Privacy Policy
Last Updated: July 12, 2026
1. Introduction
Welcome to TenthDesk (accessible at tenthdesk.com, "we," "us," or "our"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy governs our privacy practices and explains how we collect, use, and share information when you use our conversational automation, store, and AI agent builder platforms.
2. Information We Collect
We collect information you provide directly to us when setting up your account, integrating channels, and operating your store.
Personal Profile Details: Your name, business name, contact number, email address, password, and billing information.
Integration Data (Facebook & Meta APIs): When you link Facebook Messenger, Instagram Business, or WhatsApp, we retrieve and store access tokens, account/page IDs, page names, and webhook payloads (incoming user messages, comments, and replies) necessary to orchestrate automated responses and store chat history.
Store & Customer Details: Customer email addresses, delivery information, shipping details, and order history connected to your bio store or third-party webhooks (e.g., Shopify, WooCommerce).
3. How We Use Your Information
We process your information to deliver, improve, and secure our automation services:
- Deploying custom chatbot flows and routing queries through GPT-4 and conversational AI models.
- Syncing and maintaining lists of contacts within the unified dashboard.
- Processing product purchases and digital deliveries from your tenthdesk link store.
- Triggering automated transactional messages, such as WhatsApp delivery notifications and order alerts.
- Verifying account settings, authenticating users, and preventing malicious activity.
4. Data Retention & Security
We encrypt sensitive tokens (including Meta access tokens) using standard AES-256 encryption before saving them to our databases. We store communication payloads to render chat histories on your dashboard. You can disconnect your pages and delete your tokens at any time. When an integration or account is deleted, we purge all personal data, templates, and chat histories, keeping only a secure record of integrated Meta account IDs (without any personally identifiable details) to prevent trial duplication and plan abuse.
5. Sharing of Data
We do not sell or rent user data. Information is shared strictly under compliance guidelines:
- AI Providers: Message logs may be processed via OpenAI (or other secure LLM providers) to format and handle smart responses.
- Meta Platforms Inc: Authentication and webhook deliveries run securely through Meta's graph endpoints.
- Razorpay: Payment credentials and transaction details are securely processed by Razorpay's PCI-DSS compliant payment gateway.
6. Your Privacy Rights & Data Deletion
You possess complete control over your credentials and customer records. You can request account termination and full deletion of your database entry at any time. For step-by-step guidelines on deleting your personal data from Botflow, please refer to our Data Deletion Instructions page.
7. Contact Information
If you have any questions or complaints regarding this Privacy Policy, please contact our support desk:
Jabalpur, 483105, MP, India