1CS Privacy Policy

1. Introduction

1CS ("we," "us," or "our") is committed to protecting the privacy of our customers and users. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI chatbot services ("Services").

By using our Services, you consent to the data practices described in this Privacy Policy.

2. Information We Collect

We collect information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household ("Personal Information"). We collect the following types of Personal Information:

• Account Information: When you create an account, we collect your name, business name, email address, and other contact details.
• Billing Information: If you subscribe to our paid services, we collect payment information, such as credit card details, billing address, and other financial data necessary to process your payments.
• User Submissions: This includes any content, data, or materials you submit to our Services, such as text inputs, chatbot conversations, and any other information you provide.
• Usage Data: We collect data about how you interact with our Services, including your IP address, browser type, operating system, access times, and pages viewed. This information helps us analyze trends, administer the Services, and improve user experience.
• Log Data: Our servers automatically record information ("Log Data") created by your use of the Services. Log Data may include information such as your IP address, browser type, operating system, referring/exit pages and URLs, the number of clicks, and how you interact with links on the Service, domain names, landing pages, pages viewed, and other such information.

2a. Third-Party Channel Integrations

Our platform allows business clients to connect third-party messaging channels to their 1CS inbox. When a business client connects a TikTok Business Account, we collect and process the following data on their behalf:

• TikTok Account Information: Business Account profile data including open_id, username, display name, avatar, account type, and account statistics — collected via TikTok's OAuth scopes (user.info.*) to identify and display the connected account.
• OAuth Tokens: Access tokens and refresh tokens required to maintain the authorized connection between the business client's TikTok account and our platform. These are stored encrypted and never exposed to end users.
• Direct Message Content: Text, images, and post shares sent to or from the connected TikTok Business Account, received via TikTok's Business Messaging API webhooks (message.list.* scopes) and displayed to the business client's support agents.
• Message Metadata: Timestamps, sender/recipient identifiers, message IDs, and read receipts associated with direct messages.

Purpose: TikTok data is processed solely to provide customer support functionality — displaying conversations to authorized agents and enabling replies — strictly on behalf of the business client who authorized the connection. We do not use TikTok data for advertising, profiling, or any purpose beyond the core support workflow.

Data Sharing: We do not sell, rent, or share TikTok user data with any third party. All processing is performed in compliance with TikTok's Business Products (Data) Terms and TikTok Developer Terms of Service.

Disconnection & Deletion: When a business client disconnects their TikTok account from 1CS, we immediately revoke the stored OAuth tokens. Conversation history is retained for 90 days after disconnection (to allow data export) and then permanently deleted. Business clients may request immediate deletion by contacting privacy@1cs.ai.

Regional Restriction: The TikTok Business Messaging integration is only available to business clients whose TikTok accounts are registered in eligible regions, as defined by TikTok. It is currently unavailable for accounts registered in the European Economic Area (EEA), Switzerland, the United Kingdom, or the United States.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To provide and maintain our Services: We use your information to operate, deliver, and improve our Services, process your transactions, create and manage your account, and provide customer support.
• To personalize your experience: We may use your information to tailor your experience with our Services, such as by providing you with customized content and recommendations.
• To communicate with you: We may use your information to send you service-related communications, including announcements, updates, security alerts, and support messages.
• To analyze and improve our Services: We use data analytics to monitor and analyze the use of our Services, identify trends and usage patterns, and improve the functionality and user experience of our Services.
• To protect our rights and interests: We may use your information to enforce our terms of service, prevent fraud and abuse, and protect the security and integrity of our Services and users.

3a. Analytics & Cookies

We use the following third-party analytics tools to understand traffic and improve our Services:

• Google Analytics 4 (GA4): Provided by Google. Collects pageviews, events, device info, and traffic source (including utm_* parameters and Google Ads gclid) to measure marketing campaign performance.
• PostHog: Self-served product analytics. Collects pageviews, click events, and session recordings to analyze funnel drop-off and user journey across 1cs.ai and chat.1cs.ai.

Both tools may set cookies on the .1cs.ai domain to recognize returning visitors. By default, analytics cookies are disabled until you accept via the cookie banner. You can change your choice anytime by clearing your browser's site data for 1cs.ai, which will re-prompt the banner.

4. Disclosure of Your Information

We may disclose your information in the following circumstances:

• Service Providers: We may share your information with third-party service providers who assist us in providing and maintaining our Services, such as payment processors, hosting providers, and data analytics companies. These providers are contractually obligated to protect your information and use it only as instructed by us.
• Legal Compliance: We may disclose your information if required by law, regulation, legal process, or governmental request, or to protect the safety, rights, or property of 1CS, our users, or others.
• Business Transfers: We may disclose your information in connection with a merger, acquisition, or sale of all or a portion of our assets.

5. Data Security

We implement appropriate technical and organizational security measures to protect your information from unauthorized access, use, disclosure, alteration, or destruction. However, no method of transmission over the internet, or method of electronic storage, is 100% secure. Therefore, we cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as necessary to provide our Services and fulfill the purposes described in this Privacy Policy:

• Account data: Retained for the lifetime of your account and deleted within 30 days of account closure.
• Conversation & message data: Retained for the duration of your subscription and deleted within 30 days of account closure.
• TikTok integration data (tokens, messages, profile data): Retained while the TikTok channel is connected. OAuth tokens are revoked immediately upon disconnection. Message history is retained for 90 days after disconnection, then permanently deleted. Immediate deletion available on request.
• Billing data: Retained as required by applicable financial and tax regulations (typically 7 years).

We may retain certain information longer if required by law or for legitimate business purposes such as dispute resolution.

7. Your Privacy Rights

You have the right to access, correct, and delete your Personal Information. You can request to access or correct your information by contacting us at hi@1cs.ai. You can request to delete your information by closing your account. However, we may retain certain information as required by law or for legitimate business purposes. For TikTok data deletion requests or questions about third-party channel data, contact us at privacy@1cs.ai.

8. Children's Privacy

Our Services are not directed to children under the age of 13. We do not knowingly collect Personal Information from children under 13. If you are a parent or guardian and believe that your child has provided us with Personal Information, please contact us.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated Privacy Policy on our website and may notify you of any material changes.

10. Contact Us

If you have any questions about this Privacy Policy, please contact us at hi@1cs.ai.