Effective date: 31 October 2026 · Operator: BEEDROP COMPANY LIMITED

Privacy Policy

This policy explains how BEEDROP COMPANY LIMITED (CÔNG TY TNHH BEEDROP, “BEEDROP,” “we,” or “us”) processes information through Auto Publisher and Page Inbox Center when a Facebook Page administrator connects a Page.

1. Information we process

Depending on the features enabled by the Page administrator, the service may process Page identifiers and profile details; Page access tokens; a Messenger sender's Page-scoped identifier and profile details made available by Meta; message text, attachments and related metadata; timestamps, delivery events and conversation status; and staff-created notes, labels, assignments and audit events. For Page publishing or management, we process the content and media an administrator chooses to submit and the status returned by Meta.

2. How we use information

We use this information to connect the selected Page, receive and display its Messenger conversations, route conversations to authorized staff, send replies selected by authorized staff, carry out Page actions explicitly selected by an administrator, and protect and troubleshoot the service. We do not use Messenger conversation content for advertising or sell it to data brokers.

3. Service providers and AI processing

Meta processes information to provide Facebook, Pages, Messenger and the Graph API. The inspected Page Inbox Center deployment uses Cloudflare Workers, D1 and R2 for application and storage infrastructure. Authorized BEEDROP staff may access connected Page information to operate the service.

The production implementation reviewed for this policy does not send Messenger content to OpenAI and does not generate AI replies. If an AI-reply feature is enabled in a future release, the message and limited conversation context needed to prepare a response may be sent to OpenAI's API. We will update this policy and disclose the feature to users before that processing begins. A human staff member remains available to take over a conversation.

A Page administrator may separately connect a Page to another support provider, such as Chatwoot. Any such connection is governed by the provider's own configuration and privacy terms.

4. Storage and retention

In the reviewed Page Inbox Center implementation, conversation records and message text are stored in Cloudflare D1, and attachments may be copied to Cloudflare R2. Page access tokens are encrypted before storage. The current implementation does not document or enforce an automatic deletion period. Information may remain until an authorized operator removes it or a deletion request is completed. Cloudflare may retain infrastructure backups under its own operational schedule.

5. Security

The reviewed implementation includes staff access controls, encrypted Page tokens, signed temporary media links, webhook signature checks and message-ID deduplication. We take reasonable steps to protect information, but no internet service can guarantee absolute security. Page administrators should protect staff credentials and remove access when it is no longer needed.

6. Data deletion requests

A Page administrator can remove the app's access through Meta's Page or business settings. To request deletion of information held by BEEDROP, email beedrop.info@gmail.com with the subject “Messenger data deletion request” and enough information to identify the Page and records. Do not email passwords, login codes, access tokens or identity documents.

We will verify that the requester is authorized, review the request and delete information we control when required. Some records may be retained where the law requires it or remain with Meta or an infrastructure provider. The current service has no self-service message-deletion screen and does not publish a fixed completion deadline. See our data deletion instructions.

7. Contact

For privacy questions or data requests, contact BEEDROP COMPANY LIMITED at beedrop.info@gmail.com or visit www.ibeedrop.vn.