Privacy Policy

This Privacy Policy describes how Elsa AI collects, uses, and protects information when you use our service. By using Elsa AI, you agree to the practices described in this policy.

1. Who We Are

Elsa AI is operated by FOP Iskra Andrii Mykhailovych (Individual Entrepreneur, Ukraine, registration number 3708009679), located at Soborna St. 41, Vinnytsia, Ukraine.

For any privacy-related questions, contact us at [email protected]

2. What We Collect

When businesses connect their Instagram, Facebook, or other messaging accounts to Elsa AI, we may collect and process:

• Business account profile information (username, account ID, profile picture)
• Incoming messages sent to the connected business account via Instagram Direct or other supported channels
• Message metadata (timestamps, message IDs, sender IDs)
• Account access tokens required to operate the integration
• Usage data and analytics related to conversation performance

We do not collect personal data from end-users beyond what is necessary to deliver and display messages within our platform.

3. How We Use the Data

Data collected through connected accounts is used exclusively to:

• Receive and display incoming messages in the Elsa AI dashboard
• Generate AI-assisted reply suggestions for sales managers
• Send responses on behalf of the connected business account
• Provide conversation analytics and sales reporting
• Sync data with connected CRM systems (if configured)

We do not sell, rent, or share your data with third parties for advertising or marketing purposes.

4. Instagram and Meta Platform Data

Elsa AI integrates with the Instagram Messaging API provided by Meta Platforms, Inc. When a business connects their Instagram account:

• We request only the permissions necessary to read and respond to Direct Messages (instagram_manage_messages, instagram_basic)
• Access is granted by the business account owner via OAuth and can be revoked at any time
• We comply with Meta's Platform Terms and Developer Policies
• Message data is not used to train AI models or shared beyond the scope described in this policy

5. Data Storage and Security

All data is stored on secure servers. We implement industry-standard technical and organizational measures to protect data against unauthorized access, loss, or disclosure. Access tokens are encrypted at rest.

We retain message data for as long as the business account is active on our platform, or as required by applicable law.

6. Your Rights

As a user of Elsa AI, you have the right to:

• Access the data we hold about your account
• Request correction of inaccurate data
• Request deletion of your data
• Disconnect your Instagram or other accounts at any time, which will stop further data collection

To exercise any of these rights, contact us at [email protected]

7. Third-Party Services

Elsa AI may integrate with third-party CRM platforms (such as KeyCRM, HubSpot, Pipedrive) at the user's request. Data shared with these services is governed by their respective privacy policies. We are not responsible for the practices of third-party services.

8. Cookies

Our web platform uses cookies and similar technologies to maintain user sessions and improve platform performance. You may disable cookies through your browser settings, though some features may not function properly as a result.

9. Children's Privacy

Elsa AI is a B2B platform intended for business users. We do not knowingly collect data from individuals under the age of 18.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of Elsa AI after changes constitutes acceptance of the updated policy.

---