Privacy Policy

Information we collect

We collect the following categories of information:

Business account data

• Name, email address, and a securely hashed password (or your sign-in provider).
• Workspace and team details, including teammates you invite and their roles.

Data received from the Meta Platform (Facebook & Instagram)

When a business connects a Page or Instagram Business account, we receive and store, for the accounts it explicitly connects:

• Page and account details (name, ID) and the access tokens needed to operate them.
• The messages exchanged with the Page — message text, attachments (such as images), timestamps, and message metadata.
• Limited information about the person messaging the Page: their display name and their Page-scoped ID (PSID) or Instagram-scoped ID. We do not collect a person's broader Facebook or Instagram profile.

Technical data

• Cookies strictly necessary to keep you signed in. We do not use advertising or cross-site tracking cookies.
• Basic security and diagnostic logs (e.g. error events).

How we use information

• To operate the inbox: display incoming messages to the connected business's authorized team and let them reply on behalf of the Page.
• To provide optional AI-assisted features the business turns on — drafting suggested replies, classifying message intent, and sending auto-replies — and analytics about the business's own conversations.
• To send messages the business initiates within Meta's standard messaging window, honoring opt-outs.
• To secure the service, provide support, and meet legal obligations.

We use and transfer information received from the Meta Platform in accordance with the Meta Platform Terms and Developer Policies, including their limited-use requirements. We do not sell personal information, and we do not use Meta Platform data for advertising or to build profiles.

How we share information

We do not sell your data. We share it only with service providers that help us run Rendevoo, each bound to protect it and use it only for that purpose:

• Meta Platforms — the source of, and delivery channel for, the messages we process.
• Supabase — our database and authentication host, where account and message data is stored.
• Vercel — our application hosting provider.
• A third-party AI provider the business configures (such as OpenAI or Anthropic) — when AI-assisted features are enabled, message content is sent to that provider to generate suggested or automatic replies and to classify messages.

We may also disclose information if required by law, or to protect the rights, safety, and security of our users and the service.

Data retention and deletion

We retain a business's account data and the messages we process for that business while its account is active and as needed to provide the service. We delete or anonymize data when it is no longer needed for these purposes.

Requesting deletion. A business, or a customer who has messaged a connected Page, can request deletion of their personal data at any time by emailing admin@pvgcecom.com. We will verify the request and delete the relevant data within 30 days, except where we are required to retain it by law.

When a business disconnects a Page or deletes its Rendevoo account, the access tokens and the message and conversation data associated with that Page are deleted. If you remove Rendevoo from your Facebook or Instagram account, that connection is revoked.

Security

Data is encrypted in transit. Access tokens and credentials are stored server-side and are never exposed to browsers. Access to a workspace's data is restricted to its authorized members through database-level access controls. No method of transmission or storage is perfectly secure, but we work to protect your information using appropriate safeguards.

Your rights

Depending on your location, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise these rights, contact us at admin@pvgcecom.com. For data we process on a business's behalf, we will direct your request to that business where appropriate.

Children

Rendevoo is a business tool and is not directed to children. We do not knowingly collect personal information from children under 13 (or the minimum age required in your jurisdiction). If you believe a child has provided us information, contact us and we will delete it.

International transfers

Your information may be processed in countries other than your own, including by the service providers listed above. Where required, we rely on appropriate safeguards for such transfers.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above, and significant changes will be reflected on this page.

Contact us

If you have questions about this Privacy Policy or how we handle your data, contact Rendevoo at admin@pvgcecom.com.