Privacy Policy
Last updated: 2026-06-20
This Privacy Policy explains how Bubix ("Bubix", "we", "us") collects, uses, stores and protects personal data when you use our multi-channel AI sales and support platform. We process data in accordance with the EU General Data Protection Regulation (GDPR) and Turkey's Personal Data Protection Law No. 6698 (KVKK) and Law No. 5651.
1. Who we are
Bubix is operated by BUBİSOFT YAZILIM TEKNOLOJİ İTHALAT İHRACAT SANAYİ TİCARET LİMİTED ŞİRKETİ ("BubiSoft"), a limited liability company registered in Türkiye (Maslak Tax Office, tax no. 1871761592; D-U-N-S 751171246), with its registered office at Ayazağa Mah. Kemerburgaz Cad., Vadi Istanbul Park Sitesi 7B Blok No: 7C, İç Kapı No: 15, Sarıyer, 34485 Istanbul, Türkiye. As a SaaS provider, we act both as a data controller for the account information of our business customers and as a data processor for the end-user conversations our customers manage through our platform. For data processed on our customers' behalf, the customer is the controller and Bubix processes that data strictly to provide the service.
2. Data we collect
Account data: name, email, phone number, password (hashed), workspace and billing details. Usage data: log records, IP address, device and browser information, and product analytics. Channel data: messages, comments, profile information, media (images, audio, attachments) and metadata exchanged through connected channels such as Instagram, Facebook Messenger, WhatsApp and web chat.
3. Meta Platform data (Instagram, Facebook, Messenger, WhatsApp)
When you connect a Meta account, we receive — via the Meta Graph API and with your explicit authorization — your page/profile identifier, public profile details, access tokens, and the messages, comments and media exchanged with your customers. This data is used only to operate the inbox, generate AI replies, score leads and produce reports inside your workspace. We do not sell Meta Platform data and we do not use it for advertising. Our use of information received from Meta APIs follows Meta's Platform Terms and Developer Policies.
4. How we use data
We use data to: deliver and operate the service; auto-reply, route and score conversations; generate AI content; produce analytics and reports; process billing; provide support; ensure security; and meet legal obligations. AI processing is performed to fulfil the chatbot and automation features you configure.
5. Sharing and sub-processors
We share data only with sub-processors required to run the service — including AI providers (Anthropic), payment providers (Stripe), the Meta platform, and cloud/hosting infrastructure. Each sub-processor is bound by confidentiality and data-protection terms. We never sell personal data.
6. Data retention
Account data is retained while your account is active and for the period required by law thereafter. Conversation and channel data is retained for as long as the relevant workspace keeps it, and is deleted when you remove the data, disconnect the channel, or close the account. Backups are rotated and purged on a regular cycle. When a Meta data-deletion request is received, the associated channel data is cleared promptly.
7. Your rights
Under GDPR and KVKK you have the right to access, rectify, erase, restrict or object to the processing of your personal data, and to data portability. You may withdraw consent at any time. To exercise these rights, contact us using the address below. You can also request deletion of data processed through Meta channels at any time.
8. Data deletion
You can delete your data directly from your workspace settings, by disconnecting a channel, or by submitting a data-deletion request. End users who interacted with a business through Meta can trigger deletion via Meta's settings; we then clear the related data and provide a confirmation code on our Data Deletion page.
9. Security
We apply technical and organizational measures including encryption in transit, hashed credentials, access controls, audit logging and tenant isolation so that each workspace's data remains separate.
10. Contact
For privacy questions or to exercise your rights, contact us. We respond to verified requests within the timeframes required by applicable law.