Privacy Policy

Who we are

PunëtorAI ("we") is operated by Digita Dev (DIGITA sh.p.k., NIPT M01812006I), Rruga «Abdyl Frashëri», Pallati Hekla, Seksioni B, Kati 8, Ap. 10, Tirana, Albania. PunëtorAI provides an AI customer-service assistant that businesses ("our customers") connect to their website chat, Facebook Messenger, Instagram, and WhatsApp. Contact: info@punetor.ai.

What we collect

• Business account data — name, email, and password hash of the business user; business name; the content the business provides, including documents it uploads, or that we read from its public website (product data, policies, FAQs) to power its assistant.
• Channel connection data — when a business connects a Facebook Page, Instagram account, or WhatsApp number, we store the identifiers and access tokens Meta issues for that purpose, and use them only to receive and send that business's customer messages.
• Conversation data — messages customers send to a connected business and the replies sent back, plus the sender's display name where the platform provides it, and an optional 1–5 satisfaction rating the customer may leave. This data belongs to the business the customer contacted; we process it on that business's behalf.
• Media and extracted details — voice notes, photos and videos that customers send are stored as files and transcribed or described by AI so the assistant can understand them. Contact details, booking requests and an AI estimate of the customer's purchase interest are extracted from the conversation and shown to the business as leads and booking requests.

How we use it

We use business account and conversation data to operate the service: answering customer messages with AI on the business's behalf, showing conversations to the business in its dashboard, escalating to a human when needed, and improving the assistant's answers for that business. We do not sell personal data. We do not use business account or conversation data for advertising or train general-purpose AI models on it.

Data we collect for our own business

When you request a demo, buy a plan, or chat with PunëtorAI on our website, Instagram or Facebook, Digita Dev is the controller of the details you give us: your name, business name, phone number, email, tax ID and your messages. If you leave a phone number or email in a chat, it is sent to our team so we can contact you. One month after a purchase, we send you a review invitation through an independent review service.

Legal bases

• Business account and conversation data — to perform our contract with the business.
• Demo requests and purchases — to respond to your request and perform the contract.
• Contacting people who leave a phone number or email in a chat — our legitimate interest in answering their enquiry.
• Review invitations one month after purchase — our legitimate interest; you can opt out by replying or contacting us.
• Analytics and advertising tools — only with your consent, which you can withdraw in Cookie preferences.

Website cookies and advertising

On our public website, optional tracking uses Google Tag Manager, Google Analytics, Google Ads and Meta Pixel. With your consent, they measure visits and advertising performance and can be used to show our ads to you elsewhere. These scripts load only after you accept optional tracking. They may send page URLs, browser and device information, IP addresses and cookie identifiers to Google and Meta. We do not include conversation content or business account details in our page-view events. With optional tracking accepted, a successfully submitted demo request also sends a conversion event with a random identifier and no form data: it does not include your name, email, phone number, website or message text.

You can accept or reject optional tracking and change your choice using Cookie preferences in the website footer. We remember your choice in this browser for up to 180 days. Rejecting optional tracking does not prevent use of the website. Withdrawing consent reloads the page to stop the loaded tracking scripts; it does not erase information already sent to providers or automatically delete their cookies. You can also clear cookies in your browser settings.

Recipients of data

We share data with these categories of recipients:

• AI service providers — generating answers, transcribing voice notes, describing images and videos, reading documents, extracting leads and booking requests, and search indexing
• Cloud hosting, database and file-storage providers — running the service, storing data and media files, realtime updates and rate limiting
• Email delivery provider — account and service emails
• Payment processor — PayPal, for plan payments
• Messaging platforms — Meta (Instagram, Messenger, WhatsApp), for message delivery on channels a business connects
• Review-invitation service — a review invitation one month after a purchase
• Website analytics and advertising tools — only with your consent, as described above

Each receives only what its function requires. A current list of the providers we use is available to business customers on request. Some providers are located outside Albania, mainly in the United States, so data may be processed there. These transfers rely on our providers' standard contractual clauses or equivalent safeguards.

Retention & deletion

We keep a business's data while its account is active. A business owner or admin can delete a conversation and everything tied to it (messages, media, leads, bookings) from the dashboard at any time. Other deletion requests sent to info@punetor.ai are completed within 30 days. When an account closes, its data is deleted within 30 days of the business's request. Billing and invoice records are kept for the period Albanian tax law requires. Businesses can disconnect any channel at any time; this deletes that channel's stored access tokens, while its identifiers and name are kept so it can be reconnected. See Data Deletion.

Your rights

Albanian data-protection law and the GDPR give you rights of access, correction, deletion, and objection. Customers of a connected business should address requests to that business first; we assist it in fulfilling them. You can also contact us directly at the email above.

Meta platform data

Data received via Meta's APIs (Messenger, Instagram, WhatsApp) is used only to provide the messaging features described here, in accordance with Meta's Platform Terms and Developer Policies, and is never sold or transferred to data brokers. Access tokens are stored in our access-controlled database and deleted when you disconnect the channel.