Privacy Policy

FKC-OmniChannel (“we”, “us”, “our”) is an omnichannel customer messaging platform that helps businesses unify conversations from WhatsApp, Instagram, Facebook Messenger, and web chat into a single workspace. You can reach us at privacy@fkc-omnichannel.com.

When you sign up and use FKC-OmniChannel we may process:

• Account data — your email address, name, profile photo, and authentication identifiers from sign-in providers (Google, magic link).
• Workspace data — the organisations you create, team members you invite, and connected integrations.
• Channel credentials — encrypted access tokens for Meta Pages, Instagram accounts, WhatsApp Business Accounts, and Shopify stores you choose to connect. Stored AES-GCM-encrypted at rest.
• Conversation data — inbound and outbound messages flowing through the channels you connect, plus metadata (sender ID, timestamps, read receipts) needed to deliver them.
• Usage data — IP address, browser/device, page-load timings, and audit-log entries for security-sensitive actions.
• Billing data — your plan, subscription status, and billing identifiers. Payments are handled by Shopify or Stripe; we receive confirmation and invoice metadata but never your full card number.

• To operate the inbox, run AI-powered replies and workflows you configure, and deliver messages back to the original channels.
• To authenticate you and protect your account (rate-limiting, anomaly detection, audit logs).
• To meet legal and contractual obligations.

We do not sell your data or use your customers' message content to train third-party AI models.

We share data only with these categories of processors, under contract:

• Cloudflare — hosting (Workers, D1, R2, Vectorize).
• Meta Platforms — only as necessary to deliver messages on the channels you connect.
• Resend — transactional email (magic links, alerts).
• Shopify — billing for merchants on a paid plan who install via Shopify, and product/order sync for connected stores.
• Stripe — card payments for standalone (non-Shopify) paid accounts.
• OpenAI (optional, per-workspace) — if you enable AI features with your own API key.

The Starter plan is free. For paid plans, payments are processed by Shopify (for merchants who install via Shopify) or by Stripe (for standalone accounts). These processors handle your card details under their own privacy policies; we do not see or store your full card number. We retain only the billing metadata needed to run your subscription. How charges, cancellations, and refunds work is described in our Refund Policy.

We keep workspace and conversation data for as long as your account is active. You can request deletion at any time — see our Data Deletion page.

Depending on where you live (GDPR, CCPA, etc.) you may have rights to access, correct, export, or delete your personal data. Email privacy@fkc-omnichannel.com and we'll respond within 30 days.

Sessions are encrypted in transit (TLS) and at rest. Integration access tokens use AES-GCM with a per-deployment master key. Webhook payloads are HMAC-verified before processing. No system is perfectly secure — if you suspect a breach involving your account, notify security@fkc-omnichannel.com.

We may update this policy. Material changes will be notified to active workspace owners by email at least 30 days in advance.