Privacy Policy

Last updated: 21 October 2026

Armoxe (“Armoxe”, “we”, “us”, “our”) provides a multi-channel customer-relationship management (CRM) platform that lets businesses (“Customers”) manage conversations with their own audiences across messaging channels, including Facebook Messenger, Instagram, Telegram and others. Customers can also manage their own advertising, posts, comments and product catalog on Facebook and Instagram.

This Privacy Policy explains what data we process and how. For end-user data that we process on behalf of a Customer, the Customer is the data controller and Armoxe acts as a data processor following the Customer’s instructions.

1. Information we process

a. Account data (Customer team members)

Name, email address, role/permissions, and authentication data of the people who use the Armoxe platform.

b. Messaging data from connected accounts

When a Customer connects their own Facebook Page or Instagram account (which they administer) to Armoxe through the official Meta APIs, we receive and store, only to provide the CRM features:

• messages exchanged in those conversations;
• the sender’s name / username and profile picture, as provided by Meta;
• message timestamps and message identifiers;
• the connected Page / account identifiers.

The same applies to other channels a Customer connects (e.g. Telegram).

c. Page and post data

When a Customer connects their Facebook Page or Instagram account, we receive:

• the Customer’s posts and their statistics: reach, views, likes, comments, saves, shares;
• overall page statistics: followers, new follows and unfollows, profile views;
• audience composition: age, gender, country, city, as aggregated numbers only;
• comments on the Customer’s posts: text, the commenter’s name or username, and time.

Statistics are received only in aggregated form, never about individual people. Posts that the Customer publishes from the dashboard (text and images) are sent to Meta on the Customer’s behalf.

d. Advertising data

When a Customer connects their Meta ad account, we receive:

• names, statuses and budgets of campaigns, ad sets and ads;
• aggregated results: spend, impressions, clicks, number of conversations.

Ads, images, and status or budget changes are sent to Meta only when a Customer’s team member takes an action, or under rules the Customer has set up and enabled themselves. We do not receive data about individual people from ads.

e. Product catalog

Names, descriptions, prices, currency, images and links of the products the Customer adds to their Meta catalog through the dashboard.

f. Purchases from conversations

When a Customer marks that a person in a Messenger or Instagram conversation has made a purchase, we send Meta a “purchase” event containing the amount, the currency and the conversation identifier provided by Meta. No message content is sent. This lets the Customer see which ad brought the buyer. The feature is enabled separately for each channel.

g. Technical data

IP address, device and browser type, log data, and cookies strictly used for authentication and security.

2. How we use information

• To deliver the CRM: receive, display, route and reply to conversations;
• To let a Customer’s team member reply to a person who wrote in, including more than 24 hours after that person’s last message. Such a message is always written by a human, as permitted by Meta’s rules;
• To publish posts and manage comments on the Customer’s behalf: reply, hide, delete;
• To show the Customer’s page and ad statistics, and to manage their ads and catalog;
• To assign conversations to team members and produce analytics and reporting for the Customer;
• For security, fraud prevention, and to comply with legal obligations.

We do not sell personal data, and we do not use messaging content for advertising.

3. Meta Platform data

Data obtained through the Meta (Facebook / Instagram) APIs is used solely for the features the Customer has enabled, in compliance with Meta’s Platform Terms and Developer Policies. We request only the permissions needed for these features:

• conversations;
• posts and comments;
• page statistics;
• advertising and catalog;
• purchases from conversations.

All of this applies only to the Pages, accounts and ad accounts that the Customer administers. We do not sell Meta data, do not share it with data brokers, and do not use it for anyone else’s advertising.

4. Sharing and sub-processors

We share data only as needed to operate the service, with:

• Cloudflare — hosting, CDN and security;
• Supabase — database and authentication;
• Meta — messaging, publishing, the advertising platform and catalog;
• Telegram — messaging;
• regulatory or law-enforcement authorities, only where required by law.

We do not sell personal data to anyone.

5. Data retention

We retain data for as long as the Customer’s account is active or as needed to provide the service, after which it is deleted or anonymized. When a Customer disconnects a Facebook Page, an Instagram account or an ad portfolio, we stop receiving data from it and delete the access key for it. Customers and end-users can request deletion at any time — see “Data Deletion”.

6. Your rights and data deletion

You may request access to, correction of, or deletion of your personal data. See our dedicated Data Deletion page, or email support@armoxe.com. We respond within 30 days.

7. Security

We protect data with encryption in transit (HTTPS/TLS), access controls, and encrypted storage of connection credentials. No method of transmission over the Internet is completely secure, but we take reasonable measures to protect your data.

8. Changes to this policy

We may update this Privacy Policy from time to time. The current version is always available at this URL with its “Last updated” date.

9. Contact

For any privacy question or request: support@armoxe.com.