Who we are
Cosmio Technology Corp. ("we", "us", "our") operates Cosbot, a multi-platform AI assistant service that enables businesses to automate customer conversations on WhatsApp, Instagram, and Messenger.
What we collect
From business users (our customers)
- GitHub account information for authentication
- Portfolio name you provide during registration
- WhatsApp Business Account credentials and phone number
- Instagram Business account credentials and profile information
- Messenger Page credentials and page information
- AI agent configuration (name, instructions, model preferences)
From end users (customers messaging businesses)
- Platform identifiers (WhatsApp phone number, Instagram user ID, or Messenger PSID)
- Profile name when available from the platform
- Message content sent to the business
- AI-generated and admin responses
- Message delivery status and timestamps
How we use your data
We use collected data to:
- Generate AI responses to customer messages
- Store conversation history for context in AI responses
- Enable businesses to manually respond to and manage conversations
- Deliver real-time message updates and status notifications
- Operate, maintain, and secure the service
- Prevent abuse and ensure service reliability
Where processing happens (third parties)
- Meta (WhatsApp, Instagram, Messenger): Messages are sent and received through Meta's platforms according to their terms and privacy policies.
- OpenAI: Message content is sent to OpenAI to generate AI responses. Processing happens on their servers.
- Neon (PostgreSQL): Conversation data is stored in our database hosted by Neon.
- Upstash (Redis): Temporary data for message deduplication and real-time updates.
- Vercel: Application hosting and serverless functions.
What we store
Unlike traditional chatbots, we do persist conversation history in our database. This includes:
- Full message content (incoming and outgoing)
- Customer platform identifiers and profile names
- Conversation metadata (timestamps, AI/manual mode status)
- Admin notes about customers
- Message delivery status
This data is stored to provide conversation continuity, enable manual takeover by business admins, and maintain context for AI responses.
Legal bases (where required)
We process your data to perform the service you request (contract) and for our legitimate interests in running a secure, reliable messaging platform (security/abuse prevention).
Data retention
- Conversation history is retained while your account is active
- Temporary deduplication data expires within 24 hours
- Instagram access tokens are automatically refreshed before expiration
- Upon account deletion, all associated conversations and credentials are permanently removed
- Meta and OpenAI may retain data under their own policies
Children's data
Our service is not intended for children under 13 (or the age of digital consent in your country). We do not knowingly collect data from children.
Security
We use industry-standard measures to protect your data, including encrypted connections (HTTPS), secure credential storage, and webhook signature verification. No method is 100% secure.
Your rights & contact
Depending on where you live, you may have rights to access, correct, or delete your data. To exercise these rights or ask questions about our data practices, contact us at info@cosbot.ca.
For data deletion requests, visit our Data Deletion page.