Privacy notice
Last updated:
Theravalon, by StoneTECH Technologies, provides business software for enquiries, customer conversations, programmes, events and bookings. This notice explains the platform's handling of personal information, including messages from connected Instagram and Facebook accounts.
Who handles your information
StoneTECH Technologies operates Theravalon and handles platform accounts, security and support. The business you contact, such as Atanaha, determines how it uses customer enquiries, its catalogue and its service records. Contact that business about its services or contact us about the platform and data requests.
Information processed
Depending on the features used, records can include account names and email addresses; lead and customer contact details; channel identifiers, message text, timestamps and delivery status; catalogue files and links; event registrations and booking/payment references. Connected social accounts provide identifiers and messages through Meta's APIs. The current Direct/Messenger adapter processes text messages; it does not import an entire social profile or analyse incoming attachments.
Purposes
Information is used to deliver and secure the service, connect enquiries to the correct business, keep conversation history, answer questions, arrange requested services and support users. Businesses remain responsible for the permissions and lawful basis for their customer records and any marketing. We do not sell conversation records or provide them for advertising targeting.
AI-assisted replies
Connected businesses can enable automatic AI replies. Relevant conversation text, selected history and authorised catalogue or knowledge content are sent to the configured AI provider. The current hosted service uses OpenAI. Responses are stored in the business conversation and may be sent back through the original channel. The OpenAI adapter requests store=false; this is not a guarantee of zero provider retention. AI replies can be wrong. You can ask the business for a person. Do not send clinical records, diagnoses, identity documents or other sensitive information through these enquiry channels.
Service providers and international processing
Meta handles the original Instagram, Messenger or WhatsApp service. Render hosts the application and its database; the current service is in Frankfurt, Germany. OpenAI processes authorised AI requests, and Stripe processes payment details when its checkout is used. Configured email providers may deliver account messages. These providers have their own terms and processing locations, which can include countries outside yours. Theravalon does not store full payment-card numbers.
Retention and deletion
Workspace records currently have no automatic expiry. They remain stored until removed through an authorised operational process or a verified deletion request, subject to applicable legal and security requirements. Limited billing or security records may need to be retained. Provider backups and records are subject to their own retention processes; deletion from the active application does not instantly erase every provider backup. See the deletion instructions for requesting removal.
Access, security and browser storage
Access to workspace records requires authentication and workspace permissions. Provider credentials are stored on the server, and Meta webhook signatures are checked. The browser stores login-session information and language/theme preferences to operate the app. Protect your device and do not share passwords or access keys. No online service can promise absolute security.
Your choices and rights
Depending on applicable law, you may request access, correction, deletion, restriction, objection or a copy of your information, and withdraw consent where relevant. Contact the business you messaged or the platform contact below. We may need proportionate information to verify the request and identify the correct workspace. You may also complain to the relevant data-protection authority. Disconnecting an integration or revoking Meta permissions stops future access but does not by itself delete records already stored in Theravalon.
Changes and questions
This notice may change when the service or its processing changes. The updated date is shown above. For privacy questions, identify Theravalon and the business or channel concerned when contacting us. Do not include passwords, access tokens or unnecessary sensitive documents.
Contact
StoneTECH Technologies · Theravalon
contact@stonetech.tech