Privacy Policy

1. Information We Collect

When you interact with a business through Facebook Messenger that uses our platform, we collect:

• Messages you send to the business via Messenger
• Your Facebook Page-Scoped User ID (PSID)
• Your public Facebook profile name and profile picture
• Timestamps of your interactions

We do not collect any information beyond what is necessary to facilitate the conversation between you and the business.

2. How We Use Your Information

We use the collected information solely to:

• Provide automated customer support responses on behalf of the business
• Route conversations that require human attention to business staff
• Display conversation history to the business owner for support purposes

Your data is associated with the specific business (tenant) you are communicating with and is not used for advertising, profiling, or any purpose unrelated to the customer support interaction.

3. Data Storage and Security

Your data is stored securely using industry-standard measures:

• All data is transmitted over HTTPS/TLS encryption
• Facebook Page access tokens are encrypted at rest using AES-256-GCM
• Webhook payloads are verified using HMAC-SHA256 signatures
• All data is isolated per business tenant using row-level security policies
• Data is hosted on Supabase (PostgreSQL) and Vercel infrastructure

4. Data Sharing

We do not sell, rent, or share your personal information with third parties. Your messages are only accessible to:

• The business you are communicating with
• Our platform infrastructure for providing the automated support service

We may use third-party services (Supabase, Vercel) for hosting and infrastructure. These providers process data on our behalf under appropriate data processing agreements.

5. Data Retention

Conversation data is retained for as long as the business maintains an active account on our platform. When a business deletes their account, all associated conversation data is removed.

6. Your Rights

You have the right to:

• Request access to the personal data we hold about you
• Request deletion of your conversation data
• Stop interacting with the business via Messenger at any time

To exercise these rights, please contact the business you are interacting with directly, or reach out to us using the contact information below.

7. Cookies

This privacy policy covers interactions via Facebook Messenger. The Messenger platform is operated by Meta and is subject to Meta's own privacy policy and cookie practices. Our web application uses essential cookies only for authentication and session management.

8. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be reflected on this page with an updated "Last updated" date.

9. Operator

Lekhahang is operated by Reth Radin, a sole proprietor based in Cambodia.

10. Contact

For privacy-related inquiries, please contact the business you are interacting with or reach out to us at privacy@lekhahang.com.

11. Data Deletion

If you have interacted with a business via Facebook Messenger through our platform, you can request deletion of your conversation data in the following ways:

• Automatic deletion via Facebook: When you remove the Lekhahang app from your Facebook settings, Meta automatically sends a data deletion request to our platform. Your messages are deleted and your conversation records are anonymized.
• Manual request: You can email us at privacy@lekhahang.com with your request. Please include your Facebook name so we can locate and remove your data.

Data deletion is typically processed immediately upon receiving the request. You will receive a confirmation code that you can use to verify the deletion status.