← Back to Home

Privacy Policy

Last updated: June 2026

1. Introduction

PorukeAI ("Company", "we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

2. Information We Collect

We collect information in the following ways:

2.1 Account Information

  • Username and email address (required for registration)
  • Full name (optional)
  • Password (hashed and never stored in plain text)
  • Account creation and login timestamps

2.2 Facebook Data

  • Facebook profile information (name, email, user ID)
  • List of connected Facebook pages and page IDs
  • Page access tokens (used only for API communication)
  • Customer conversations and messages

2.3 Conversation Data

  • Customer messages sent to your Facebook pages
  • Bot responses (AI-generated)
  • Conversation timestamps and metadata
  • Customer names and contact information shared in conversations

2.4 Lead Data

  • Customer names and phone numbers
  • Product interests and purchase intent
  • Lead timestamps and source pages
  • Optional: Email addresses (if provided)

2.5 Session Data

  • Session tokens (secure, 24-hour expiration)
  • Login timestamps
  • Account activity logs

3. How We Use Your Information

We use collected information for:

  • Service Delivery: Managing chatbots, processing messages, and responding to customers
  • Lead Management: Organizing and tracking customer interests
  • AI Processing: Sending conversation context to Claude AI for response generation
  • CRM Integration: Forwarding leads to connected CRM systems (if authorized)
  • Analytics: Understanding usage patterns and improving the platform
  • Communication: Sending service updates and support messages
  • Security: Preventing fraud and protecting against unauthorized access

4. Data Sharing and Third Parties

We do NOT sell your data. However, we share information with:

  • Anthropic (Claude AI): Conversation context is sent to generate responses. No conversation data is stored by Anthropic.
  • Stepmode CRM (Optional): If you enable CRM integration, we send lead data (name, phone, product) to Stepmode for contact management.
  • Facebook: We authenticate through Facebook and use their APIs to retrieve page data and send messages.
  • Service Providers: We use MySQL databases and Redis caching for data storage and retrieval.

5. Data Security

We implement the following security measures:

  • Bcrypt password hashing with salt (passwords never stored in plain text)
  • Secure session tokens with cryptographic randomness
  • 24-hour session expiration for automatic logout
  • HTTPS/TLS encryption for all data in transit
  • Database access controls and role-based permissions
  • Redis caching with TTL-based cache invalidation

While we strive to protect your data, no security system is impenetrable. You are responsible for maintaining confidentiality of your account credentials.

6. Data Retention and Deletion Options

Account Data: Retained for the duration of your account. Deleted 30 days after account termination or deletion request.

Conversation History: Stored indefinitely for bot improvement and customer management. You can delete conversations for individual Facebook profiles or request full deletion at any time through your dashboard.

Lead Data: Retained as long as you use the platform. Can be exported or deleted per your request via the dashboard or by deleting the associated Facebook profile.

Session Data: Automatically deleted after 24 hours of creation or upon logout.

Deletion Timelines: When you delete a Facebook profile from the dashboard, data is deleted immediately. When you request data deletion through Facebook, our system processes the deletion within 24 hours.

7. Your Rights and Data Deletion

You have the right to:

  • Access all personal data we hold about you
  • Correct inaccurate information
  • Request deletion of your data (account termination)
  • Disable third-party integrations (Facebook, CRM) at any time
  • Export your conversation and lead data
  • Opt-out of optional data processing

7.1 How to Delete Your Facebook Profiles

You can delete individual Facebook profiles directly from your dashboard in the FB Profili (Facebook Profiles) section:

  • Navigate to the Facebook Profiles page
  • Click the "Ukloni" (Remove) button on the profile you wish to delete
  • A confirmation modal will show what data will be deleted
  • Confirm the deletion

When you delete a profile, the following data is permanently and immediately removed:

  • Facebook profile information and access tokens
  • All connected Facebook pages
  • All conversations and messages for those pages
  • All leads associated with those pages

7.2 Facebook Data Deletion Callback (GDPR Compliance)

When you delete your Facebook account or request data deletion through Facebook's account settings, Facebook automatically notifies PorukeAI via a secure callback. Our system immediately processes this request and deletes:

  • Your Facebook profile information (name, email, ID)
  • All associated Facebook pages and tokens
  • All conversation history
  • All leads and customer data

This deletion is completed within hours and provides full GDPR compliance.

7.3 Full Account Deletion

To delete your entire PorukeAI account and all associated data, contact our support team through the dashboard. We will delete:

  • Your user account (username, email, hashed password)
  • All Facebook profiles and pages
  • All conversations and messages
  • All leads and customer data
  • All sessions and login history

This action is irreversible. Your data will be permanently deleted within 30 days of the request.

8. Cookies and Tracking

PorukeAI uses session cookies to maintain your login state. These cookies are secure, HttpOnly (not accessible to JavaScript), and expire after 24 hours. We do not use tracking cookies or third-party analytics that collect personal data.

9. AI and Automation

Your conversations are processed by Claude AI (Anthropic) for response generation. This processing:

  • Is necessary for the chatbot to function
  • Does not train Claude's base models on your data
  • Is subject to Anthropic's privacy policy
  • Can be disabled by not using the AI response feature

10. Children's Privacy

PorukeAI is not intended for users under 13 years old. We do not knowingly collect data from children. If we discover a child has registered, we will delete their account immediately.

11. Policy Updates

We may update this privacy policy at any time. Significant changes will be notified via email. Continued use after updates constitutes acceptance of the new policy.

12. Contact Us

For privacy concerns, data access requests, or deletion requests, please contact us through the PorukeAI dashboard or email us directly. We will respond within 30 days.

13. Compliance

PorukeAI complies with applicable data protection laws and regulations. If you have concerns about our practices, you have the right to lodge a complaint with your local data protection authority.