Privacy Policy

1. Who this policy covers

This policy covers two groups of people:

• Customers — the businesses and individuals who create a WolfPack Media Chat account and connect their social accounts.
• End users — the people who send messages to a Customer's Facebook Page or Instagram account and are answered by the Service. If you are an end user, the business you messaged is the controller of your data and we process it on their behalf.

2. Information we collect

Account & business information. Name, email address, avatar, business name, business description, services, location, industry, website, and contact email and phone number.

Meta platform data (when you connect Facebook or Instagram). Facebook Page and Instagram account identifiers, page metadata, sender identifiers, message contents, conversation history, and the access tokens required to send and receive messages on your behalf.

Conversation content. The full text of messages exchanged between end users and the Service, including message attachments, timestamps, and the identifiers your messaging platform supplies.

Voice notes. If an end user sends a voice message, we send the audio to OpenAI for speech-to-text transcription and store the resulting transcript alongside the conversation.

Images. If an end user sends an image, we send it to OpenAI's vision model so the assistant can respond to it, and we store a reference to it with the conversation.

Lead information. The Service is designed to collect contact and qualification details from end users during conversations — full name, email address, phone number, service interest, and the qualification answers your agent is configured to ask for. This information is stored for the business that operates the agent.

Knowledge base content. Any documents, FAQs, or business information you upload to train your agent.

Billing information. Subscription plan, status, and billing period. Card details are collected and stored by Stripe; we never receive or store full payment card numbers.

Usage and log data. Browser type, IP address, device information, request logs, webhook delivery records, agent tool executions, escalation events, and token consumption statistics.

3. How we use information

• To provide, operate, and maintain the Service.
• To connect and manage your linked Facebook Pages and Instagram accounts.
• To generate automated replies to end users using AI models (see Section 4).
• To transcribe voice notes and interpret images sent by end users.
• To extract and store lead details from conversations for the operating business.
• To detect escalation conditions and notify a human on your team.
• To enforce plan limits and calculate usage.
• To provide analytics, notifications, and service updates.
• To process payments and manage subscriptions.
• To comply with legal obligations and enforce our Terms of Service.

4. Artificial intelligence and automated replies

The Service is powered by artificial intelligence. Replies sent to end users are generated by large language models, not written by a human, unless a member of the business's team takes over the conversation.

To generate those replies we transmit message content, conversation history, your configured agent instructions, and your knowledge base content to OpenAI, L.L.C., which processes it as our subprocessor. We also send voice note audio to OpenAI for transcription and images to OpenAI for visual interpretation.

We use OpenAI's API under terms that do not permit our data to be used to train OpenAI's models. We do not use conversation content to train any model of our own.

Automated replies can be inaccurate. The Service is instructed not to provide legal, medical, or financial advice, not to confirm bookings it cannot make, and not to process payments. Do not rely on it for any of those purposes.

5. Third parties we share information with

We do not sell personal data and we do not share it for advertising or cross-context behavioral advertising. We run no advertising pixels, no analytics trackers, and no third-party session recording on the Service.

We share data with the following categories of recipients:

We also disclose information to authorities where required by law, and to a successor entity in the event of a merger, acquisition, or sale of assets.

6. Data retention and deletion

We retain personal data for as long as your account is active.

• On account deletion request: we permanently delete your account and all associated data — conversations, messages, leads, knowledge base content, and access tokens — within 30 days, unless retention is required by law.
• Billing records are retained for 7 years as required for tax and accounting purposes.
• When you disconnect a Facebook Page or Instagram account, we delete the stored access token for that channel immediately. Conversation history already collected is retained until you request deletion.

See our Data Deletion Instructions for how to make a request.

7. Your rights

Depending on your jurisdiction, you may have the right to access, correct, export, restrict, or delete your personal data, to withdraw consent, to disconnect linked accounts at any time, and to appeal a denial of any of these requests.

California residents additionally have the right to know what personal information is collected and disclosed, the right to delete, the right to correct, the right to opt out of sale or sharing (we do neither), and the right not to be discriminated against for exercising these rights.

End users: if you messaged a business using the Service and want your data deleted, contact that business directly, or write to us at the address in Section 11 and we will route your request to them.

To exercise any right, email wolfpackmediapr@gmail.com. We respond within 30 days.

8. Data security

We protect your information with access controls, row-level database security that isolates each customer's data, encryption in transit, and encryption at rest. Access tokens and API keys are stored server-side and are never exposed to the browser. No method of transmission or storage is fully secure, and we cannot guarantee absolute security.

9. International transfers

The Service is operated from the United States and data is processed there. If you access it from outside the United States, you consent to that transfer.

10. Children's privacy

The Service is not directed to individuals under 18, and we do not knowingly collect their personal data. If you believe a minor has provided us data, contact us and we will delete it.

11. Changes and contact

We may update this Privacy Policy periodically. We will post the revised version with an updated "Last Updated" date, and we will notify account holders by email of material changes.

WolfPack Media LLC
Email: wolfpackmediapr@gmail.com
Website: wolfpackmediapr.com