Privacy Policy

1. Who we are

SAMRUOL Digital Systems is an independent technology practice based in Cambodia. In this policy, “SAMRUOL,” “we,” “us,” and “our” refer to SAMRUOL Digital Systems.

This policy applies to samruol.com and to SAMRUOL services that connect with Meta products, including Facebook Pages and Messenger. It does not replace the privacy policy of a business that uses our service to communicate with its own customers.

2. Information we process

The information we process depends on the features a business enables and the permissions granted through Meta.

• Meta and Page information, such as Page name and ID, account-scoped identifiers, authorized permissions, and access credentials needed to maintain the connection.
• Conversation information, such as messages sent to a connected business Page, message timestamps, attachments, sender identifiers, and profile details made available by Meta.
• Information people choose to provide in a conversation, such as a name, phone number, email address, order question, or service request.
• Business content, such as FAQs, product information, response rules, knowledge-base material, staff accounts, tags, and workspace settings.
• Technical and security information, such as IP address, browser or device details, event logs, error reports, and authentication activity.
• Communications sent directly to us. Our website inquiry form prepares an email in your browser; we receive its contents only when you choose to send that email.

3. How we use information

• Connect and operate authorized Facebook Pages and Messenger workflows.
• Receive, organize, display, and respond to customer conversations.
• Generate suggested replies from business-approved information and transfer conversations to human staff when needed.
• Maintain conversation history, contacts, leads, workspace settings, and service records.
• Secure the service, prevent abuse, troubleshoot problems, and provide support.
• Comply with applicable law, enforce our terms, and meet Meta platform requirements.

4. AI-assisted processing

When a business enables AI-assisted replies, relevant message text and approved business knowledge may be processed to prepare a response. AI output can be incomplete or incorrect, so important answers should be reviewed by an authorized person and uncertain conversations should be handed to a human.

Where third-party AI, cloud, hosting, or messaging providers are used, we limit the information shared to what is reasonably necessary to deliver the requested feature and require those providers to handle it for the contracted purpose.

5. When information is shared

We do not sell personal information. We may share information only as needed with:

• The business that operates the connected Page and its authorized team members.
• Meta, when needed to send or receive messages and operate the approved integration.
• Vetted service providers supporting hosting, security, analytics, communications, or AI-assisted features.
• Authorities or other parties when required by law, necessary to protect rights and safety, or involved in a legitimate business transfer.

6. Retention

We keep information only for as long as needed to provide the service, meet the connected business’s instructions, resolve disputes, maintain security, and satisfy legal obligations. Retention periods can vary by workspace, data type, and customer agreement.

When information is no longer required, we delete or anonymize it. Limited copies may remain temporarily in protected backups or where retention is legally required.

7. Security and international processing

We use reasonable administrative, technical, and organizational safeguards designed to protect information. No internet service can guarantee absolute security.

Our providers may process information outside Cambodia. Where this happens, we use appropriate contractual and operational safeguards consistent with applicable requirements.

8. Your choices and rights

Depending on applicable law and our role, you may ask to access, correct, export, restrict, object to, or delete personal information. A business customer may control information from its own Page, so we may direct your request to that business or help it respond.

You can also remove the app’s access through the Apps and Websites area of your Facebook settings. Removing access stops future access through that connection but may not automatically delete information already retained for a lawful purpose.

9. Requesting data deletion

You may request deletion through our dedicated data-deletion page or by email. We may ask for limited information to verify the request and locate the correct records.

1. Email [email protected] with the subject “Data Deletion Request.”
2. Include the name used with the service, the relevant Facebook Page or profile name, the business or workspace involved, and what you want deleted. Do not send passwords or access tokens.
3. We will acknowledge the request, verify it where necessary, and delete or anonymize eligible records within 30 days, unless law, fraud prevention, security, or a valid dispute requires limited retention.

10. Children

The service is designed for businesses and is not directed to children under 13. We do not knowingly collect personal information from children through a business account. Contact us if you believe a child has provided information that should be removed.

11. Changes to this policy

We may update this policy when our service, legal obligations, or platform requirements change. We will publish the revised policy here and change the “Last updated” date. Material changes may also be communicated through the service or by email where appropriate.