Effective Date: 02 July 2025

This Privacy Policy describes how General Secret OÜ ("we", "us", or "our") collects, uses, stores, and protects personal data when you use the Console SaaS platform, available at https://console-ff1a0.web.app/ ("Console", the "Service").
General Secret OÜ is a private limited company registered in Estonia, with registration number 17112803, and principal office at Vesivärava tn 50-201, Kesklinna linnaosa, Tallinn, Harju maakond, 10152, Estonia.
If you have any questions, please contact us at 📧 start@generalsecret.com.


1. Information We Collect

Personal Information

• Email address (only if provided during registration or Facebook login)

Usage Data

• IP address, browser type, log data, and cookies for analytical purposes

Uploaded Content

• Files uploaded by the user to train AI assistants
• Chat messages created by the user inside the product

Third-Party Integrations

• If a user chooses to connect a Facebook Page, we store limited data related to the connected Page (see Section 8)

We do not request or store:

• Payment information
• Data from your personal Facebook or Instagram profile
• Data from advertising accounts, user posts, friends, or private messages

2. How We Use Your Data
We use your data only for:

• Account creation and management
• Providing customer support
• Analytics and service improvement
• Enabling optional integrations (e.g., with Facebook Pages) for automation and data insights

3. Third-Party Services
We use:

• AWS (Germany) – secure cloud infrastructure
• Google Analytics – product usage tracking
• OpenAI – natural language processing services
• Meta (Facebook) – for optional business integrations and OAuth login

All providers are chosen based on GDPR compliance and best security practices.

4. Data Storage and Retention

• All data is stored securely in AWS data centers located in Germany
• We retain uploaded content and integration data only as long as needed for service operation
• You can delete your data or revoke access to integrations at any time (see Sections 5 and 8)

5. Your Rights Under GDPRYou have the right to:

• Access your data
• Rectify incorrect data
• Delete your data
• Export your data
• Withdraw consent at any time

To exercise these rights, contact 📧 start@generalsecret.com or use in-app settings.


6. Consent and Policy Updates
By using Console, you consent to this policy.
We will notify users of any material changes via email or in-app notifications.

7. AI Usage
Console uses AI technologies (e.g., Retrieval-Augmented Generation) to enhance user experience.
We do not use your data to train public models or share it with third parties.

8. Meta Integration (Facebook Business Pages)
Our platform supports optional integration with Facebook Pages for users who want to automate support or receive insights from their business page.
a) What We Request from Meta
When a user connects a Facebook Page, we request the minimum necessary permissions:

• pages_show_list – to show the list of Facebook Pages the user manages
• pages_read_engagement – to read post comments and engagement metrics
• pages_manage_metadata – to check messaging configuration on the Page
• pages_messaging – to enable message-based automation

✅ We do not request or use:

• instagram_basic
• instagram_manage_messages
• pages_read_user_content
• business_management
• Any permission related to Ads, personal accounts, or Instagram Direct

b) What Data We Store
Only when a user connects a Facebook Page, we store:

• Facebook Page ID and Page name
• Messaging availability (e.g., if Messenger is enabled)
• Page access token (encrypted and access-restricted)
• Timestamps of connection/disconnection

All data is stored securely on AWS servers in the EU.
c) How to Remove Access
You may revoke Console's access to your Facebook Page at any time:

• From Facebook settings: https://www.facebook.com/settings?tab=business_tools
• From Console settings: Disconnect your Page inside the Console dashboard
• By contacting us: Send a removal request to 📧 start@generalsecret.com

d) Compliance and Security
We fully comply with:

• Meta’s Platform Terms
• Meta’s Data Protection Addendum
• GDPR and EU data privacy regulations

We do not share or resell Meta data. Tokens are securely stored with encryption, and data access is limited to authorized systems and personnel only.


9. Contact Us General Secret OÜ
Vesivärava tn 50-201,
Kesklinna linnaosa, Tallinn, Harju maakond, 10152, Estonia
📧 start@generalsecret.com