Legal
Quiet Signals Lab ("we", "our", or "us") operates automated conversational assistants on Meta platforms — specifically Facebook Messenger and Instagram Direct Messages — on behalf of businesses that choose to use our service (collectively, the "Service"). This policy explains what personal data we collect, why we collect it, how we process it, and what rights you have.
Contact us at any time: hello@quietsignalslab.com
This policy applies to data processed when you interact with a chatbot powered by Quiet Signals Lab through Facebook Messenger or Instagram DMs. It does not cover data collected directly by Meta Platforms or the individual businesses whose pages host the chatbot — please review their own policies for those interactions.
For data processed through quietsignalslab.com (this website), see our website privacy notice.
We process only the minimum data needed to operate and improve the Service:
| Category | Examples | Purpose |
|---|---|---|
| Platform identifiers | Facebook Page-Scoped ID (PSID), Instagram Scoped ID (IGSID) | Identify your conversation session. These IDs are assigned by Meta and are unique per page — they do not expose your personal profile to us. |
| Message content | Text you send to the chatbot | Generate appropriate automated replies; classify intent using an AI language model. |
| Voluntarily provided contact information | Your first name, phone number (if you share these in conversation) | Personalise responses and, where applicable, arrange a follow-up with the business. |
| Conversation metadata | Timestamps, detected language, conversation branch / stage | Maintain context across turns; analytics and service improvement. |
| Inferred signals | Estimated intent category, urgency level, language preference | Route your message to the most relevant scripted response. Not used for profiling or advertising. |
We do not collect payment information, government-issued IDs, passwords, or sensitive special-category data as defined by GDPR (e.g. health, ethnicity, religion).
Where applicable law requires a legal basis, we rely on:
To classify your intent and generate contextually appropriate replies, the text of your messages is sent to OpenAI via its API. OpenAI processes this data as a data processor on our behalf, subject to its own privacy policy. Your messages are not used to train OpenAI's models. Under OpenAI's API Terms of Service, data submitted via the API is not used for model training by default.
| Data | Storage | Retention period |
|---|---|---|
| Active conversation state | Redis (in-memory) | 24 hours from last activity, then automatically deleted |
| Conversation analytics records | PostgreSQL database | Until you request deletion or we cease operating the relevant page |
| Scheduled follow-up tasks | Redis | Automatically removed once sent or cancelled (typically within 72 hours) |
We share data only as described below:
We do not sell your personal data or share it with advertisers.
We implement appropriate technical and organisational measures to protect your data, including:
No method of electronic transmission is 100% secure. If we become aware of a breach that affects your rights, we will notify relevant authorities and affected parties as required by law.
Under the GDPR you have the right to:
To exercise any right, email hello@quietsignalslab.com with the subject line "Privacy Request". Requests are handled within 30 days.
You can also request manual deletion at any time by emailing hello@quietsignalslab.com.
The chatbot itself does not set cookies or use tracking pixels. Any cookies present in your Meta Messenger or Instagram interface are governed by Meta's own cookie policy.
The Service is not directed at children under 13 (or the relevant minimum age in your jurisdiction). We do not knowingly collect data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
Our infrastructure and sub-processors may be located outside your country of residence. Where data is transferred to countries not recognised as providing adequate protection by relevant data protection authorities, we ensure appropriate safeguards are in place (e.g. Standard Contractual Clauses for EU data).
We may update this policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Material changes will be communicated via the chat interface or other appropriate means.
For any privacy-related questions or requests:
If you are located in the European Economic Area and believe we have not addressed your concern satisfactorily, you have the right to lodge a complaint with the Dutch supervisory authority: Autoriteit Persoonsgegevens.