Privacy Policy

This Privacy Policy explains what personal information entropyx.ai (“we,” “us,” or “our”) collects when you use yxchat (the “App”), why we collect it, how we use and protect it, and the choices and rights you have over it. This is our own privacy policy and applies only to the App and the services it provides.

By connecting your Meta account or otherwise using the App, you agree to the practices described here. If you do not agree, please do not use the App.

The App connects to and processes data from Meta products — specifically Instagram (Graph / Business), Messenger, and Facebook Pages — on your behalf and under your authorization.

1Who we are

entropyx.ai is the entity responsible for the personal information processed through the App. Our contact details, including the person responsible for the protection of personal information, are in Section 11.

2What information we collect

We collect the following categories of information, directly from you, automatically, and through Meta’s permission APIs:

Information you provide directly

• Account and identity information — such as your name, email address, and the credentials or business details you supply when you register or set up the App.
• Authorization data — the access tokens and account identifiers generated when you connect your Meta account, Instagram Business/Creator account, or Facebook Page to the App.
• Communications — information you send us when you contact support or make a request.

Information we receive through Meta’s permission APIs

When you authorize the App, we access only the data permitted by the scopes you grant. Depending on those scopes, this may include:

• Instagram (Graph / Business) — your Instagram business/creator profile details and ID, your media (posts, captions, media URLs), comments and mentions, account and content insights/metrics, and Instagram direct messages routed through the Messenger Platform, including message content and the identifiers of the people who message you.
• Messenger / messaging — messages exchanged through your connected accounts, including message content, attachments, timestamps, and the sender and recipient identifiers needed to deliver, display, or respond to those messages.
• Facebook Pages management — Page profile information and ID, posts and other Page content, Page insights and metrics, Page messages, and the roles and permissions associated with the Page.

This data includes information about third parties — for example, the followers or customers who comment on your content or message your account. We process that information solely to provide the App’s services to you.

Information collected automatically

• Usage and log data — actions taken in the App, feature usage, and event timestamps.
• Device and technical data — IP address, browser type, device and operating system information, and similar diagnostic data.
• Cookies and similar technologies — used where necessary to keep you signed in, remember your settings, and operate the service. You can control cookies through your browser settings.

3How we use your information, and why

We process the information above for the following purposes:

• To provide the service — authenticate you, maintain your connection to Meta, and operate the App’s core features (managing Pages, sending and receiving messages, and presenting analytics).
• To respond to and manage communications — display, organize, route, and help you reply to messages, comments, and mentions across your connected accounts.
• To generate insights — produce metrics and reports about your accounts and content.
• To maintain, secure, and improve the App — monitor performance, prevent abuse and fraud, debug, and develop new features.
• To communicate with you — send service-related notices and respond to support requests.
• To comply with law — meet legal, regulatory, and Meta Platform Terms obligations.

Our legal basis for processing is your consent, which you provide when you connect your account and use the App, and the performance of our service to you. You may withdraw consent at any time (see Section 8). We do not use this information for any purpose incompatible with those listed above.

4How we share information

We do not sell your personal information, and we do not share it except as described here:

• Service providers — vendors who host our infrastructure and provide processing, database, and operational services strictly on our behalf and under contract. They may only use the data to perform services for us.
• Meta — to operate the App we exchange data with Meta’s platforms as required to deliver the features you authorize, in accordance with Meta’s Platform Terms and Developer Policies.
• Legal and safety — where required by law, legal process, or to protect the rights, property, or safety of our users, the public, or us.
• Business transfers — if we are involved in a merger, acquisition, or sale of assets, your information may be transferred, subject to this Policy.

5Data retention

We keep personal information only as long as necessary to provide the App, fulfill the purposes in this Policy, and meet legal obligations. When you disconnect your account or request deletion, we delete or de-identify the associated data within a reasonable period, except where we are required to retain it by law.

6Where your data is stored

We store data on infrastructure operated by our hosting and database providers located in Canada (the ca-central region, in Montreal, Quebec). We do not transfer your personal information outside Canada. We take reasonable steps to ensure it is protected wherever it is processed.

7Security

We use reasonable administrative, technical, and physical safeguards to protect your information, including encryption of sensitive data such as access tokens, access controls, and secure storage. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8Your rights and choices

Under Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and Quebec’s Act respecting the protection of personal information in the private sector (Law 25), you have the right to:

• Access the personal information we hold about you.
• Correct information that is inaccurate, incomplete, or out of date.
• Withdraw consent to our processing at any time, subject to legal or contractual limits.
• Request deletion of your personal information (see Section 9).
• Disconnect the App from your Meta account at any time through your Meta account settings under Apps and Websites, which revokes our access going forward.

To exercise any of these rights, contact us using the details in Section 11. We will respond within the timeframes required by applicable law. If you are not satisfied with our response, you may contact the Commission d’accès à l’information du Québec or the Office of the Privacy Commissioner of Canada.

9How to request deletion of your data

10Children’s privacy

The App is intended for businesses and adults. It is not directed to children, and we do not knowingly collect personal information from anyone under the age of majority. If you believe a minor has provided us information, contact us and we will delete it.

11Contact us

For any question about this Policy, to exercise your privacy rights, or to reach the person responsible for the protection of personal information at our organization (our Privacy Officer, as required under Quebec’s Law 25), contact us:

12Changes to this Policy

We may update this Policy from time to time. When we make material changes, we will revise the “Last updated” date above and, where appropriate, provide additional notice. Your continued use of the App after changes take effect means you accept the updated Policy.