Privacy Policy

1. Information we collect

We collect information needed to operate Bonalta AI, including:

• Account information such as name, email address, organization, role, authentication status, and workspace membership.
• Customer conversation data such as messages, voice transcripts, inbound sender identifiers, contact details, appointment requests, lead details, emergency flags, and operator notes.
• Connected channel data from services such as Facebook Pages, Messenger, Instagram professional accounts, WhatsApp Business, Twilio, and embedded web chat, when an authorized business user connects those channels.
• Technical data such as webhook payloads, delivery status, access token status, provider account identifiers, request metadata, audit logs, and error diagnostics.

2. How we use information

We use information to:

• Route customer conversations into the correct business workspace.
• Let AI agents answer routine questions, qualify leads, and summarize conversations for human operators.
• Enable authorized users to send and receive messages through connected channels.
• Manage appointments, emergency escalation, lead follow-up, and human takeover workflows.
• Secure the product, verify webhook signatures, prevent abuse, troubleshoot provider errors, and maintain audit trails.
• Comply with legal, security, platform, and contractual obligations.

3. SMS and mobile messaging privacy

Bonalta AI is operated by BONALT IT CONSULTING LLC. If you provide a mobile phone number, text a connected Bonalta AI number, or request an SMS follow-up from a business using Bonalta AI, your number and message content may be processed to deliver customer-care replies, appointment-related messages, account or conversation notifications, and requested follow-up details.

Message frequency varies based on your requests and conversation activity. Message and data rates may apply. You can opt out of SMS messages at any time by replying STOP. You can reply HELP for help or contact us at [email protected].

We do not sell, rent, or share mobile phone numbers, SMS consent, or SMS opt-in data with third parties for their own marketing or promotional purposes. We may share SMS-related data with messaging providers, carriers, hosting vendors, security vendors, and other service providers only as needed to operate, secure, troubleshoot, and deliver the messaging service, or as required by law.

4. Meta platform data

If a business connects Meta channels, Bonalta AI may process data from Facebook Pages, Messenger conversations, Instagram professional messaging, and WhatsApp Business assets, depending on which channels the business enables and which permissions are approved by Meta.

We use Meta platform data only to provide the business messaging and customer operations features requested by the connected business. We do not sell Meta platform data. We do not use Meta platform data for unrelated advertising profiles. Access is limited to authorized workspace users and systems needed to operate the service.

5. AI processing

Bonalta AI may send conversation content, business knowledge, and related context to AI model providers selected for the product in order to generate replies, summaries, classifications, or routing recommendations. Human operators remain responsible for reviewing and taking over sensitive conversations where appropriate.

Businesses should not intentionally submit highly sensitive personal data unless it is necessary for the support interaction and permitted by their own policies and applicable law.

6. Sharing and service providers

We share information with service providers only as needed to operate Bonalta AI. These may include hosting, database, authentication, messaging, telephony, storage, analytics, logging, and AI model providers. We may also disclose information if required by law, to protect rights and security, or as part of a business transfer subject to appropriate safeguards.

7. Retention

We retain account, workspace, conversation, and audit data for as long as needed to provide the service, meet operational requirements, resolve disputes, enforce agreements, and comply with law. A business administrator may request deletion of workspace data as described in our Data Deletion Instructions.

8. Security

We use administrative, technical, and organizational safeguards such as authenticated access, role-based authorization, webhook signature validation where supported, encrypted secret storage, audit logging, and least-privilege operational practices. No internet service can be guaranteed completely secure, but we work to protect data against unauthorized access, misuse, and loss.

9. Your choices and rights

Depending on your location, you may have rights to access, correct, delete, export, or restrict processing of personal information. To exercise these rights, contact us using the email below. If your data was submitted by a business using Bonalta AI, we may direct you to that business because it controls the customer relationship.

10. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the effective date and, when appropriate, notify affected users or business administrators.