Privacy Policy

Effective: April 27, 2026 · App: 9SpaceLab ChatCenter (FB App ID 3437691783070786)

1. Who we are

9SpaceLab ("we", "us") operates an internal customer-relationship management tool at 9space.xyz. Our ChatCenter module integrates Facebook Messenger so that authorized employees of our company can reply to messages received on Pages we administer.

2. Information we collect via Facebook

• Page access tokens — when an admin connects a Facebook Page, we store a long-lived Page Access Token, encrypted at rest.
• Page metadata — page id, page name, category, fan count, profile picture URL.
• Message content — text and attachments customers send to our Pages via Messenger, plus the replies we send.
• Sender profile — Page-Scoped ID (PSID), first name, last name, profile picture, locale, gender (returned by the Messenger Profile API for users who message our Pages).

3. How we use this information

• Display incoming messages to authorized employees inside our internal CRM dashboard.
• Send replies on behalf of the Page.
• Maintain conversation history for customer-service quality, training, and dispute resolution.
• Optionally link a chat customer to an internal sales record so the team can issue quotes, orders, and contracts.

We do not sell or share Facebook-derived data with third parties. We do not use Facebook data for advertising, profiling, or any purpose unrelated to running customer support for our own Pages.

4. Storage and security

Data is stored on a private VPS we control, under HTTPS. Page access tokens are encrypted using Laravel's Crypt::encryptString (AES-256-CBC with HMAC). Database access is restricted to authorized backend services. Employees authenticate with email and password and individual roles control which features they can access.

5. Retention

Conversations and customer profiles are retained for as long as the relationship exists or as required by Vietnamese tax/commercial law (typically 5 years). Disconnecting a Page deletes its access token immediately; conversation history is kept for audit purposes unless deletion is requested.

6. User rights

Any individual whose data we hold may request access, correction, or deletion by emailing hi9space@gmail.com. We respond within 30 days.

7. Data deletion via Facebook

If you used Facebook Login with our app and want us to delete the data we received from Facebook, follow the instructions on our Data Deletion page or send a request to the email above.

8. Changes

We may update this policy. Material changes will be reflected by the "Effective" date above and, where appropriate, communicated to affected users.

9. Contact

9SpaceLab — Vietnam
Email: hi9space@gmail.com