Privacy Policy
Last updated: March 1, 2026
ULTRA AGENT LIMITED ("we", "us", "our"), a company registered in Thailand (Registration No. 0105569026818), is committed to protecting your privacy. This policy explains how we collect, use, store, and safeguard your personal data when you use our services.
1. Information We Collect
We collect information you provide directly: name, email address, business name, Facebook Page data (Page ID, Page name, Page access token), and message content sent to your connected Pages. Through Facebook APIs, we also collect customer interaction data including Page-Scoped User IDs (PSIDs), profile names, and profile pictures of users who message your Page. We additionally collect technical data: IP address, browser type, device information, and usage analytics.
2. How We Use Your Data
Your data is used to: provide AI auto-reply services for your Facebook Pages, display customer conversations in our unified inbox, improve AI response accuracy through your business knowledge base, send service-related notifications, and process payments. We never sell your data to third parties or use it for advertising purposes.
3. Data Storage & Security
All data is stored in our private datacenter in Bangkok, Thailand. We use AES-256 encryption at rest and TLS 1.3 in transit. Database access requires multi-factor authentication. Access is restricted to authorized personnel only. We conduct regular security audits and vulnerability assessments.
4. Data Retention
We retain your account data for as long as your account is active. Conversation data is retained for 24 months from the date of the last interaction, after which it is automatically purged. When you delete your account or disconnect a Facebook Page, associated data is deleted within 30 days. Transaction records are retained for 5 years as required by Thai tax law.
5. Facebook / Meta Platform Data
Our use of data received from Facebook APIs complies with the Meta Platform Terms and Developer Policies. Specifically: (a) we only request permissions necessary to provide our services, (b) data received from Facebook APIs is used solely for providing AI auto-reply and unified inbox functionality, (c) we do not transfer Facebook data to third parties except as necessary to provide our service (e.g., AI processing), (d) we do not use Facebook data for advertising, analytics unrelated to our service, or any purpose not explicitly approved by Meta, and (e) we provide a data deletion callback endpoint that automatically processes deletion requests when users remove our app.
6. PDPA Compliance
We comply with Thailand's Personal Data Protection Act (PDPA). You have the right to: access your personal data, request correction of inaccurate data, request deletion of your data, restrict or object to processing, and request data portability. Contact our Data Protection Officer at [email protected] for any data-related requests.
7. GDPR Compliance
For users in the European Economic Area (EEA), we comply with GDPR. Legal bases for processing include: contract performance (providing our service), legitimate interest (improving service quality), and consent (analytics cookies). You have the right to be forgotten, data portability, and to restrict processing. Our Data Protection Officer can be reached at [email protected].
8. Cookies
We use essential cookies for authentication and session management. Analytics cookies are optional and require your consent. You can manage cookie preferences in your browser settings. We do not use tracking cookies for advertising.
9. Third-Party Services
We integrate with the following third-party services: Facebook/Meta APIs (to receive and send messages on your behalf, access customer profile data via PSID, and manage Page webhook subscriptions), Cloudflare (CDN and DDoS protection), and payment processors for subscription billing. Each third-party service operates under its own privacy policy. Data shared with these services is limited to what is necessary for their function.
10. Data Deletion
You may request deletion of your personal data at any time. We also support Facebook's data deletion callback — when you remove our app from Facebook, we automatically delete your data within 48 hours. For manual requests, visit https://www.ultraagent.app/data-deletion or email [email protected].
11. Contact
For privacy-related questions, contact our Data Protection Officer at [email protected], call +66 91-599-3559, or write to: ULTRA AGENT LIMITED, 316/97 Soi Wongsawang 11, Wongsawang, Bang Sue, Bangkok 10800, Thailand.