Privacy Policy

We only ask for personal information when we truly need it to provide a service to you. This includes:

• Account information: email address, name, and authentication credentials.
• Billing information: handled by our payment-processing partner acting as merchant of record. We do not store full payment details.
• Catalog content: the product information you upload (name, description, price, stock, photos) so that the AI assistant can present it to your customers.
• Facebook integration data: the Facebook page identifiers and access tokens you authorise during connection, used solely to receive and reply to messages on the pages you choose to connect.
• Customer conversation data: messages exchanged between your AI assistant and the customers who contact your Facebook page, including the customer's Facebook-provided identifier, the message content, and any order information they submit. This data is processed on your behalf as the page operator.
• Usage data: messages handled, products stored, conversations active. Used to enforce plan capacity, support refund calculations, and improve the service.
• Operational data: system logs needed to operate, secure and audit the platform.

• To provide the DmBuy service and the features included in your plan.
• To process payments and apply plan capacity.
• To send transactional emails (welcome, payment confirmation, password reset, account notifications).
• To deliver AI-generated replies through Facebook Messenger on your behalf.
• To improve the platform based on aggregate usage statistics.
• To investigate and prevent abuse of the service.

We do not sell your data. We do not share personally identifying information publicly or with third parties, except where required by law or where a sub-processor is necessary to deliver the service (see Sub-Processors below). Customer conversation data is processed on behalf of the merchant who operates the Facebook page; we act as a data processor for that data.

To deliver the service, DmBuy engages a limited number of trusted sub-processors covering the following functions: payment processing, hosting and database infrastructure, AI inference, image processing, transactional email delivery, and the Facebook Messenger Platform operated by Meta.

Each sub-processor is bound by a data-processing agreement that contractually requires them to handle your data in accordance with applicable law. The current list of sub-processors is available on request by contacting admin@dimension-labs.xyz.

We retain collected information for as long as necessary to provide the service and meet legal, accounting and reporting obligations. Account data is deleted on request after subscription cancellation, subject to the retention requirements of our payment processor and tax regulations. Customer conversation data is retained for the period required to operate the assistant and to give merchants the ability to review past conversations; merchants may at any time request deletion or anonymisation of conversations associated with their account.

We protect stored data within commercially acceptable means to prevent loss, theft and unauthorised access. Sensitive credentials and Facebook access tokens are protected using industry-standard encryption. Access to production data is restricted to authorised personnel.

We act in the capacity of a data controller (for our customers' account data) and a data processor (for the customer conversation data submitted through our customers' Facebook pages) with regard to the personal data processed through DmBuy, in compliance with the EU General Data Protection Regulation (GDPR). You have the right to access, rectify, port and erase your personal data. End customers wishing to exercise these rights regarding messages they exchanged with a merchant's AI assistant should contact the merchant that operates the Facebook page; we will assist that merchant in fulfilling the request. To contact us directly, write to admin@dimension-labs.xyz.

Our website and the DmBuy app may link to external sites that are not operated by us, including Meta properties such as Facebook and Messenger. We have no control over the content and practices of those sites and cannot accept responsibility or liability for their respective privacy policies.

We may update this Privacy Policy from time to time. The effective date at the top of this page indicates the latest revision. Continued use of DmBuy after a change constitutes acceptance of the updated policy.

For any privacy-related question, contact admin@dimension-labs.xyz.