MT Desk

AI 客服及預約

登入

Privacy Policy

Last updated: March 8, 2026

MT Desk ("we", "us", or "our") operates the website https://mtdesk.ai and related services (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service, including integrations with third-party platforms such as Facebook, Instagram, and WhatsApp (collectively, "Meta Platforms").

By accessing or using the Service you agree to this Privacy Policy. If you do not agree, please do not use the Service.

1. Information We Collect

1.1 Information You Provide

  • Account information — name, email address, password, and company details when you register.
  • Payment information — billing address and payment method details processed securely through Stripe. We do not store full credit card numbers.
  • Content you upload — documents, website URLs, Q&A pairs, and other training data you provide for your chatbots.
  • Support communications — messages you send us via email or our contact form.

1.2 Information from Meta Platforms

When you connect your Facebook Page, Instagram Professional account, or WhatsApp Business account to the Service, we may receive:

  • Page & profile information — page name, page ID, profile picture, and account metadata.
  • Messages — incoming and outgoing messages, including text, images, and attachments exchanged between your connected accounts and end users.
  • User identifiers — platform-scoped user IDs of people who message your connected accounts.
  • Permissions & tokens — access tokens granted during the OAuth connection flow.

We only request permissions necessary to provide the Service (e.g., reading and sending messages on your behalf). We do not sell data received from Meta Platforms.

1.3 Automatically Collected Information

  • Usage data — pages visited, features used, timestamps, and referral URLs.
  • Device & browser data — IP address, browser type, operating system, and screen resolution.
  • Cookies — session cookies to keep you logged in and analytics cookies to improve the Service.

2. How We Use Your Information

  • Provide, operate, and maintain the Service.
  • Process transactions and send related billing information.
  • Route, display, and respond to messages from Meta Platforms on your behalf using AI-powered chatbots you configure.
  • Train and improve your chatbot's responses using the content you upload.
  • Send administrative notices such as account verification, security alerts, and support messages.
  • Analyze usage trends to improve performance and develop new features.
  • Comply with legal obligations and enforce our Terms of Service.

3. How We Share Your Information

We do not sell your personal information. We may share data with:

  • Service providers — cloud hosting (Amazon Web Services in Singapore), application hosting (Vercel in the United States and Hong Kong, and Render in the United States and Singapore), database hosting (MongoDB Atlas), payment processing (Stripe), and email delivery providers that help us operate the Service.
  • AI providers — we send message content to configured AI providers such as OpenRouter, Fireworks, Minimax, and Moonshot to generate chatbot responses. OpenRouter currently handles embeddings used for knowledge-base retrieval. Content is processed under our applicable data processing terms.
  • Meta Platforms — message replies are sent back through Meta's APIs to reach end users.
  • Legal & safety — when required by law, court order, or to protect the rights, safety, or property of MT Desk or others.
  • Business transfers — in connection with a merger, acquisition, or sale of assets.

4. Use of Meta Platform Data

In addition to the general practices described above, the following applies specifically to data we receive from Meta Platforms ("Platform Data") in compliance with Meta Platform Terms:

  • We only use Platform Data to provide the Service (i.e., receiving and replying to messages on your behalf via AI chatbots). We do not use Platform Data for any other purpose.
  • We do not sell, license, or otherwise commercialize Platform Data.
  • We do not use Platform Data to build or augment user profiles for advertising or to contact people outside of the Service.
  • We do not transfer Platform Data to any data broker, advertising network, or ad exchange.
  • We share Platform Data only with the sub-processors listed in Section 3 above, solely to operate the Service.
  • We store access tokens securely with encryption and limit access to authorized personnel only.
  • If you disconnect your Meta account or delete your MT Desk account, we delete all associated Platform Data within 30 days.

5. Data Retention

We retain your account data for as long as your account is active. Message data from Meta Platforms is retained for up to 12 months to provide conversation history and analytics, unless you request earlier deletion. When you delete your account or request data deletion, we remove your personal data within 30 days, except where retention is required by law.

6. Data Security

We implement industry-standard security measures including encryption in transit (TLS), encrypted storage, access controls, and regular security reviews. However, no method of transmission or storage is 100 % secure, and we cannot guarantee absolute security.

7. Your Rights

Depending on your jurisdiction you may have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate or incomplete data.
  • Delete your personal data (see our Data Deletion page).
  • Object to or restrict certain processing activities.
  • Withdraw consent at any time where processing is based on consent.
  • Port your data in a structured, commonly used format.

To exercise these rights, contact us at info@mtdesk.ai.

8. Third-Party Links

The Service may contain links to third-party websites or services. We are not responsible for their privacy practices. We encourage you to read their privacy policies before providing any personal information.

9. Children's Privacy

The Service is not directed to individuals under 16. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will delete it promptly.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own, including Singapore, the United States, and Hong Kong, depending on the infrastructure and service providers used to operate the Service. We take appropriate safeguards to ensure your data is protected in accordance with this Privacy Policy.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. Continued use of the Service after changes constitutes acceptance of the revised policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy, contact us at: