Privacy Policy

Kooobu is operated by KOOOBU I.T. SERVICES. Contact privacy@kooobu.com about this notice or your information.

This notice covers Kooobu's Facebook Messenger Inbox for businesses whose Page connection has been enabled. The integration is being introduced in stages, and image messaging is available only to businesses for which it has been enabled. Publishing this notice does not enable a Page or announce general availability. Supervised development checks use fictional inquiries and separately agreed instructions.

Information we handle

• The connected Facebook Page's name and identifier and its Kooobu business.
• A Page-scoped Messenger identifier and a label used to distinguish conversations. This integration does not require a global Facebook profile identifier.
• A participant's name and profile photo when Meta makes them available under the Page connection's permissions. If those details are unavailable, we use a guest label or initials; a displayed name is not proof of a verified identity.
• Incoming and outgoing message text, message identifiers, timestamps, and related delivery, read and reply status.
• Supported incoming and outgoing images, smaller image previews, and images uploaded by authorized staff while preparing a reply, where image messaging is enabled.
• An authorized operator's account, business role and action references, plus connection credentials and limited technical records needed to secure and operate the connection.

Supported message images are downloaded or uploaded, processed into viewing copies and thumbnails, and stored privately for the conversation. Unsupported attachments are represented by a notice rather than stored as usable files; an image can also be unavailable if it cannot be retrieved or processed. Please avoid sending passwords, payment-card information, identity documents or unnecessary sensitive information through an inquiry.

Why we use it and who can access it

We use this information to connect the selected Page, receive and display inquiries and available recent history, help staff recognize conversations, send replies deliberately submitted by authorized business staff, show unread and delivery status, prevent duplicates, and maintain security and deletion controls. The business Owner and authorized Property Managers can use that business's Inbox. Cleaner accounts cannot use it.

The business Owner controls the Page connection and should explain the business's own handling of inquiries to its guests. When a Page is enabled, its supported new conversations can be processed; a single participant's agreement does not limit processing to that participant. A test must therefore account for other activity on the selected Page.

When a recent-history import starts, Kooobu can retrieve supported messages from the preceding seven days. Coverage depends on what Meta makes available and the connection's permissions; this is not a complete archive of the Page's conversations. Imported messages keep their original timestamps and follow the same retention and deletion rules as new messages.

This integration does not create advertising audiences, process lead forms, make reservations or payments, or enable WhatsApp, Instagram or TikTok messaging. Those functions require their own implementation and arrangements.

Services and safeguards

The services involved include Meta for Messenger, Neon for database storage, and AWS for hosting and private message-image storage. An approved development check can also use the operator's local computer and a temporary HTTPS relay such as ngrok. Access is limited to authorized business staff and operators who need it for support, security or a verified request.

We use HTTPS for external webhook delivery, restrict business access, and encrypt stored connection tokens and participant identifiers. We keep message text and access tokens out of public project records. The current database and cloud hosting are in Singapore; providers may process information elsewhere under their own arrangements. Meta holds the original Messenger conversation under its own terms.

Viewing message images and profile photos through Kooobu requires an authorized Inbox session. Stored message images are not published as public files. Available profile photos are retrieved through protected access and may be temporarily cached to display a small preview.

180-day conversation history

Earlier limited tests keep any shorter cleanup deadlines already agreed for those tests. This policy does not extend those deadlines.

Each message expires 180 days after its own message timestamp. New activity does not extend the life of older messages. Expired content is excluded from normal Inbox reads. Maintenance removes expired stored copies in bounded batches, so exclusion from view and physical removal are separate stages.

Stored message images and their thumbnails follow the same message expiry. Importing a message does not restart its 180-day period. An uploaded image that is not sent expires 24 hours after upload; cancelled or expired uploads are queued for cleanup. Unresolved file cleanup remains pending until removal has been checked.

A verified deletion request can remove Kooobu conversation content earlier. Related message previews, receipt content and message-derived CRM references are included in the cleanup. Minimal CRM linkage or separately maintained business records may remain where they have an independent purpose; deleting an Inbox conversation does not delete a booking or payment record.

Conversation cleanup also covers related message-image files, thumbnails and unsent image uploads within the request's scope. We track file removal separately and do not treat hidden images as proof that their stored copies have been removed.

Restricted backups or database history can retain removed content for up to 30 days after active removal. We track that stage separately and do not report every copy removed until the relevant expiry or deletion has been checked. Restored data must have deletion instructions reapplied before it returns to use.

To prevent deleted history from reappearing after a retry or restore, we retain limited deletion records containing protected matching references rather than message text or raw Messenger identifiers. These normally have a 210-day replay-protection period. They can remain longer if backup expiry or recovery checks are unresolved; removal requires those checks. Minimal security and action records also remain subject to their purpose and applicable requirements.

Disconnecting a Page stops its connection; it does not itself erase retained Kooobu history or Meta's original conversation. Sending a new message after a conversation has been removed can create new history under the same 180-day policy.

Your requests

Contact the connected business or privacy@kooobu.com to ask about your information or request access, correction, a copy or deletion. We verify requests through an existing account or conversation where possible. Passwords, access tokens and government identity documents are not the default verification method.

See the data-deletion instructions for the request process and the distinction between active removal, backup expiry and Meta's copies.

Changes to this notice

We update this page when the covered processing changes and explain material changes before expanding the use of information. A notice update does not itself transfer accounts, grant permissions or connect a Facebook Page. For information held by a different Kooobu service, identify that service when contacting us so we can route your request.