Legal
Privacy Policy
This policy explains how the Margetli service processes information when businesses use its Facebook Messenger and Facebook Page sales-assistance features. The business operating the connected Facebook Page also controls how it communicates with its customers and may provide additional privacy information.
Information we process
Merchant information
- Account and authentication information, including protected credential and session records.
- Connected Facebook Page and channel identifiers.
- Business configuration, products, variants, prices, availability, source mappings, and sales policies.
Customer interaction information
- Page-scoped Messenger or Facebook identifiers and names supplied by Meta.
- Messages and comments received through a connected business Page.
- Product questions, conversation history, cart contents, and order details.
- Name, phone number, and delivery address when voluntarily provided for an order.
Operational information
- Conversation and human-handoff state, delivery status, duplicate-prevention identifiers, and limited error or diagnostic metadata.
Why we process information
We process information to route and answer supported inquiries, present merchant-provided product and policy information, manage carts and confirmed orders, provide the merchant Inbox, enable human takeover, deliver permitted replies, prevent duplicate actions, protect accounts, and diagnose service failures.
AI processing
Where a response requires language generation, DeepSeek may process a bounded portion of the conversational context and relevant merchant-provided facts. Authoritative prices, availability, cart changes, and orders are controlled by application logic and the merchant’s data, not by the language model.
Sharing
We do not sell personal data. Information may be processed by Meta to provide Facebook services, by DeepSeek for bounded language processing where required, and by infrastructure providers used to host and secure Margetli. We may disclose information where required by law or necessary to protect users and the service.
Credentials and security
Facebook access tokens and service secrets are held server-side and are not exposed to merchants or customers. We use encrypted transport, access controls, tenant separation, managed secret storage, restricted network services, and logging designed to exclude credentials. No system can guarantee absolute security.
Retention
Information is retained according to operational needs, merchant instructions, security needs, dispute resolution, and applicable legal obligations. Formal category-specific retention periods have not yet been approved and must be defined before commercial launch. We do not invent a fixed retention period here.
Your choices and rights
Depending on your relationship with the Page and applicable law, you may ask to access, correct, delete, or restrict relevant information. You may also remove an authorized integration through Facebook settings. We may need to verify identity and the relevant Page before acting.
Deletion requests and contact
Follow our Data Deletion Instructions. For other privacy or support questions, use the route described on our Support page.
Changes
We may update this policy as the service or its legal obligations change. The effective date above identifies the current version.