Privacy Policy

Last updated: 20 October 2026

This policy explains what we collect about you and about the people who message you in Engage Chats, why, who receives it and how long it stays. It describes what actually happens in the product, not what might happen one day.

Who is responsible for the data

• Engage is a pilot independent software project, and its operator is responsible for your account data. For anything about your privacy, write to info@byengage.com.
• Your customers’ messages come from channels you choose to connect, and we process them on your behalf only to provide the service to you.

What we collect about you

• Account data: your email, name, photo, identifier and username, from signing in with an Engage account.
• Your business profile: what you write about your business, services, prices and hours so replies can be written from it.
• Your channels: the identifier of each account you connect, and your email connection details with the app password encrypted.
• Subscription: your plan, subscription status and renewal dates, and transaction identifiers at the payment provider. We never receive or store your card number.
• Your settings: whether “Cover for me” is on, who you have blocked, and your public page settings.
• Notification devices: if you turn on notifications, we keep your browser’s notification address and your device type.

What we do with your customers’ messages

• We read them at the source: we fetch your messages, comments and reviews from the channel-connection provider, and your email from your mail server, when you open your inbox, and every minute if “Cover for me” or notifications are on.
• We keep no copy of your inbox: what we fetch stays in the server’s memory for less than a minute to show it to you, and is not written to our database.
• Reply log: for each message you replied to, or that we suggested a reply for, we keep the sender’s name, a short excerpt of their message, the reply or draft text, the assistant’s classification, the platform and the time. The “Welcome back” summary is built from it, and it is deleted automatically after thirty days.
• Messages on your public page and between Engage members: we keep the conversation itself, because we carry it rather than another platform: the last 300 messages of each conversation on your page, and the last 500 between members.

People who message you on your public page

• They sign in with an Engage account to send, through Google or an email link.
• We keep their name, verified email and messages. The page owner sees them and may use AI to help reply.
• They receive the conversation link by email, and it opens the conversation for whoever has it.
• A draft of their message is kept in their own browser until they send it, then removed.

Why we collect it

• To run the service: your inbox cannot be shown or a reply suggested without processing the messages.
• To apply your plan and its limits, and to issue your invoices.
• To prevent abuse and protect the service from being drained.
• To contact you about your account or subscription.

Who receives any of the data

• Google: sign-in. Your basic details reach us from it when you sign in.
• Hosting and database: in Europe. They hold what is described above.
• Channel-connection provider: contracted by Engage. It holds the access to your connected accounts, carries your messages, comments, reviews and replies, and keeps them according to its own policy.
• Your mail server: we read from it and send through it with the app password.
• AI text processing: receives the message text and the sender’s display name, the latest messages of the conversation and your business profile, to classify the message and suggest a reply. It does not use them to improve its models, and keeps them only in abuse-monitoring logs for a limited time.
• Browser push services: carry the notification encrypted, with the sender’s name and the first line of the message.
• Dodo Payments: sales, payment and invoicing. It receives your email and identifier to link the payment to your account, and it alone sees your card.
• Google Analytics, Microsoft Clarity and Affonso: on the landing page and blog only, not inside the app. Clarity and Affonso load only after you accept the cookie bar; until then Google Analytics counts the visit without cookies.
• A list of providers by name is available on request at info@byengage.com.
• We do not sell your data or your customers’ data, share it for advertising, or train any model on it.

Transfers outside your country

Our hosting and database are in Europe. The AI and channel-connection providers process what they receive in the United States and other regions, so using the service means some data is processed outside your country.

How long it stays

• Your account data, business profile and settings: as long as your account exists.
• The reply log and message excerpts: thirty days, then deleted automatically.
• Conversations on your public page and member messages: as long as your account exists, within the limits above.
• Your connected email details: until you disconnect it, when they are erased immediately.
• A connected social account: until you disconnect it, when we stop reading from it and remove its connection at the provider.
• Subscription and payment records: as long as accounting rules require.
• Technical logs at the hosting provider: thirty days.
• When you ask us to delete your account at info@byengage.com: we delete all your data within thirty days.

Your rights

• Wherever you live, you can access your data, correct it, ask for it to be deleted or for a copy, and object to a particular use.
• You edit your business profile and settings yourself, disconnect channels from the Channels page, and ask us to delete your account at info@byengage.com.
• For a copy of your data or any other request, write to info@byengage.com and we will act within thirty days.
• You can complain to the data protection authority where you live if you think we have not treated you fairly.

Cookies and local storage

• One session cookie keeps you signed in and remembers your language.
• Local storage in your browser keeps your theme and language, your choice in the cookie bar, and the draft on a public message page until you send it. Nothing in it reaches us.
• Google Analytics and Microsoft Clarity cookies, and an Affonso cookie for thirty days if you arrive from a partner link, on the landing page and blog only, and only after you accept the cookie bar. You can change your choice at any time from "Cookie settings" at the bottom of the page.
• We set no advertising cookies and take part in no cross-site tracking.

Children

Accounts are for people aged 18 and over. We do not knowingly collect children’s data, and if we learn of a child’s account we delete it.

Security

• Connections to the service are encrypted, storage is encrypted, and your email password is encrypted again on top of that and never shown to anyone.
• Every request in the app is limited to your own account, so one account cannot read another’s data.
• No system is perfectly secure. If a breach affects your data, we will tell you what we know and what we have done without delay.

Changes to this policy

We may update this policy. A substantial change will be announced before it takes effect, and the date of the latest update is shown at the top of the page.