Alapi (“Alapi”, “we”, “us”) is a conversational-commerce platform operated by Prime Focus Agency Ltd that lets businesses (“Merchants”) connect their Facebook Page, WhatsApp and website chat to an AI assistant that answers customer messages and helps place Cash-on-Delivery orders. This policy explains what we collect, how we use it, and your choices.
Merchant account data: business name, email address, password (stored hashed), and subscription / plan status.
Facebook data (only when a Merchant connects a Page). We use Facebook Login and request these permissions, each for a single purpose:
Alapipages_show_list — to show the list of Pages you manage so you can pick which one to connect.pages_messaging — to receive messages sent to your Page and send replies on your behalf.pages_manage_metadata — to subscribe your Page to our webhook so new messages reach Alapi in real time.When a Page is connected we store its Page ID, Page name, and a Page access token. We never ask for or store your Facebook password.
End-customer conversation data: when a customer messages a connected Page, we process the message content, the page-scoped user ID (PSID), and the public display name and profile picture that the Messenger Platform provides — so the assistant and the Merchant can read and reply to the conversation.
Order data: for Cash-on-Delivery orders, the customer provides their name, phone number and delivery address, which we use to create the order in the Merchant’s store.
We do not sell personal data, and we do not use Facebook data for advertising or profiling.
We keep conversation data only as long as needed to provide the service. A Merchant can disconnect a Page at any time from the dashboard, which stops processing and revokes the stored Page token. Anyone may request deletion of their data — see our Data Deletion page for instructions and our automated Facebook data-deletion callback.
Access tokens and secrets are stored on secured servers, all traffic is served over HTTPS, and every webhook payload is verified with Facebook’s signed (HMAC‑SHA256) signature before it is processed.
Alapi is not directed to children under 13 and we do not knowingly collect their data.
We may update this policy from time to time; the “Last updated” date above always shows the current version.
Prime Focus Agency Ltd — support@alapi.chat — alapi.chat