Privacy Policy
This Privacy Policy applies to BeSmart.ai's application(s) that use Facebook Login and other social media authentication channels. By using our app, you agree to the data practices described herein.
1 Introduction
BeSmart.ai ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, share, and protect information when you use our application(s) through Facebook Login and other social media platforms. It also describes your rights and choices regarding your personal data.
BeSmart.ai operates AI and machine learning solutions, including social media analytics, AI-powered content creation tools, and user authentication services. This policy covers all of these services and the specific BeSmart.ai products listed below.
2 BeSmart.ai Services Covered by This Policy
The following BeSmart.ai products and services use this application and may access social media account data through Facebook Login and other connected channels:
Backbone
A Retrieval-Augmented Generation (RAG) SaaS platform that enables BeSmart.ai clients to rapidly build and deploy AI-powered knowledge bases and intelligent chat assistants directly into their websites and applications. Backbone may use social media authentication to streamline user onboarding and login for client-facing deployments.
DataServ
A synthetic data generation and management platform for AI/ML model training, data augmentation, and regulatory compliance. DataServ may access social media metadata and engagement signals (with your permission) to generate realistic synthetic datasets for AI development and analytics workflows.
QuickWave
An AI-powered social media marketing and content automation tool for planning, generating, scheduling, and publishing content across Facebook, Instagram, and other channels. QuickWave requires social media login permissions to connect accounts, retrieve performance analytics, and publish content on your behalf.
Each service operates under this Privacy Policy. Where a service has supplementary data terms, those will be presented within that service's interface at the point of collection.
3 Information We Collect
3.1 Information from Facebook Login
When you authenticate using Facebook Login, we may receive the following information from Facebook, subject to your granted permissions:
- Public profile information (name, profile picture, age range, language, country)
- Email address (if permission is granted)
- Facebook User ID (a unique identifier assigned by Facebook)
- Friends list (only with explicit permission, and only for app features that require it)
- Pages you manage (if relevant to our social analytics features)
- Instagram account data linked to your Facebook account (if permission is granted)
We only request permissions that are necessary to provide the features you use. You may revoke permissions at any time from your Facebook account settings.
3.2 Information from Other Social Media Channels
If you connect accounts from other social media platforms (e.g., Instagram, LinkedIn, Twitter/X), we may collect similar profile information, engagement metrics, and content data as authorized by you and those platforms.
3.3 Usage & Analytics Data
We automatically collect certain information about how you interact with our app:
- Log data (IP address, browser type, pages visited, timestamps)
- Device information (operating system, device identifiers)
- Feature usage patterns within the application
- Session duration and frequency of use
3.4 Content You Provide
If you use AI-powered content creation or analytics features, we may collect:
- Text inputs, prompts, and content drafts you enter
- Social media post data you upload or connect
- Reports and outputs you generate and save
4 How We Use Your Information
We use the information we collect for the following purposes:
- To authenticate your identity and provide access to our application
- To power social media analytics dashboards and insights
- To enable AI-driven content creation, scheduling, and optimization features
- To personalize your experience and recommendations
- To send you service-related communications (updates, security alerts)
- To monitor, analyze, and improve our platform's performance and features
- To detect fraud, abuse, or violations of our Terms of Service
- To comply with legal obligations applicable in the Kingdom of Saudi Arabia and other jurisdictions
We do not use your data for automated decision-making that has significant legal effects without your explicit consent.
5 Legal Basis for Processing
Where required by applicable law (including PDPL — Saudi Arabia's Personal Data Protection Law), our legal basis for processing your data includes:
- Your explicit consent (e.g., granting Facebook Login permissions)
- Performance of a contract (providing the services you have requested)
- Legitimate interests (improving and securing our platform)
- Legal obligation (compliance with local regulations)
6 Data Sharing & Disclosure
We do not sell your personal data. We may share data in limited circumstances:
6.1 Service Providers
We engage trusted third-party vendors who process data on our behalf (e.g., cloud hosting, analytics tools). All providers are bound by data processing agreements and may not use your data for their own purposes.
6.2 Social Media Platforms
Data you authorize us to access from Facebook or other platforms is governed by the privacy policies of those platforms. We only use such data as described in this policy and as permitted by platform terms.
6.3 Legal Requirements
We may disclose your data if required by law, court order, or governmental authority in Saudi Arabia or another applicable jurisdiction.
6.4 Business Transfers
In the event of a merger, acquisition, or sale of assets, your data may be transferred. We will notify you of any such change.
7 Data Retention
We retain your personal data only for as long as necessary to provide our services or as required by applicable law. Specifically:
Account and profile data: retained while your account is active, plus 12 months after deletion request
Usage logs: retained for 6 months for security and performance analysis
Content and reports: retained until you delete them or close your account
You may request deletion of your data at any time (see Section 10).
8 Data Security
We implement industry-standard technical and organizational measures to protect your data, including:
- Encryption of data in transit (TLS 1.2+) and at rest (AES-256)
- Role-based access controls limiting staff access to personal data
- Regular security audits and vulnerability assessments
- Multi-factor authentication for administrative systems
No system is entirely secure. If you suspect unauthorized access to your account, please contact us immediately at security@besmart.ai.
9 International Data Transfers
BeSmart.ai is headquartered in Riyadh, Saudi Arabia. If your data is transferred outside the Kingdom, we ensure appropriate safeguards are in place, including contractual protections consistent with the Saudi PDPL and applicable international standards.
10 Your Rights
Subject to applicable law, you have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you
- Correction: Request correction of inaccurate or incomplete data
- Deletion: Request erasure of your personal data ("right to be forgotten")
- Portability: Request your data in a structured, machine-readable format
- Objection: Object to certain types of processing (e.g., direct marketing)
- Withdrawal of Consent: Withdraw consent at any time without affecting prior lawful processing
To exercise any of these rights, contact us at: legal@besmart.ai. We will respond within 30 days.
Facebook Data Deletion
If you wish to delete data obtained through Facebook Login, you may use Facebook's built-in data deletion tool, or contact us directly. We honor all valid Facebook data deletion callback requests.
11 Cookies & Tracking Technologies
Our app uses cookies and similar technologies to maintain sessions, remember preferences, and analyze usage. You may control cookie settings through your browser. Note that disabling certain cookies may affect functionality.
12 Children's Privacy
Our services are not directed to individuals under the age of 13 (or the minimum age in your jurisdiction). We do not knowingly collect data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
13 Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on our website and updating the "Effective Date" above. Continued use of our services after changes constitutes acceptance of the updated policy.
14 Contact Us
For questions or concerns regarding this document, please contact:
BeSmart.ai — Data & Legal Team
© 2026 BeSmart.ai. All rights reserved.