to verify your authority; never send passwords or access tokens. Messenger users may also contact the business operating the Page.

See Data Deletion for instructions. We handle requests in accordance with applicable law and explain any necessary retention or inability to fulfill a request.

Changes

We will update this page when our practices change. Material changes will be communicated through the service or account email as appropriate.