Privacy Policy

1. Who we are

Hunter (hunter.rest) (“we”, “our”, or “the platform”) provides a multi-tenant business-automation workspace that helps merchants reply to messages, manage orders, publish content, and analyse customer activity across Facebook Pages, Instagram Business accounts, and supported couriers.

Hunter is operated by Sports Nation BD, a business registered in Bangladesh, at 3rd Floor, Ananda City Center, Kandirpar, Cumilla 3500 (sportsnationbd.com, +880 1647-429992). Sports Nation BD is the data controller responsible for the information described in this policy.

This policy describes what information we collect when you (a business owner) use our platform, when your customers interact with the bots and posts you publish through us, and how we share that information with third parties to deliver the service.

2. Information we collect

2.1 Account information

When you create a workspace we collect: your business name, contact email, password (stored as a one-way hash), preferred language, business category, and any contact details you voluntarily add to your profile.

2.2 Connected channel data

When you connect a Facebook Page or Instagram Business account through our “Connect with Facebook” flow, Meta provides us with: a Page Access Token, the Page id and name, the linked Instagram Business Account id (if any), and the permissions you granted. We store these securely on the workspace record so we can act on your behalf when you ask us to (e.g. reply to a customer, publish a post). We never see your Facebook password.

2.3 Customer interaction data

When a customer messages your Page, comments on your post, or completes an order through our automation, we receive and store the message contents, attachments, the customer’s Messenger PSID (a Page-scoped identifier provided by Meta), and any structured information they share (name, phone, delivery address) so we can fulfil the order. This data is stored in your workspace and is not visible to other workspaces.

2.4 Catalog and operational data

The product names, prices, add-ons, size charts, and other operational settings in your workspace are stored on our infrastructure. Catalog images are not hosted by us: we store the links you supply and fetch the pictures from wherever you host them. All of it is used solely to power your bot replies and your dashboard.

2.5 Telemetry & logs

We log API requests, conversation snapshots (for replay / debugging), and basic application metrics (response time, error rate). Sensitive fields (tokens, passwords, secrets) are redacted before logs are written.

3. How we use your information

• Operate the bot: read inbound messages, generate responses, send replies, schedule follow-ups, publish posts, and book couriers on your behalf.
• Run analytics inside your dashboard so you can see conversion, payment status breakdowns, and customer cohort data — visible only to your workspace.
• Bill subscriptions through SSLCommerz and surface invoices.
• Detect abuse, debug failures, and improve reliability.
• Comply with legal obligations (e.g. tax records, fraud-prevention, lawful information requests).

We do not sell your data, your customers’ data, or your conversation contents to anyone. We do not use your data to train third-party AI models. The agent that drafts replies runs on infrastructure we control or self-host.

4. Sub-processors and third parties

To deliver the service we share the minimum necessary data with the following providers:

• Meta Platforms (Facebook, Instagram) — to send and receive messages, publish posts, and read public Page data via the Graph API.
• Google — when you import your catalog from a Google Sheet, we read that sheet and fetch any images you host on Google Drive.
• SSLCommerz, AamarPay, bKash — payment processing for orders and subscriptions.
• Pathao, Steadfast — courier integrations for shipment booking when you opt in.
• Cloudflare — DNS, DDoS protection, and edge caching for our domains.
• PostgreSQL hosting — managed database for workspace storage.

Each sub-processor is bound by their own contractual and legal obligations to keep the data confidential.

5. Data retention

We retain workspace data (catalog, settings, orders, conversations) for as long as your workspace is active. Conversation logs older than 12 months may be summarised and truncated to control storage. Closed workspaces are anonymised or deleted within 90 days, except where we are required to keep records for legal reasons (e.g. tax invoices, refund disputes).

You can request export or deletion of your workspace data at any time by writing to [email protected]. Customer-side data deletion (so a customer who messaged your Page can be forgotten) is also supported on request.

6. Security

Page access tokens, payment-gateway secrets, and other credentials are stored encrypted at rest using AES-256 with a key held only on the application server. All HTTP traffic is served over HTTPS with HSTS. Webhook payloads from Meta are verified using the x-hub-signature-256 header before being processed. Access to the production database and secret manager is restricted to authorised personnel.

No system is perfectly secure. If we ever discover a breach that affects your workspace data, we will notify you within 72 hours and explain what happened, what we’ve done, and what you should do.

7. Your rights

Depending on where you and your customers are located you may have the right to access, rectify, export, or delete the personal information we hold about you. To exercise any of these rights, email [email protected] or message us on WhatsApp at +44 7441 340355. We respond to requests within 30 days.

8. Children

Our platform is not directed to children under 13 (or the local age of digital consent where higher). If you believe a child has provided us with personal information, contact us and we’ll delete it.

9. Changes to this policy

When we update this policy we revise the “Last updated” date at the top. Material changes will be announced inside the dashboard and by email to workspace owners at least 14 days before they take effect.

10. Contact us

For any privacy questions: [email protected]
WhatsApp: +44 7441 340355
Operator: Sports Nation BD, 3rd Floor, Ananda City Center, Kandirpar, Cumilla 3500, Bangladesh · +880 1647-429992 · sportsnationbd.com