Privacy Policy

1. Introduction

This Privacy Policy explains how FireFly Tech Oy ("we", "us", "our"), a limited liability company with its principal place of business at Sienimäenkatu 7 C 24, 55510 Imatra, Finland, collects, uses, and protects your information when you use OneTwoAgent ("Service", "Platform").

By using OneTwoAgent, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Account Information

• Name and email address
• Company/business name
• Password (encrypted)
• Billing information (processed by our payment provider)

2.2 Business Data

• Website URLs you provide for AI training
• Knowledge base content you upload (text, files, documents)
• Bot configuration and settings
• Widget customization preferences

2.3 Conversation Data

• Chat conversations between your customers and AI chatbot
• Customer contact information collected through chatbot (name, email, phone)
• Conversation metadata (timestamps, channel, status)

2.4 Connected Services Data

• Google Calendar: Calendar events and availability (when connected)
• WhatsApp/Telegram: Messages sent through these channels
• We only access data necessary to provide the Service

2.5 Technical Data

• IP address
• Browser type and version
• Device information
• Usage data and analytics

3. How We Use Your Information

We use collected information to:

• Provide and maintain the Service
• Train AI models specific to your business
• Process conversations and generate AI responses
• Send booking confirmations and notifications
• Improve and personalize the Service
• Communicate with you about updates and support
• Process payments and billing
• Comply with legal obligations

4. Data Storage and Security

4.1 Storage

• Data is stored on secure servers within the European Union
• We use industry-standard encryption for data at rest and in transit
• Access tokens and sensitive credentials are encrypted using AES-256

4.2 Security Measures

• SSL/TLS encryption for all data transmission
• Regular security audits and monitoring
• Access controls and authentication
• Automated backups

5. Data Sharing

We do not sell your personal data. We may share data with:

5.1 Service Providers

• OpenAI: For AI processing (conversation data is processed to generate responses)
• Payment processors: For billing (Paddle/Lemon Squeezy)
• Cloud infrastructure: For hosting (AWS/Vercel)
• Email services: For notifications (Resend)

5.2 Third-Party Integrations

When you connect third-party services (Google Calendar, WhatsApp, Telegram), data is shared as necessary to provide those integrations.

5.3 Legal Requirements

We may disclose data if required by law or to protect our rights and safety.

6. Your Rights (GDPR)

Under GDPR, you have the right to:

• Access: Request a copy of your data
• Rectification: Correct inaccurate data
• Erasure: Request deletion of your data
• Portability: Receive your data in a portable format
• Restriction: Limit how we process your data
• Objection: Object to certain processing
• Withdraw consent: Where processing is based on consent

To exercise these rights, contact us at privacy@onetwoagent.com

7. Data Retention

• Account data: Retained while your account is active, deleted within 30 days of account closure
• Conversation data: Retained for 12 months, then automatically deleted
• Billing records: Retained for 7 years as required by law

8. Cookies

We use essential cookies for:

• Authentication and session management
• Security and fraud prevention
• Remembering your preferences

We use analytics cookies (with consent) to understand how you use our Service.

9. Children's Privacy

OneTwoAgent is not intended for individuals under 16 years of age. We do not knowingly collect data from children.

10. International Transfers

Your data may be transferred to and processed in countries outside the EU. We ensure appropriate safeguards are in place, including Standard Contractual Clauses.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through the Service.

12. Contact Us

For privacy-related inquiries:

For EU residents, you have the right to lodge a complaint with your local data protection authority.