Privacy Policy

1. Who we are

Plexia is operated by Plexia Works. We provide a customer service platform for businesses that manage Facebook Pages.

2. Data we process

We process only the data needed to authenticate administrators, list authorized Pages, and provide customer service.

• ID and name of the account that connected the application.
• Name, ID, and status of selected Pages.
• Content, date, and delivery status of Messenger messages.
• The contact's first and last name, provided by Meta in the context of the conversation.
• Email voluntarily provided for newsletter subscription.
• Technical security, authentication, and operational records.

3. Meta permissions and features

The application uses the following access for specific purposes:

• pages_show_list: list Pages managed by the user and let them choose which ones to manage.
• pages_messaging: receive messages, send an initial automated reply, and allow replies from the inbox.
• pages_utility_messaging: send approved utility templates related to customer service or the newsletter.
• Business Asset User Profile Access: show the agent the first and last name of the person in the conversation.
• Human Agent: identify messages sent by a real person during the period allowed by Meta.
• pages_manage_metadata: subscribe to the webhooks needed to receive events from connected Pages.

4. How we use data

• Authenticate users and protect access to the platform.
• Display and manage only selected Pages.
• Route messages between Messenger and the inbox.
• Organize requests to speak with a human agent.
• Process newsletter subscriptions and removals.
• Prevent fraud, abuse, and security incidents.
• Meet legal obligations and valid requests.

We do not sell personal data or use conversation content for behavioral advertising.

5. Legal basis and consent

Processing may be based on performance of the contracted service, compliance with legal obligations, legitimate security interests, or consent. Newsletter subscription requires specific consent and can be canceled at any time.

6. Data sharing

Data may be processed by Meta and by hosting, security, monitoring, and email providers hired to operate the service. These providers receive only necessary data and are subject to confidentiality and security obligations.

7. Retention and security

We retain data for as long as needed to provide the service, meet legal obligations, and protect rights. We use access controls, encryption in transit, audit logs, and periodic reviews of integration credentials.

8. Your rights

You may request confirmation of processing, access, correction, portability, anonymization, objection, or deletion of your data under applicable law. You can also withdraw consent and disconnect the application in Facebook settings. Deletion requests must be sent through the application form.

9. Children and teenagers

The service is intended for business administrators and is not directed at children. If we identify improperly processed data, we will take steps to remove it.

10. Contact

Privacy requests can be sent through the application form. We will respond within the time limits established by applicable law.