Privacy Policy – One AI Platform
Effective Date: May 2025
One AI Platform is an application that integrates AI chat agents with Meta business page profiles. This Privacy Policy explains how user data is collected, used, and protected on our platform.
1. What Data We Collect
We collect:
- Messages sent by users to Meta business pages connected to One AI Platform.
- AI-generated responses from the chatbot to those users.
- Files and information uploaded by users to provide context to the AI agent.
2. How the Data Is Used
Collected data is used only for:
- Enabling chatbot responses during user conversations.
- Providing message analytics and conversation statistics to the business page owner.
We do not use the data for advertising or marketing purposes, and we do not sell your data. We share data only with the third-party service providers described in Section 3 (Third-Party Service Providers), solely to operate the Service.
3. Third-Party Service Providers
To operate the Service, we share certain data with the following third-party service providers acting on our behalf:
- OpenAI, L.L.C. (AI processing): We send user messages, uploaded files/context, relevant calendar event data (such as event titles, times, descriptions, and attendees), and OneDrive file content to OpenAI's API when our AI agent generates chat responses, performs calendar actions (create, read, update, delete events), or reads connected OneDrive files on your behalf. Per OpenAI's API data usage policies, data submitted through the API is not used to train OpenAI's models.
- Meta Platforms, Inc.: Messages are exchanged through Meta's Messenger/Instagram messaging APIs connected to your business page.
- Google LLC and Microsoft Corporation: Only for users who connect Google Calendar, Microsoft Outlook Calendar, or Microsoft OneDrive, as described in Sections 8, 9 and 10.
We do not sell your data, and we do not share it with any other third party for advertising or marketing purposes.
4. Data Access and Responsibility
- Only the business page owner has access to their own data via a secure login.
- One AI Platform team members do not have access to user data unless explicitly granted for support purposes.
- The business user is fully responsible for their own data and AI-generated responses.
5. Data Retention
Messages and AI responses are securely stored for a maximum of 3 years, after which they are automatically deleted.
6. Data Security
One AI Platform uses industry-standard practices to ensure data protection:
- All data is encrypted at rest and in transit.
- Access is restricted to authorized systems and users only.
7. Consent
By sending a message to a business page using One AI Platform, users acknowledge that their message will be processed by the platform and our AI service provider (OpenAI), and shared with the business, for the purposes described above.
We do not collect or store sensitive personal data (e.g., financial or health information).
8. Google Calendar Integration
Our application integrates with Google Calendar to provide synchronization features. This section explicitly details how we handle data associated with this integration.
Data Access: When you link your Google Calendar, we access your calendar lists (to let you choose which to sync) and calendar events (to create, update, and delete events). We also store an encrypted access token to maintain this connection.
Data Usage: We use this data solely to sync your One AI Platform calendar with your Google Calendar. We store the specific Calendar ID you select to ensure we sync to the correct location.
AI Processing: Our platform calendar acts as an intermediary between our AI agent and Google Calendar: changes made by the AI agent are synced to Google Calendar, and a background process syncs your Google Calendar events into the platform calendar. As a result, when you or your customers interact with the AI agent to schedule, view, modify, or cancel calendar events, relevant event details (such as title, time, description, and attendees) — including data originally sourced from Google Calendar — are processed by our AI service provider, OpenAI, in order to fulfill the request. See Section 3 (Third-Party Service Providers) for details.
Data Security: Access tokens are stored using industry-standard encryption. We do not use Google Calendar data for advertising purposes.
Data Sharing Disclosure: One AI Platform does not share, transfer, or disclose Google user data to any third parties except as follows: (1) OpenAI, L.L.C. — Google Calendar event data (titles, times, descriptions, attendees) is transmitted to OpenAI's API solely when you or your customers request AI-assisted calendar actions, as described in Section 3; (2) Meta Platforms, Inc. — only when calendar-related messages are exchanged through your connected Meta business page. We do not sell Google user data, and we do not share, transfer, or disclose Google user data for advertising or marketing purposes.
Limited Use Disclosure: One AI Platform's use and transfer to any other app of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.
9. Microsoft Outlook Calendar Integration
Our application integrates with Microsoft Outlook Calendar to provide synchronization features. This section explicitly details how we handle data associated with this integration.
Data Access: When you link your Outlook Calendar, we access your calendar lists (to let you choose which to sync) and calendar events (to create, update, and delete events). We also store an encrypted access token to maintain this connection.
Data Usage: We use this data solely to sync your One AI Platform calendar with your Outlook Calendar. We store the specific Calendar ID you select to ensure we sync to the correct location.
AI Processing: As with Google Calendar, our platform calendar syncs bidirectionally with Outlook Calendar. When you or your customers interact with the AI agent to schedule, view, modify, or cancel calendar events, relevant event details may be processed by our AI service provider, OpenAI, in order to fulfill the request. See Section 3 (Third-Party Service Providers) for details.
Data Security: Access tokens are stored using industry-standard encryption. We do not use Outlook Calendar data for advertising purposes.
Limited Use Disclosure: One AI Platform's use and transfer to any other app of information received from Microsoft Graph APIs will adhere to Microsoft Privacy Statement and the Microsoft Graph Permissions Reference, including limited use requirements.
10. Microsoft OneDrive Integration
Our application integrates with Microsoft OneDrive, via the Microsoft Graph API, to let our AI agent read files for context when you connect your OneDrive account.
Data Access: When you link your OneDrive, we access your file and folder listings and read file content via the Microsoft Graph API. We also store an encrypted access token to maintain this connection. This access is read-only — we do not create, modify, or delete your OneDrive files or folders.
AI Processing: File content read from your connected OneDrive is sent to our AI service provider, OpenAI, so the AI agent can use it as context when generating responses. See Section 3 (Third-Party Service Providers) for details.
Access Restriction: No one other than the platform has access to the files and folders read from your OneDrive — not other clients, and not One AI Platform team members, except where explicitly granted for support purposes.
Data Security: Access tokens are stored using industry-standard encryption. We do not use OneDrive data for advertising purposes.
Limited Use Disclosure: One AI Platform's use and transfer to any other app of information received from Microsoft Graph APIs will adhere to Microsoft Privacy Statement and the Microsoft Graph Permissions Reference, including limited use requirements.
11. Contact
We are currently in early development and do not have a public website
or support channel.
Business users may contact us with privacy concerns or data deletion
requests at:
Email: info@one-connect.ai