Privacy Policy

Information you give us when you use our contact form or email us: your name, business name, email address, phone number and the content of your message.

Messenger information. When a business connects its Facebook Page to Nollon AI and you send that Page a message, we may process:

• your Page-scoped ID (an identifier Meta provides for that Page) and the name shown on your profile, where provided by Meta;
• the content of messages you send to the Page and the replies sent to you;
• any details you choose to share in the conversation, such as contact information or dates;
• the date and time of each message.

Business account information for businesses that use Nollon AI: account login details, the Facebook Pages they authorise, and the access tokens Meta issues for those Pages.

Technical information such as IP address, browser type and basic usage logs needed to keep the service secure. [Confirm whether analytics or cookies are used, and which.]

• to reply to your enquiries and provide our services;
• to receive, understand and respond to messages sent to a business's Facebook Page on that business's behalf;
• to organise enquiries so the business can follow up with you;
• to keep the service secure, prevent misuse and fix errors;
• to meet legal obligations.

Messenger data is processed only for businesses that have connected their Facebook Page through Meta's official login, and only to respond to customers and manage those conversations. We do not sell Messenger data, use it for advertising, or share it with data brokers. Our use of data received from Meta follows Meta's Platform Terms and Developer Policies.

When a business uses Nollon AI, that business decides why your messages are processed. [Confirm roles: whether the business is the data controller and Nollon acts as its processor.]

[State the legal bases that apply in your jurisdiction, for example: legitimate interests in responding to enquiries, performance of a contract, consent, and legal obligations.]

• Data is stored with [hosting provider] in [region].
• Connections use HTTPS. Access tokens are encrypted and kept on our servers; they are never shown in the browser.
• Access to personal information is limited to people who need it.
• We keep personal information for [retention period], or until you or the business ask us to delete it, unless the law requires us to keep it longer.

We use trusted providers to run the service. They may process personal information on our behalf only to provide their service to us:

• Meta Platforms, Inc.: delivers Messenger messages between customers and connected Pages.
• [AI model provider]: processes message text to understand it and draft replies.
• [Hosting / database provider]: stores the application and its data.
• [Email provider]: sends replies to contact-form enquiries.

[Confirm the final list of providers and whether any transfer data outside your country.]

You can ask us to access, correct or delete your personal information, or object to how it is used. [Add any rights specific to your jurisdiction.]

To request deletion, follow the steps on our Data Deletion Instructions page or email nollon@travelcompany.com. We will respond within [number] days.

Our services are intended for businesses and are not directed at children under [age].

We may update this policy. The date at the top shows when it was last changed.

[Registered Company Name], [Registered business address]. Email: nollon@travelcompany.com. Phone: [Business phone number].