Privacy Policy

To provide our AI auto-reply and sales agent features, we collect information from both merchants and end-customers:

• Merchant Account Data: Registration and authentication information, including name, email address, password hashes (managed securely via Firebase Auth), and billing details.
• Social Platform Access Tokens: When you connect a social platform (e.g., Facebook Messenger, Instagram, WhatsApp), we securely store the Page Access Tokens required to read messages and post replies.
• Conversation Logs: We store communication transcripts, including user messages, AI agent responses, product inquiries, cart statuses, and order details, to process auto-replies and show performance analytics.

We use the collected information for the following business operations:

• Providing the LangGraph & Gemini AI-driven automated chat sales services.
• Creating and managing product carts, checking stock availability, and creating merchant orders directly from conversation streams.
• Displaying performance metrics, response speed analytics, and message counts in the merchant dashboard.
• Ensuring security, debugging system issues, and preventing fraudulent usage.

We do not sell merchant or customer data. To deliver Oryxa's core functionality, data is processed through the following secure third-party systems:

• Meta APIs (Facebook & Instagram): We fetch messages and dispatch AI replies via the Meta Graph Send API.
• Google Gemini API: Message payloads are processed through Gemini LLM services to generate smart customer responses.
• Firebase Admin SDK: Used for secure auth session verification.
• Cloud Storage (Backblaze B2): To securely cache and serve product catalog and variant images.

Merchants retain full control over their integrations. When you disconnect a Facebook Page or delete a channel from Oryxa:

• We automatically call Meta APIs to unsubscribe our webhook from your Page events.
• Associated social access tokens and credentials are deleted or deactivated within our database.
• Merchants may request a complete hard delete of their business workspace, product lists, and historical conversation histories by contacting support.