BUNOVA.

隐私政策 · Privacy Policy

最后更新 Last updated: 2026-09-29

中文|English

中文版目录数据删除说明服务条款

一、我们是谁

BUNOVA（“我们”）是一个 AI 原生的企业增长操作系统，为企业客户提供获客、客户沟通（AI 客服/销售）、客户关系管理与收入分析服务。本政策说明我们如何收集、使用、存储与保护个人信息。

二、我们收集的信息

  • 账号信息：企业客户管理员的姓名、邮箱、登录凭证，用于提供服务与账号安全。
  • 企业业务资料：企业客户主动上传的业务介绍、文档与知识库内容（Company Brain），用于生成 AI 回复的知识依据。
  • 客户沟通消息：经企业客户授权接入的渠道（Web Chat、WhatsApp、电子邮件、Instagram 私信、Messenger）中，终端用户与企业客服/销售之间的消息内容，用于提供对话服务、生成 AI 回复草稿与人工接管。
  • 技术与日志信息：设备信息、IP 地址、访问日志，用于安全防护、故障排查与服务优化。日志中不记录消息正文与密钥。

三、Meta 渠道（WhatsApp / Instagram / Messenger）专项说明

当企业客户授权 BUNOVA 接入以下 Meta 渠道时：

  • WhatsApp Business Platform：我们申请whatsapp_business_messaging权限，用于代表企业收发客户咨询消息；所有外发消息遵循 WhatsApp 商业政策与消息模板规则。
  • Instagram Messaging API：我们申请instagram_manage_messages权限，用于读取并回复企业 Instagram 专业账号收到的私信。
  • Messenger Platform：我们申请pages_messaging权限，用于读取并回复企业 Facebook 主页收到的 Messenger 消息。

通过上述渠道获得的消息内容仅用于为对应企业提供客服与销售沟通服务，不会用于跨企业的广告画像、数据转售，或训练面向第三方的通用模型。AI 生成的回复均为草稿，须经人工审批或在企业配置的策略下才会发出。

四、信息的使用

  • 提供、维护与改进 BUNOVA 服务；
  • 生成 AI 回复草稿、执行经授权的自动化工作流；
  • 安全防护、欺诈防范与合规审计；
  • 在获得同意或法律允许的情况下发送服务通知。

五、信息的共享

我们不出售个人信息。仅在以下情形共享必要信息：获得明确同意；为提供服务所必需的子处理方（如 Meta 渠道服务、云基础设施与 AI 模型服务商，且均受合同约束）；法律法规要求。

六、数据保留

会话消息正文默认保留 90 天，普通日志 30 天，安全审计日志 365 天，到期后删除或匿名化。企业客户可在合同约定的范围内要求更短的保留期。

七、数据安全

我们采用传输与存储加密、多租户隔离、基于角色的访问控制与审计日志等措施保护数据。任何员工均按最小权限访问数据。

八、您的权利

您有权访问、更正、删除您的个人信息，撤回同意，或要求限制处理。请通过privacy@example.com 联系我们，或访问我们的数据删除说明页： /data-deletion。我们将在合理期限内（不超过 30 天）响应。

九、未成年人

BUNOVA 面向企业客户，不面向 18 岁以下未成年人提供服务。

十、政策更新

本政策更新后将在本页面公布并更新“最后更新”日期。重大变更将通过站内通知或邮件告知企业客户。

十一、联系我们

如对本政策有任何疑问： privacy@example.com；网站：https://example.com

1. Who we are

BUNOVA (“we”) is an AI-native growth operating system for businesses, providing lead acquisition, customer communication (AI support/sales), CRM and revenue analytics. This policy explains how we collect, use, store and protect personal information.

2. Information we collect

  • Account information: name, email and login credentials of business customer administrators, used to provide the service and secure accounts.
  • Business materials: business profiles, documents and knowledge-base content voluntarily uploaded by business customers (Company Brain), used as grounding for AI-generated replies.
  • Customer communications: message content between end users and business support/sales across authorized channels (Web Chat, WhatsApp, Email, Instagram DM, Messenger), used to provide conversational service, generate AI reply drafts and enable human handoff.
  • Technical and log data: device info, IP addresses and access logs for security, troubleshooting and optimization. Message bodies and secrets are never written to logs.

3. Meta channels (WhatsApp / Instagram / Messenger)

When a business customer authorizes BUNOVA to connect Meta channels:

  • WhatsApp Business Platform: we requestwhatsapp_business_messaging to send and receive customer inquiry messages on the business's behalf, following WhatsApp Business Policy and message template rules.
  • Instagram Messaging API: we requestinstagram_manage_messages to read and reply to DMs received by the business's Instagram professional account.
  • Messenger Platform: we requestpages_messaging to read and reply to Messenger messages received by the business's Facebook Page.

Message content obtained through these channels is used solely to provide support and sales communication for the respective business. It is never used for cross-business advertising profiling, data resale, or training general models for third parties. AI-generated replies are drafts and are only sent after human approval or under customer-configured policies.

4. How we use information

  • Provide, maintain and improve the BUNOVA service;
  • Generate AI reply drafts and run authorized automated workflows;
  • Security, fraud prevention and compliance auditing;
  • Send service notices where consented or legally permitted.

5. Sharing

We do not sell personal information. We share only with explicit consent, with sub-processors necessary to provide the service (e.g. Meta channel services, cloud infrastructure and AI model providers, all contractually bound), or as required by law.

6. Data retention

Conversation message bodies are retained 90 days by default, general logs 30 days, security audit logs 365 days, then deleted or anonymized. Business customers may request shorter retention within contractual terms.

7. Security

We protect data with encryption in transit and at rest, multi-tenant isolation, role-based access control and audit logging, with least-privilege access for staff.

8. Your rights

You may access, correct or delete your personal information, withdraw consent, or request restriction of processing via privacy@example.com or our data deletion instructions at /data-deletion. We respond within a reasonable period (no more than 30 days).

9. Minors

BUNOVA serves business customers and is not directed at individuals under 18.

10. Updates

Updates to this policy will be posted on this page with a revised “Last updated” date. Material changes will be notified to business customers in-app or by email.

11. Contact

Questions about this policy: privacy@example.com; website: https://example.com

BUNOVA · 本页面为公开页面，供 Meta 应用审核与用户查阅 · This page is public for Meta App Review and user reference.