AE One

Privacy Policy

Last updated 7 September 2026

This policy explains how AE One ("we", "us") collects, uses, and protects information when a business uses AE One to communicate with its customers, including through Meta platforms: Facebook Messenger, Instagram, WhatsApp, and Facebook lead ads. AE One operates this software on behalf of the businesses that use it; those businesses are the primary controllers of their customers' data.

Information we process from Meta

When a business connects a Facebook Page, Instagram professional account, ad account, or WhatsApp number, we process:

  • Messaging content and metadata: the text of Messenger, Instagram, and WhatsApp messages, message IDs, timestamps, and the page-scoped or app-scoped IDs (PSID / IGSID) that identify a sender to the connected business.
  • Page and account details: page name and ID, Instagram username and ID, ad account IDs, WhatsApp Business Account and phone-number IDs.
  • Lead ad submissions: the fields a person submits in a Facebook or Instagram instant form (such as name, email, phone, and the questions the business asked), plus the campaign and ad the lead came from.
  • Access tokens: Page and system-user tokens, stored encrypted in a secrets vault and used only to send and receive on the connected accounts.

We do not receive a person's Facebook or Instagram password, friends list, or profile beyond what Meta provides for the connected conversation.

How we use it

  • To deliver messages between a business and its customers in a unified inbox.
  • To let the business's AI receptionist answer routine enquiries within the business's scope, always disclosed as an assistant.
  • To turn lead-ad submissions into contacts, opportunities, and follow-up tasks for the business.
  • To measure ad performance for the business (spend, reach, results) where the business connects an ad account.

We do not sell personal information, and we do not use message content to train models.

Retention and deletion

Data is retained while the business keeps its account and the connection active. A person can request deletion of their Meta-linked data at any time through Meta's data-deletion flow, which we honour automatically: we delete or anonymise the messages, conversations, lead records, and contact data keyed to that Meta profile, and provide a status page confirming completion at /meta/deletion/<code>. A business can also delete a specific contact's Meta data from within AE One.

Sharing

We share data only with the business that connected the account, with infrastructure providers that host the service under contract, and with Meta as required to deliver messages and run ads. We disclose information to authorities only where legally required.

Your choices and contact

You can ask the business you're dealing with, or us, to access, correct, or delete your information. Contact us at privacy@tradeform.au.