Privacy Policy

Applies to MAG Flow Chat (connect.magflow.vn) and its Facebook app. Last updated: October 2, 2026.

MAG Flow ("we") provides MAG Flow Chat, a service that lets businesses connect their Facebook Pages so an automated assistant can reply to messages that people send to those Pages on Messenger. This policy explains what data we process, why, and how you can have it deleted.

1. Data we collect

From Page administrators who log in with Facebook:

• Your app-scoped Facebook user ID, name and profile picture, to identify your session.
• The list of Pages you manage and choose to share with us (pages_show_list).
• A Page access token for each Page you connect, used to subscribe the Page to Messenger webhooks (pages_manage_metadata) and to send replies (pages_messaging). Tokens are encrypted at rest.

From people who message a connected Page:

• The Page-scoped ID (PSID) Facebook assigns to the sender, and the content of messages and button clicks sent to the Page.
• Information the person chooses to provide in the conversation, such as a name, phone number or booking request.

2. How we use the data

• To generate and send replies to messages that people send to a connected Page, within Messenger Platform rules.
• To pass booking requests and conversations that need a human to the staff of the Page owner.
• To operate, secure and troubleshoot the service.

We do not sell personal data, do not use it for advertising, and do not send promotional messages outside the standard messaging window.

3. Sharing

• The Page owner (the business you are messaging) can see the conversation and the information you provide.
• Service providers that process data on our behalf to run the service: cloud hosting, our workflow automation servers, and AI language-model providers used to draft replies. They may only use the data to provide their service to us.
• Authorities, when required by applicable law.

4. Retention

Page access tokens are kept only while the Page is connected and are deleted immediately when you disconnect the Page, remove the app from your Facebook settings, or request deletion. Conversation records are kept only as long as needed to provide the service to the Page owner, and are deleted when the business ends the service or when a valid deletion request is received.

5. Your rights and data deletion

You can disconnect any Page from the My Pages screen at any time. You can also remove the app in Facebook Settings > Apps and Websites; we receive that signal and delete your data automatically. See Data Deletion Instructions for all options. You may request access to, correction of or deletion of your personal data by emailing admin@magflow.vn. We process personal data in accordance with Vietnam's Decree 13/2023/ND-CP on personal data protection.

6. Security

Access tokens are encrypted, connections use HTTPS, and Graph API calls are signed with an app secret proof. Access to production systems is limited to authorised MAG Flow staff.

7. Contact

MAG Flow, Ho Chi Minh City, Vietnam · Email: admin@magflow.vn · Zalo: 0384926286