Boss Buddy AI ("Boss Buddy", "we", "us") is a marketing tool for physical-store merchants in Hong Kong and Malaysia. This policy explains what data we collect, how we use it, and the choices you have — including how data from connected social accounts (Facebook, Instagram, Threads) is handled.
Operator: JJ Marketing Enterprise (Malaysia, SSM Reg. No. 202003300443 / RA0064019-X), No 15, Amanria Residence, Jalan Amaria 2, Batu 14, Puchong, 47100 Puchong, Selangor, Malaysia. Contact: [email protected].
This policy applies to merchants who use the Boss Buddy dashboard, their staff users, and end-customers who interact with merchant share/reward pages. It also covers the social accounts a merchant chooses to connect.
| Category | What | Why |
|---|---|---|
| Account | Business name, login phone number, password (hashed), region, the referring account manager. | Create and secure the merchant account. |
| Brand & content | Photos you upload, captions, posters and content you generate. | Produce marketing posters and captions you ask for. |
| Connected social accounts | For accounts you connect: the platform account ID (Facebook Page ID, Instagram Business account ID, Threads user ID), account name, and an access token issued by the platform. | Publish the posts you choose to your own accounts, and read engagement metrics for those posts. |
| Published posts & insights | The post IDs/permalinks we create on your behalf, and metrics (reach, impressions, likes, comments) for those posts. | Show you how your published content performed. |
| Billing | Subscription plan, billing status. Card and bank payments are processed by Stripe and Billplz — we do not store card numbers. | Run subscriptions and credits. |
| End-customer (light) | For reward flows: a hashed phone and device signal, share/redeem events. No heavy account. | Share attribution and reward redemption. |
When you connect a Facebook Page, Instagram Business account or Threads account, you authorize Boss Buddy to act on your behalf only for the actions you trigger:
We store the access token securely and use it solely for the above. We do not sell Platform data, do not use it for advertising to others, and do not share it except with the infrastructure providers listed below to operate the service. You can disconnect any account at any time, which stops all access.
| Provider | Purpose |
|---|---|
| Meta Platforms (Facebook, Instagram, Threads) | Publishing and insights for accounts you connect. |
| Stripe; Billplz | Payment processing (subscriptions / FPX top-ups). |
| Cloudflare R2 | Image storage. |
| Vercel; Neon | App hosting and database. |
| Google (Gemini API) | AI generation of captions/images from the content you provide. |
These providers process data only to deliver the service and under their own terms.
We keep account and content data while your account is active. Social access tokens are kept until they expire or you disconnect. If you delete your account or request deletion, we remove your data as described in our Data Deletion page, except where we must keep limited records for legal or accounting reasons.
You can access, correct, export, or delete your data. To disconnect a social account, use "解綁 / Disconnect" in the dashboard. To delete your account and associated data, follow the steps on our Data Deletion Instructions page or email us.
Passwords are hashed; access tokens are stored server-side and transmitted over HTTPS. Access is restricted to operating the service.
Boss Buddy is a business tool not directed to children. We do not knowingly collect data from anyone under 18.
We may update this policy; the effective date above reflects the latest version.
JJ Marketing Enterprise (Malaysia) · SSM 202003300443 (RA0064019-X) · [email protected] · No 15, Amanria Residence, Jalan Amaria 2, Batu 14, Puchong, 47100 Puchong, Selangor, Malaysia
Boss Buddy AI 是面向香港与马来西亚实体商家的营销工具。我们收集：商家账号信息（店名、登录电话、加密密码）、你上传的照片与生成的内容、你主动绑定的社交账号（Facebook 专页 / Instagram 商业号 / Threads）的账号 ID、名称与平台授权令牌、以及我们代你发布的帖子及其互动数据。
社交账号数据只用于你触发的操作：把你做的海报+文案发到你自己的账号、并把这些帖子的 reach/互动拉回你的看板。我们不出售、不用于对他人投放广告，除运营所需的基础设施服务商外不对外共享。你可随时在后台「解綁」停止一切访问。付款由 Stripe / Billplz 处理，我们不存卡号。删除账号与数据见 数据删除页。联系：[email protected]。