DM Helper App Privacy Policy
Last Updated: April 8, 2026
This Privacy Policy describes how GLOWON STUDIO ("we," "us," or "our") collects, uses, and handles information when you interact with our Facebook Page and Instagram Professional account via our proprietary messaging application (the "App").
1. Information We Collect
To provide automated drafting and customer support services, our App accesses the following data through the Meta Graph API:
-
Message Content: The text of incoming Direct Messages (DMs) sent to our official Facebook and Instagram accounts.
-
User Identifiers: Your public-facing name and unique Meta scoped-user ID (PSID/IGSID).
-
Public Profile Info: Basic information you have made public on your Facebook or Instagram profile.
2. How We Use Your Information
We use the collected information strictly for the following purposes:
-
AI-Assisted Drafting: To analyze your inquiries and generate accurate response drafts based on our internal knowledge base (product details, store policies, etc.).
-
Customer Support: To facilitate faster and more relevant communication between our team and our customers.
3. Ephemeral Processing & Data Retention
Our App is built with a Privacy-First "Ephemeral Architecture." * No Permanent Storage: We do not store an archive or permanent record of your private message history in our databases.
-
Session-Based Memory: Incoming messages and generated drafts exist only in "volatile memory" during an active support session.
-
Immediate Purge: Once a message is replied to or the browser session is closed, the message content is purged from our active systems.
-
Internal Knowledge Base: We maintain a database of our own store information (e.g., perfume notes, shipping rates), but this does not contain personal customer data.
4. Third-Party Service Providers (Google Vertex AI)
To provide high-quality responses, we utilize the Google Vertex API as a sub-processor.
-
Data Transfer: Incoming message text is sent to Google Vertex AI via an encrypted (HTTPS) connection to generate a reply draft.
-
No Training: We ensure through our API configuration that user data sent to Google Vertex AI is used solely for real-time processing and is not used to train or improve third-party AI models.
5. Security Measures
We implement industry-standard security protocols to protect your data, including:
-
Encryption at Rest: Meta Page and user access tokens are encrypted with AES-256-GCM.
-
Secure Transit: All data moving between Meta, our servers, and Google Vertex AI is protected with HTTPS (TLS 1.2+).
-
Access Control: Only authorized staff members can access the App interface to review and send drafts.
6. Your Rights & Data Deletion
Under applicable privacy laws (including GDPR and CCPA), you have the right to:
-
Access/Know: Request information about what data we process.
-
Deletion: Since we do not store message history, your data is automatically "deleted" at the end of every session. However, if you wish for us to remove your business metadata from our "Connected Accounts," please contact us.
-
How to request data deletion. Please refer to https://content-manager-ir5c.vercel.app/privacy/data-deletion for detailed instructions
7. Legal Requests and Compliance with Law
We may disclose your personal information to public authorities or law enforcement agencies if required to do so by law or in the good faith belief that such action is necessary to:
-
Legal Compliance: Comply with a legal obligation, a court order, or a valid government request.
-
Legality Review: We review the legality of every request we receive and will challenge any requests that we believe are unlawful or overly broad.
-
Data Minimization: In responding to such requests, we only disclose the minimum information necessary to satisfy the legal requirement.
-
Protection of Rights: Protect and defend the rights or property of GlowOn Studio, or to protect the personal safety of our users or the public.
We maintain documentation of all such requests, including our legal reasoning and the specific information disclosed, to ensure transparency and accountability in our data handling practices.
8. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us at:
GLOWON STUDIO, HONG KONG Email: support@glowonstudio.com Website: www.glowonstudio.com