Kidzen logoKidzen

Privacy Policy

Effective date: July 11, 2026
Last updated: July 11, 2026

This Privacy Policy explains how SYREN STACK COMPANY LIMITED ("we", "us", "our") collects, uses, stores, shares, and protects information in connection with Kidzen (the "App"), a chatbot service that lets a Facebook Page owner connect their Page so our bot can automatically reply to messages the Page receives from its customers.

By using the App or connecting your Facebook Page, you agree to this Policy. If you do not agree, please do not connect your Page or use the App.

1. Who this Policy applies to

This Policy covers two groups of people:

  • Page Owners — the school or business representatives who sign in to the App and connect a Facebook Page.
  • Page Visitors — people (typically parents/customers) who send a message to a connected Facebook Page and interact with our chatbot.

2. Information we collect

2.1 From Page Owners (via Facebook Login)

When a Page Owner signs in with Facebook and connects a Page, we receive, with your permission:

  • Your name, Facebook user ID, and profile picture
  • Your email address (if granted)
  • The list of Facebook Pages you manage, and the Page you choose to connect (Page ID, Page name)
  • A Page access token that allows the App to send and receive messages on behalf of the connected Page

2.2 From Page Visitors (via the connected Page)

When a Page Visitor messages a connected Page, we receive and process:

  • The Page-scoped ID (PSID) assigned by Facebook to that person
  • Public profile information Facebook makes available (such as name and profile picture)
  • The content of messages sent to and from the Page, including text and any attachments (images, files)
  • Message timestamps and delivery/read metadata

We do not collect a Page Visitor's private Facebook profile beyond what the Messenger Platform provides for the conversation.

2.3 Technical and usage data

We automatically collect basic technical data needed to operate and secure the service, such as IP address, device/browser type, log records, and error diagnostics.

3. How we use information

We use the information above to:

  • Authenticate Page Owners and connect the selected Facebook Page
  • Receive incoming messages and generate automated replies through our chatbot
  • Support booking and tour-request flows and related follow-up
  • Send operational notifications to Page Owners (e.g., new bookings, task updates)
  • Maintain, secure, debug, and improve the service
  • Comply with legal obligations

We do not use message content for advertising, and we do not sell any personal information.

4. Facebook / Meta Platform data

The App uses Facebook Login and the Messenger/Pages APIs. We request only the permissions needed to operate the service, which may include:

  • public_profile, email — to identify and contact the Page Owner
  • pages_show_list — to display the Pages you manage so you can choose one to connect
  • pages_messaging — to receive messages sent to your Page and send automated replies
  • pages_manage_metadata — to subscribe your Page to message webhooks
  • pages_read_engagement — to read basic Page and conversation context needed to reply

Our use and transfer of information received from Meta APIs adheres to the Meta Platform Terms and Developer Policies, including the Limited Use requirements.

5. AI processing and third-party sub-processors

To generate chatbot replies, message content sent to a connected Page is transmitted to third-party Large Language Model (LLM) providers solely to produce a response. These providers act as our sub-processors and are contractually restricted to processing the data only to provide their service. Depending on configuration, providers may include: Google (Gemini), OpenAI.

We also rely on infrastructure and hosting providers to run the service: Google Cloud.

Because some of these providers operate outside Vietnam, relevant data may be processed in other countries (see Section 9).

We do not share personal information with any other third parties except: (a) as required by law or valid legal process; (b) to protect our rights, safety, or property; or (c) in connection with a merger, acquisition, or sale of assets, subject to this Policy.

6. Data retention

We retain information only as long as needed for the purposes described in this Policy:

  • Page Owner account and connection data — kept while your Page remains connected and for a reasonable period afterward for security and legal reasons.
  • Message/conversation data — retained for 90 days to operate the chatbot, then deleted or anonymized.
  • Page access tokens — deleted when you disconnect your Page or delete your account.

When you disconnect a Page or delete your account, we delete or anonymize the associated data within 30 days, except where retention is required by law.

7. Your rights and choices

Depending on your location, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing.

Page Owners can disconnect a Page at any time from the App, and can revoke the App's access from Facebook → Settings → Business Integrations.

To exercise any right, contact us at support@syrenstack.com.

8. How to request data deletion

You can request deletion of your data at any time in either of these ways:

  1. Self-service: disconnect your Page and/or delete your account within the App, which removes your associated data.
  2. Email request: send a deletion request to support@syrenstack.com with the Facebook account or Page name involved. We will confirm and complete the deletion within 30 days.

Page Visitors who have messaged a connected Page may also request deletion of their conversation data by emailing support@syrenstack.com or by contacting the Page they interacted with.

Data Deletion instructions URL: https://kidzenedu.com/account-deletion

9. International data transfers

Your information may be transferred to, stored, or processed in countries other than Vietnam, including where our AI, hosting, and infrastructure providers operate. Where required, we use appropriate safeguards for such transfers.

10. Data security

We use reasonable technical and organizational measures to protect information, including encryption in transit, access controls, and secure storage of access tokens. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Children's privacy

The App is intended for use by Page Owners and adult Page Visitors. It is not directed to children, and we do not knowingly collect personal information directly from children through the chatbot. If you believe a child has provided personal information, contact us at support@syrenstack.com and we will delete it.

12. Changes to this Policy

We may update this Policy from time to time. We will post the updated version at this URL and revise the "Last updated" date above. Material changes will be communicated where appropriate.

13. Contact us

SYREN STACK COMPANY LIMITED
Address: 25/18/5/3 Nguyễn Minh Châu, Phường Tân Phú, Thành phố Hồ Chí Minh, Việt Nam
Email: support@syrenstack.com
Website: https://syrenstack.com

If you have questions or complaints about this Policy or our data practices, please contact us using the details above.