Privacy Policy
Legentic Global Inc. ("Legentic", "we", "us", or "our") provides multi-channel customer communication software and autonomous AI representative infrastructure. Protecting the privacy, confidentiality, and sovereignty of your organizational data and your end customers' communications is foundational to how we engineer our platform.
1. Information We Collect
When you create an account, connect messaging channels, or operate a workspace on Legentic, we collect and process the following categories of data:
- Account & Registration Information: Workspace administrator name, verified email address, mobile phone number, organization name, and billing details processed securely via certified payment gateways.
- Channel Credentials & Identifiers: Public Facebook Page identifiers, Instagram Business account handles, WhatsApp Business phone numbers, and official OAuth authorization tokens granted via Meta's secure permission workflows.
- Customer Messaging Data: Inbound message transcripts, sender phone numbers or social media handles, automated and manual staff replies, appointment scheduling metadata, and customer inquiry tags.
- Knowledge Base & Grounding Documents: Documentation, product catalogs, service rate sheets, pricing guidelines, and operating procedures uploaded to ground your AI representatives in verified facts.
- Technical & Telemetry Data: IP addresses, browser types, session timestamps, and system logs generated during access to the Legentic console.
2. How We Use Information & Model Sovereignty
Information processed through Legentic is utilized strictly to provide, maintain, and support our omnichannel communications software:
- Delivering instant, grounded customer responses across WhatsApp, Instagram, Messenger, and your website according to your configured business rules.
- Maintaining unified real-time thread history in your workspace Live Inbox for human agent supervision and 1-click takeover.
- Facilitating appointment bookings, qualification workflows, and CRM webhook event dispatches.
- Zero Third-Party Model Training: We never sell, rent, monetize, or disclose your private customer conversations or uploaded knowledge base files to train or fine-tune public foundation AI models.
- Zero Advertising Exploitation: We do not profile your customers for third-party behavioral advertising or data brokering.
3. Data Retention Schedules
In adherence to global data protection laws (including GDPR and CCPA/CPRA), we retain personal data only for as long as strictly necessary to fulfill operational commitments:
| Data Category | Active Retention Window | Purge & Deletion Trigger |
|---|---|---|
| Conversation History | Duration of active subscription | Permanently purged within 30 days of workspace termination or upon written request. |
| Channel OAuth Tokens | While channel remains connected | Immediately invalidated and erased upon channel disconnection or Meta callback. |
| Knowledge Base Files | While stored in workspace settings | Completely deleted within 24 hours of deletion from workspace documents by the administrator. |
| Security & Audit Logs | 90-day rolling retention window | Automatically expired, overwritten, and anonymized after 90 days. |
4. Consumer Privacy Rights (GDPR & CCPA / CPRA)
Depending on your jurisdiction (such as the European Economic Area, United Kingdom, or California), you and your authorized customers hold fundamental legal rights regarding personal data:
- Right to Access & Portability: You may request an export of all personal data held in your workspace in a machine-readable format.
- Right to Rectification: You may correct inaccurate or incomplete customer information directly in your Live Inbox contact records.
- Right to Erasure ("Right to Be Forgotten"): You may request the permanent deletion of customer records or an entire workspace at any time via our automated data deletion endpoints or by contacting us.
- Right to Restrict or Object to Processing: You may disable automated AI processing at any time by toggling off active channels or utilizing 1-click human takeover.
- Do Not Sell or Share My Information: Legentic does not sell or share personal information for monetary or cross-context behavioral advertising consideration.
- Non-Discrimination: We will never deny service, charge different rates, or provide lower-quality platform functionality because you exercise statutory privacy rights.
5. Data Security & Tenant Isolation
We implement rigorous technical and organizational safeguards designed to protect personal data against accidental loss, unauthorized alteration, or unlawful disclosure:
- Logical multi-tenant isolation ensuring that organization data is strictly partitioned and inaccessible to other tenants.
- End-to-end data encryption in transit via TLS 1.3 cryptographic suites and at rest across all workspace datastores.
- Continuous monitoring, cryptographic webhook verification on all Meta payload deliveries, and automated vulnerability scanning.
6. Contact Our Privacy & Data Protection Team
If you have questions regarding this Privacy Policy, wish to execute an access or deletion request, or require a signed Data Processing Addendum (DPA), please contact our privacy compliance team at privacy@legentic.io.