Privacy Policy

Effective Date: July 1, 2026

1. Introduction

Welcome to NextCore AI ("we," "our," or "us"). We provide an AI-powered customer support and conversational agent platform that integrates with social messaging platforms like Facebook Messenger and WhatsApp Business.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our platform, or integrate our services with your business channels. By using NextCore AI, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

We collect information from you directly, automatically through your use of our platform, and from third-party integrations (such as Meta).

A. Information You Provide to Us

• Account Information: Name, email address, phone number, and account passwords.
• Business Information: Business name, descriptions, contact details, product catalogs, and media assets (images, videos, audio, text) uploaded to train or configure your AI agent.
• Payment Information: Billing details, transaction IDs (e.g., bKash, Nagad), and payment history. We do not store raw credit card numbers.
• API Keys: If you utilize the "Bring Your Own Key" (BYOK) feature, we securely collect and encrypt your third-party API keys (e.g., OpenRouter API key).

B. Information from Third-Party Integrations (Meta / Facebook / WhatsApp)

To provide our core services, you must connect NextCore AI to your Facebook Pages and WhatsApp Business accounts. We collect:

• Access Tokens: OAuth access tokens to manage your pages, read engagements, and send messages on your behalf.
• Page & Business Metadata: Facebook Page IDs, WhatsApp Business Account (WABA) IDs, and phone numbers.
• End-User Data: When your customers interact with your connected Facebook Page or WhatsApp number, we collect their platform-specific IDs (PSID), phone numbers, display names, profile pictures (if available), genders, and the content of their messages, comments, and attachments.

C. Automatically Collected Information

• Technical Data: We log your IP address, browser type, device information, and login timestamps for security and abuse-prevention purposes.
• Usage Data: Logs of AI agent activity, message volume, API usage, and subscription credit consumption.

3. How We Use Your Information

We use the collected information for the following purposes:

• Service Delivery: To operate your AI agents, process incoming messages/comments, and generate automated replies on Messenger and WhatsApp.
• AI Processing: To send chat contexts and your provided business knowledge to third-party Large Language Models (LLMs) to generate accurate responses.
• Account Management: To manage your subscription, process payments, and provide customer support.
• Security & Compliance: To monitor for unauthorized access, verify OAuth states, and ensure compliance with our Terms of Service and Meta's Developer Policies.
• Improvement: To analyze message volume and platform performance to improve NextCore AI.

4. How We Share Your Information

We do not sell your personal information or your end-users' data to third parties. We only share data in the following circumstances:

• AI Model Providers (e.g., OpenRouter): To generate AI responses, the content of incoming user messages and your business context are transmitted securely to our chosen LLM providers via API.
• Meta Platforms, Inc.: We transmit outgoing messages, product cards, and media back to Facebook and WhatsApp via the Meta Graph API.
• Service Providers: We may share necessary data with hosting providers, email delivery services, and payment processors to facilitate our operations.
• Legal Requirements: We may disclose your information if required to do so by law, or in response to valid requests by public authorities (e.g., a court or a government agency).

5. Data Security

We prioritize the security of your data:

• Encryption: Sensitive credentials, including Meta Platform Access Tokens and OpenRouter API keys, are strongly encrypted at rest using Fernet symmetric encryption.
• Secure Infrastructure: We use industry-standard security measures, including HTTPS, secure webhook verification (HMAC SHA-256 signatures), and environment variable protection to safeguard your data.
• Access Control: Access to your business profiles and conversation logs is strictly limited to authenticated users of your account.

Please note that no method of transmission over the internet or method of electronic storage is 100% secure, and we cannot guarantee absolute security.

6. Data Retention and Deletion

• Retention: We retain your account data, AI training data, and chat logs for as long as your account is active or as needed to provide you services.
• Deletion: You can delete specific AI agents, business profiles, and conversation logs directly from your NextCore AI dashboard. Deleting a business profile permanently removes all associated end-user chat logs, order histories, and comment logs from our database.
• Account Deletion: If you wish to completely delete your account and all associated data, please contact us.

7. Cookies and Tracking

We use cookies strictly for essential platform functionalities, such as:

• Keeping you securely logged in (Session Cookies).
• Protecting against Cross-Site Request Forgery (CSRF Tokens).
• Managing OAuth connection states during Facebook/WhatsApp integration.

8. Third-Party Policies

Your use of NextCore AI is also subject to the privacy policies of the platforms we integrate with. We strongly recommend reviewing:

• Meta Privacy Policy (covering Facebook and WhatsApp)
• OpenRouter Privacy Policy (or the policies of the specific AI models you select, such as Google Gemini, DeepSeek, or OpenAI).

9. Changes to this Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Effective Date" at the top. We may also notify you via email or a prominent notice on your dashboard prior to the changes taking effect.

10. Contact Us

If you have any questions about these Terms, please contact us.