Labbay AI — Privacy Policy

NASRIDDINOV XOJIAKBAR operating as Labbay AI ("we", "our", "us") provides an autonomous AI sales assistant and customer relationship platform designed for businesses selling through Instagram Direct Messages. This Privacy Policy explains what data we collect, why, and how it is securely handled.

1. Information We Collect

• Business account data: Name, email address, password hash, and AI selling settings configured by the business owner.
• Instagram Integration data: Connected Instagram Professional / Business account ID, access tokens (encrypted at rest), account username, and Direct Message inquiries exchanged between customers and the business account to allow the AI to generate relevant responses.
• Customer data: Instagram-scoped user ID, username, and contact phone number if voluntarily provided by the customer during the conversation for order placement and sales qualification.
• Product Catalog data: Product titles, prices, descriptions, images, and inventory stock availability uploaded by the business.
• Telegram Integration data: Telegram chat ID used solely to deliver real-time hot lead alerts to the business owner.

2. How We Use Information

• To generate automated, grounded AI responses to customer product inquiries in Instagram Direct on behalf of the business.
• To qualify buying intent and immediately notify the business owner of hot sales opportunities.
• To provide the centralized CRM dashboard for managing products, conversations, and sales leads.

We do not sell, rent, or monetize your data or your customers' data to any third parties or data brokers.

3. Third-Party Service Providers

• Meta Platforms, Inc. / Instagram Graph API — Primary messaging channel and webhook delivery.
• OpenRouter / LLM Providers — Natural language processing to generate catalog-grounded sales replies.
• Cloudflare R2 — Secure cloud object storage for product images.
• Telegram API — Direct delivery of urgent sales lead notifications to business operators.

4. Data Retention & User Rights

Business data is retained as long as your account remains active. You may request full deletion of your account, integration tokens, and all associated conversation history at any time by emailing us at support@nasriddinov.dev.

5. Security Standards

All OAuth tokens and sensitive credentials are encrypted at rest using industry-standard cryptography. All network communications are encrypted in transit via TLS/HTTPS. Multi-tenant isolation ensures each business's data is strictly separated.

6. Contact Information & Data Controller

For privacy inquiries, data deletion requests, or compliance questions, please contact:

NASRIDDINOV XOJIAKBAR (Labbay AI)
Address: Obod MFY, Guliston ko'chasi, 5-uy, Uchqo'rg'on tumani, Namangan viloyati, 160100, Uzbekistan
Email: support@nasriddinov.dev
Website: https://mivo.nasriddinov.dev