Privacy Policy

1. Who we are

QUASAR79 LLC, Yakkasaray District, Belarik MFY, Bakhodir Street 88a, Tashkent, Uzbekistan. Contact: maik.meta2004@gmail.com.

2. Who this policy covers

Businesses and individuals who create bots in Togable ("customers"), and people who write to a customer's bot in Telegram, Instagram or WhatsApp ("end users").

For end users the customer decides what its bot does and is the controller of the conversation; we process the conversation on the customer's behalf to run the bot.

3. Data we process

• Customer account: name, email, Telegram ID, Google profile name and email if you sign in with Google, language, plan and payments.
• Bot projects: the bot description, code, settings and the API keys you enter (keys are stored encrypted).
• Connected Instagram account: account ID, username, profile picture and the access token issued by Meta (stored encrypted); Direct messages sent to the account and the bot's replies; the sender's Instagram-scoped ID.
• Connected WhatsApp number: WhatsApp Business account ID, phone number ID, display phone number, verified business name and the access token issued by Meta (stored encrypted); messages sent to the number and the bot's replies; the sender's phone number and WhatsApp profile name.
• Technical data: IP address, browser, request and error logs.

4. Meta permissions we request and why

• instagram_business_basic — read the connected professional account's ID, username and profile picture to show which account is connected.
• instagram_business_manage_messages — receive Direct messages sent to the connected account and send the bot's replies.
• whatsapp_business_management — read the connected WhatsApp Business account and phone number, subscribe it to message notifications and manage message templates.
• whatsapp_business_messaging — receive WhatsApp messages sent to the connected number and send the bot's replies and approved templates.

5. How we use data

• To run the bot the customer configured: receive a message, generate an answer and send it back through the same channel.
• To show the customer which channels are connected and whether they work.
• To generate answers, message text may be processed by our AI provider (Anthropic). It is not used to train AI models.
• We do not sell data, do not use it for advertising and do not share it with other customers.

6. Who processes data for us

• DigitalOcean — servers in Frankfurt, Germany.
• Anthropic — AI answers (USA).
• Meta Platforms and Telegram — delivery of messages in their messengers.
• We disclose data to authorities only when required by law.

7. Storage and security

Access tokens and keys are encrypted (AES-256-GCM). Each bot has its own isolated database schema and role. Traffic is encrypted with TLS.

We keep data while the account, bot or channel exists. When a channel is disconnected, its token is deleted immediately; message records of that channel are deleted within 30 days. Deleting a bot deletes all of its data.

8. Your choices and deletion

Customers can disconnect a channel or delete a bot in Togable at any time. Removing Togable in Instagram settings (Apps and websites) notifies us automatically and we delete the data of that account.

Anyone can request deletion by email. See the Data Deletion page for the steps and the status of a request.

9. Children

Togable is not intended for children under 13 and we do not knowingly collect their data.

10. Changes and contact

We update this page when the service changes; the date is shown above. Questions: QUASAR79 LLC, Yakkasaray District, Belarik MFY, Bakhodir Street 88a, Tashkent, Uzbekistan, maik.meta2004@gmail.com.