Privacy Policy

OmniSales operates a small number of demo storefronts (each its own independent brand) and an AI shopping-assistant platform that answers customer questions on each store's website chat widget and, where connected, its Instagram account. This policy covers all of them.

From customers chatting with a store's assistant: the content of your messages, a randomly generated identifier for your chat session (website widget) or your Instagram-scoped user ID (Instagram DMs), and, only if you choose to share it while placing an order, your name, phone number, and delivery address.

From business owners using the dashboard: your login email, and — if you connect Instagram — your Instagram professional account's ID, username, and an encrypted access token we use solely to send replies on your behalf.

Message content is sent to our AI provider (OpenAI) to generate a helpful reply and to search the relevant store's product catalog. Conversation history and any leads you share are shown to that store's owner in their private dashboard so they can follow up and understand what customers are asking for. We do not sell data, and a business only ever sees its own customers' data — never another store's.

If a store connects its Instagram account, we receive your direct messages to that account via Meta's Instagram Messaging API, generate a reply the same way as the website widget, and send it back through that same API. We store the business's access token encrypted at rest and never log it. We do not post, comment, or message on your behalf outside of replying to messages you sent.

Processing partners: OpenAI (generates replies and search embeddings), Meta/Instagram (delivers and sends messages for connected accounts), and Supabase and Vercel (database and application hosting). Each processes data only to provide their respective service to us.

We keep conversation history and captured leads so store owners can review past customer interactions. We don't currently auto-delete this data after a fixed period. You can request deletion at any time — see our Data Deletion page.

You can ask us what data we hold about you, ask us to correct it, or ask us to delete it, at privacy@faatehsultan.com. A business owner can also disconnect their Instagram account at any time from their dashboard, which immediately revokes our ability to send messages on their behalf.

Questions about this policy or your data: privacy@faatehsultan.com.