Privacy Policy

Last updated: 27 June 2026

Armoxe (“Armoxe”, “we”, “us”, “our”) provides a multi-channel customer-relationship management (CRM) platform that lets businesses (“Customers”) manage conversations with their own audiences across messaging channels, including Facebook Messenger, Instagram, Telegram and others.

This Privacy Policy explains what data we process and how. For end-user conversation data that we process on behalf of a Customer, the Customer is the data controller and Armoxe acts as a data processor following the Customer’s instructions.

1. Information we process

a. Account data (Customer team members)

Name, email address, role/permissions, and authentication data of the people who use the Armoxe platform.

b. Messaging data from connected accounts

When a Customer connects their own Facebook Page or Instagram account (which they administer) to Armoxe through the official Meta APIs, we receive and store, only to provide the CRM features:

• messages exchanged in those conversations;
• the sender’s name / username and profile picture, as provided by Meta;
• message timestamps and message identifiers;
• the connected Page / account identifiers.

The same applies to other channels a Customer connects (e.g. Telegram).

c. Technical data

IP address, device and browser type, log data, and cookies strictly used for authentication and security.

2. How we use information

• To deliver the CRM: receive, display, route and reply to conversations;
• To assign conversations to team members and produce analytics and reporting for the Customer;
• To provide optional AI assistance that drafts or sends replies, using vetted third-party AI providers;
• For security, fraud prevention, and to comply with legal obligations.

We do not sell personal data, and we do not use messaging content for advertising.

3. Meta Platform data

Data obtained through the Meta (Facebook / Instagram) APIs is used solely to provide the messaging and CRM features the Customer has enabled, in compliance with Meta’s Platform Terms and Developer Policies. We request only the permissions necessary to read and send messages on the Pages and accounts that the Customer administers.

4. Sharing and sub-processors

We share data only as needed to operate the service, with:

• Cloudflare — hosting, CDN and security;
• Supabase — database and authentication;
• Anthropic — AI assistance, where the Customer enables it;
• Meta and Telegram — the messaging platforms themselves;
• regulatory or law-enforcement authorities, only where required by law.

We do not sell personal data to anyone.

5. Data retention

We retain data for as long as the Customer’s account is active or as needed to provide the service, after which it is deleted or anonymized. Customers and end-users can request deletion at any time — see “Data Deletion” below.

6. Your rights and data deletion

You may request access to, correction of, or deletion of your personal data. See our dedicated Data Deletion page, or email support@armoxe.com. We respond within 30 days.

7. Security

We protect data with encryption in transit (HTTPS/TLS), access controls, and encrypted storage of connection credentials. No method of transmission over the Internet is completely secure, but we take reasonable measures to protect your data.

8. Children

The service is intended for users aged 18 and over. We do not knowingly process the personal data of minors.

9. Changes to this policy

We may update this Privacy Policy from time to time. The current version is always available at this URL with its “Last updated” date.

10. Contact

For any privacy question or request: support@armoxe.com.