Privacy Policy
What AI Tema receives, why it is used and how you can manage your data.
1. Service and scope
AI Tema is a gomvp.dev product for conversation automation and lead collection on websites, messaging services and social platforms. This policy covers aitema.cloud, its account area and API. Contact hello@gomvp.dev about your data.
We determine how account-owner data is used to operate the service. When a business processes its customer messages and contacts through AI Tema, that business determines the purposes and content of that processing. You can address requests about a conversation with a particular business directly to that business.
2. Data we receive
Account data includes your email, name, account identifier, plan and settings. Password login uses a stored password hash. Google login provides your Google identifier (sub), email, verification status and profile name.
Connected-channel data may include account identifiers and names, permissions and access tokens needed for your connection. Depending on the channel and workflow, we process messages, events, user responses, contact details and leads.
Technical data includes IP addresses, browser information, request times, security events and session identifiers. Do not collect customer passwords, payment-card details or sensitive information that is unnecessary for your business conversation.
3. Purposes of processing
We use data to register and authenticate users, connect sign-in methods to one account, operate the workspace, connect channels, execute your workflows, save leads, provide support and prevent abuse.
Depending on the context, processing supports the service you request, your authorization to connect a channel, service security or applicable legal obligations. Businesses are responsible for the grounds and notices required when collecting their customers’ data.
4. Google and connected platforms
Google data is used to sign you in and manage your AI Tema account. Signing in does not request access to Gmail, Google Drive or Google Calendar. Authorization codes and ID tokens are checked on the server; Google login tokens are not retained as permanent credentials.
We do not sell Google data or use it for advertising profiles, credit assessments or training artificial-intelligence models. Google data use is limited to the functions described here and the Google API Services User Data Policy, including applicable Limited Use requirements.
AI Tema executes the messages and actions that you configure. Conversations are not automatically sent to a generative model. Connecting Instagram, Facebook, WhatsApp, Threads, Telegram or website chat determines which events and data are available to a workflow.
5. Access, providers and international processing
Infrastructure providers help deliver the service: Vercel for the website, API and database hosting, an email provider when messages are sent, and platforms you connect. They receive data needed for their respective functions. Processing may occur in different countries depending on the provider’s infrastructure.
Data may be accessed to operate, support and secure the service, or disclosed where required by applicable law. We do not sell personal data. Connected platforms also process data under their own policies.
6. Retention, browser storage and security
Account, connection and workflow data is kept while needed to operate your account and fulfil your requests. Our API logs are retained for no more than 15 days; database backups for up to 7 days. Limited records may be retained longer where necessary for legal obligations or disputes.
Essential cookies and browser storage support sessions, Google sign-in protection, language selection and the demo. Blocking necessary cookies may prevent sign-in. Public demos use sample data and do not send messages to your customers.
HTTPS protects data in transit. Server and database access is restricted and passwords are hashed. These measures reduce risk; no internet service can guarantee absolute security.
7. Your requests and revoking access
Write to hello@gomvp.dev from your account email to request access, correction, export, account deletion or withdrawal of consent-based processing. We may ask you to prove account ownership. Requests are handled subject to applicable deadlines and retention obligations.
Disconnect channels in your workspace or revoke permissions in the relevant platform’s settings. Google access can be revoked in your Google Account settings. Revoking access and deleting stored data are separate actions: contact us to request deletion. Backups expire within their stated retention period.
8. Changes
The version date appears at the top. If processing purposes or use of Google data changes materially, we will update this policy, provide the required notice and, where necessary, obtain consent before the new processing.