Shqip·English

Privacy Policy

Last updated: September 2026

1. Information we collect

When you use Asistenti.ai, we collect the following information:

Registration information (business name, email, phone number)
Chatbot conversations with your customers (to provide the service)
Usage data (number of conversations, messages)

2. How we use your data

Your data is used only for:

Providing the AI chatbot service
Improving service quality
Communicating with you about your account

3. Data sharing

We do not sell or share your personal data with third parties, except when required by law or to provide the service (e.g., Meta/WhatsApp for sending messages).

4. Data security

Your data is protected with encryption and other technical security measures. Access to data is restricted to authorized personnel only.

5. Your rights

You have the right to:

Request access to your data
Request deletion of your data
Export your data
Cancel your account at any time

Google User Data (Google Calendar)

If you choose to connect your Google Calendar, Asistenti.ai accesses your Google user data through Google APIs as follows:

Data accessed: your calendar events (the "calendar.events" scope) — read to check availability within your configured booking hours, and written to create appointment events when a booking is confirmed.
How we use it: exclusively to provide the appointment-booking feature you enable — checking free time slots and creating bookings on your behalf. We do not use this data for advertising, profiling, or any other purpose.
Storage & protection: we store only your OAuth refresh token (protected on our servers) and the IDs/details of appointments created through our service. We do not copy or store the rest of your calendar.
Sharing: we never sell Google user data and never share it with third parties, except sub-processors strictly required to operate the service (e.g. our hosting provider), under confidentiality obligations.
Human access: no person reads your calendar data except with your explicit consent for support purposes, or where required for security or legal compliance.

You can disconnect Google Calendar at any time from your dashboard (Calendar → Disconnect) — this deletes the stored token — or revoke access from your Google Account at myaccount.google.com/permissions.

Asistenti.ai's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

6. Contact

For any privacy questions, contact us at: support@asistenti.ai

People who message our assistant (Messenger, Instagram, WhatsApp)

This section is for people who write to our assistant on Facebook Messenger, Instagram or WhatsApp, or who comment under our posts. The sections above cover businesses that buy the platform.

1. Who holds your data. GOSYSTEM SHPK, NUIS L61425022C, Rr. Gjergj Kastrioti, Nd. 4, H. 12, Ap. 19, Vlorë, Albania. Administrator: Erjon Nauni. "Asistenti i Mundesive" is a private service of GOSYSTEM SHPK. It is not a state office and does not act for the Albanian state.

2. When we message you. On Messenger and Instagram we reply only after you write to us, or after you comment under one of our posts (then we send at most one private message). On WhatsApp we write in the conversation you started; if you go quiet after our reply we may send one follow-up message, once; if you signed up for the monthly watch, we send its notices until it ends or you stop it.

3. You are talking to software. Replies are written by an AI program. It is instructed to say so openly when asked.

4. What we store. On all three channels: the text of your messages and our replies, with date and time; the user ID Meta gives us (Messenger, Instagram) or your phone number (WhatsApp); your profile name when Meta provides it; comments you leave under our posts, with your profile name; and summaries and notes our software writes about the conversation to check quality.

On WhatsApp only: photos, documents and voice messages you send, and the text description our software makes of them (voice is turned into text); your location, only if you send it; the name, father's name and surname you give us for a legalisation-list check, and the village or area you give us for the watch; order and payment details (amount, date, payment code) — we never see your card number, which you enter on the payment institution's own page; and, when you pay by bank slip, the photo of the slip. For each bank we may keep up to 3 confirmed slips as examples to check future slips; they are not displayed anywhere.

Messenger and Instagram: photos, audio and files you send there are not received by us at all; our software reads text only.

We have no field for national ID numbers, dates of birth or home addresses. If you type them into the conversation, they are stored as part of the text.

5. Why. To reply to you and deliver the service you ask for; to keep proof of orders and payments as tax and accounting law requires; and to check the quality of our answers and find our own mistakes. We do not use your messages for advertising and we do not sell them.

6. How long. Photos, documents and voice files (WhatsApp): the file is deleted automatically after 40 days; its text description stays in the conversation. Bank-slip photos kept as a bank's example: until a newer slip replaces them, or until you ask for deletion. Conversations, names, numbers and other data are kept with no fixed period and are deleted when you ask us to (see 8). Payment records: as long as tax and accounting law requires.

7. Who processes it for us. Meta (Messenger, Instagram, WhatsApp) — your message passes through them. AI models — write and check replies, read photos and documents, turn voice into text and summarise conversations; they receive the conversation text and the files you send. Railway — servers and database. File storage (S3-compatible, Cloudflare R2) — photos, documents, PDF reports. POK / RPAY SH.P.K. and PayPal — payments, WhatsApp only. Resend — our internal daily email, whose technical notices may contain a fragment of a conversation. Sentry — technical error reports, with no personal data added by us. Some of these services, including the AI models, process data outside Albania. We do not hand your data to state bodies on our own initiative, only when a lawful request requires it.

8. Your rights. You may ask what we hold about you, and ask for correction, a copy, or deletion. How to request deletion: https://asistenti.ai/data-deletion. You may complain to the Albanian Information and Data Protection Commissioner (idp.al). Processing is governed by Albanian Law no. 124/2024 on Personal Data Protection.

9. Contact. albachips@gmail.com. We answer within 30 days.

10. Public legalisation lists. Our service reads the public notices that ASHK itself publishes online and keeps a copy so that searching is fast. They contain first names, fathers' names and surnames as ASHK published them. We do not change them and do not sell them.