Privacy Policy

YDeck is operated by GLOBANCE GROUP LIMITED ("Globance", "YDeck", "we", "us", or "our"), a company established in Hong Kong. YDeck provides AI-powered business agents, productivity tools, integrations, and related services.

This Privacy Policy describes how we collect, process, store, use, share, and delete personal and business information when you visit YDeck, create an account, use our services, join a pilot, or connect an authorized third-party service.

The information we collect depends on the features you use, the information you choose to provide, and the integrations you authorize. We do not claim to collect every item below from every user.

Account and business information

When you create or manage a YDeck account or workspace, we may process:

• your name, display name, email address, and profile image;
• organization, workspace, membership, and role information;
• authentication method, account status, and session information; and
• preferences such as language, locale, and time zone.

If you request a reporting audit, pilot, or other business contact, we may also collect the details submitted in that request, such as company, role, contact details, reporting workflow, preferred processing mode, expected volume, and requested output format.

Customer content

When a feature allows you to submit business materials, we may process the content you provide, such as report packs, source files, templates, instructions, comments, prompts, and generated outputs. The particular content processed depends on the YDeck service and configuration selected by the customer.

Integration information

If you voluntarily connect a third-party service, such as Instagram or another Meta service, YDeck may receive information that you authorize the third party to provide. For an Instagram Professional account, this may include, depending on the permissions granted:

• Instagram Professional account identifiers and account or profile information;
• conversation identifiers, incoming messages, and message metadata;
• messages sent through YDeck on behalf of the connected business; and
• information required to establish and maintain the authorized connection.

YDeck only accesses information permitted by the user's authorization and the applicable Meta APIs.

OAuth and access credentials

Integrations may require OAuth access tokens or similar credentials. We use these credentials only to establish, maintain, and operate integrations authorized by the customer. We use reasonable technical and organizational safeguards designed to protect authentication credentials and access tokens.

Usage and technical information

When you use YDeck, we may process technical information generated by the service, such as browser or device information, IP address, session and security events, timestamps, feature usage, request identifiers, application logs, and error logs. YDeck also uses session technologies necessary to authenticate users, preserve session security, and operate selected features.

We may use information to:

• provide, maintain, and improve YDeck functionality;
• create accounts, authenticate users, and administer workspaces;
• operate AI agents and process customer-requested tasks;
• connect and maintain third-party services authorized by the customer;
• receive customer messages and enable businesses to respond to them;
• maintain conversation context and related business workflows;
• diagnose errors, monitor reliability, and provide customer support;
• protect accounts, detect abuse, and respond to security threats;
• manage plans, subscriptions, and service entitlements where applicable; and
• comply with applicable law and enforce our agreements.

When a business connects an Instagram Professional account, YDeck may process incoming Instagram messages so that the business can view, manage, analyze, and respond to customer conversations through YDeck.

YDeck may use AI systems to assist with tasks such as classifying messages, generating suggested responses, summarizing conversations, identifying sales intent, qualifying leads, answering business questions, and preparing business content.

Depending on the YDeck service, configuration, deployment environment, and features selected by the customer, AI processing may occur using local, private, hosted, or third-party AI infrastructure.

AI outputs may be incomplete or incorrect. Businesses remain responsible for reviewing automated outputs where appropriate and for deciding how those outputs are used in their operations and communications.

YDeck does not access an Instagram account unless the business explicitly chooses to connect its Instagram Professional account. Authorization occurs through Meta's official authentication and API mechanisms. YDeck requests only the permissions needed to provide the functionality selected by the business.

We use authorized Instagram data to provide messaging and related Sales Agent functionality, including receiving, displaying, organizing, analyzing, and helping the business respond to customer conversations.

YDeck does not sell Instagram message data. We do not use Meta Platform data to build unrelated advertising profiles, and we do not sell Instagram message content to advertisers or data brokers.

A user may disconnect Instagram from YDeck where integration settings are available. The user may also revoke YDeck's authorization through Meta. Revocation prevents future access through that authorization, subject to Meta's platform behavior. Data associated with the integration may be deleted after disconnection or a valid deletion request, subject to legitimate legal, security, fraud-prevention, and technical retention requirements.

Meta does not sponsor or endorse YDeck.

We may share information only as reasonably necessary with:

• infrastructure, hosting, communications, security, and other service providers;
• authorized AI service providers where applicable to the selected configuration;
• integrations and third-party services explicitly selected by the customer;
• professional advisers where disclosure is reasonably necessary; and
• courts, regulators, law enforcement, or other authorities where legally required.

We may also disclose information in connection with a corporate transaction, subject to appropriate confidentiality and legal requirements.

YDeck does not sell personal information or Instagram message content to advertisers or data brokers.

We retain information only for as long as reasonably necessary to provide the service, maintain accounts and authorized integrations, protect security, satisfy legal obligations, resolve disputes, and enforce agreements. Retention may vary according to the type of information, the selected service, and the reason it is processed.

After deletion, limited information may remain temporarily in backups, logs, or fraud-prevention and security records where technically necessary or legally required. We do not keep such information for unrelated purposes.

You may request deletion of your personal information or data associated with an authorized integration by emailing admin@globance.co. Instructions specific to Meta and Instagram data are available on our User Data Deletion page.

Signed-in YDeck users may also request deletion of their personal account through the account and data controls available in YDeck. To begin, use the Delete your YDeck account link. You will be asked to confirm the request and, when a password is configured for the account, enter the current password. Account deletion may require resolution of workspace ownership or active subscription obligations before it can be completed.

Disconnecting an integration prevents future access through the revoked authorization, subject to the applicable platform's behavior. It does not necessarily remove every copy of information already processed where retention remains legally or technically necessary.

We use reasonable administrative, organizational, and technical safeguards designed to protect information against unauthorized access, alteration, disclosure, loss, or destruction. Safeguards are selected according to the service, configuration, and nature of the information involved.

No method of electronic transmission or storage can be guaranteed to be completely secure. Users are responsible for protecting their own credentials and promptly notifying us of suspected unauthorized access.

YDeck may serve users in multiple countries. Depending on the infrastructure, integration, deployment environment, and services selected, information may be processed in jurisdictions other than the one where the user is located. Where required by applicable law, we use appropriate safeguards for international processing and transfers.

Depending on where you live, applicable privacy law may provide you with certain rights, including access, correction, deletion, restriction, objection, withdrawal of consent where processing is based on consent, and data portability where legally applicable.

To make a request, email admin@globance.co. We may need to verify your identity or authority before acting on a request. Some rights are subject to exceptions and may not apply in every jurisdiction or circumstance.

YDeck is primarily a business and productivity service. It is not intentionally designed to collect personal information from children where such collection is prohibited by law. If you believe a child has provided personal information to YDeck unlawfully, contact us so that we can review and address the matter.

YDeck may connect to independent third-party services, including Meta and Instagram. Your use of those services remains governed by their own terms, privacy policies, permissions, and settings. We do not control and are not responsible for independent third-party privacy practices or changes to their platforms and APIs.

We may update this Privacy Policy to reflect changes to YDeck, applicable law, or our data practices. The revised policy will be posted on this page with an updated date. Where required, we will provide additional notice of material changes.

For privacy questions, rights requests, or data deletion requests, contact: