Privacy Policy

NBOS is a business operations platform by Neetrino IT Company. This Privacy Policy explains how NBOS collects, uses, stores, and protects information when employees, administrators, business users, and connected third-party platform users interact with NBOS and its integrations.

This policy also applies to the Meta/Facebook App used by NBOS to connect Facebook Pages and Instagram Professional accounts for business messaging and CRM lead creation.

NBOS is operated by Neetrino IT Company. NBOS is designed as an internal business operations and CRM platform for managing company workflows, CRM leads, marketing attribution, files, finance, communication, and business integrations.

Website: https://nbos.neetrino.com
API domain: https://api.nbos.neetrino.com
Contact email: nbos@neetrino.com

This policy applies to:

• NBOS employees, administrators, and authorized users.
• Business contacts, leads, clients, partners, and other people whose information is stored in NBOS.
• People who send messages to connected Facebook Pages or Instagram Professional accounts that are integrated with NBOS.
• Users who authorize NBOS through Meta/Facebook OAuth to connect business accounts.

NBOS is not intended for public self-registration. Access is generally invite-only and controlled by authorized administrators.

Depending on how NBOS is used, we may collect and store the following categories of information:

Account and employee information:

• Name, email address, phone number, role, department, job title, work status, avatar, and related employment information.
• Authentication and session information needed to secure access.

CRM and business information:

• Lead names, contact names, phone numbers, email addresses, notes, source attribution, marketing account information, assigned users, and CRM status.
• Client, company, deal, project, support, and finance records entered by authorized NBOS users.

Files and documents:

• Uploaded files, attachments, file metadata, document records, and access information.

Communication data:

• Internal messages and notifications between NBOS users.
• Email-related data if mail integrations are connected.
• Instagram Direct and Facebook Messenger metadata and message previews when Meta integrations are connected.

Technical and security data:

• IP addresses, audit logs, authentication events, access logs, error logs, and system activity needed to protect and operate NBOS.

NBOS allows authorized administrators to connect Facebook Pages and Instagram Professional accounts through Meta/Facebook OAuth.

When this integration is enabled, NBOS may receive and process:

• Facebook Page IDs.
• Instagram Business Account IDs.
• Connected account display names.
• Access tokens and integration credentials, stored in encrypted form.
• Webhook event IDs and message IDs.
• Sender IDs from Instagram or Facebook messaging events.
• Message timestamps.
• Short message previews from incoming direct messages.
• Page or account identifiers needed to route messages to the correct NBOS marketing source.

Incoming Instagram Direct or Facebook Messenger messages may automatically create a CRM Lead in NBOS. For the current MVP implementation:

• NBOS creates Leads only.
• NBOS does not automatically create Contacts.
• NBOS does not automatically create Deals.
• NBOS does not provide a public chat or reply interface for Meta messages.
• NBOS does not process WhatsApp, Facebook Lead Ads, comments, or Instagram comments as part of this MVP.

Connected Meta access tokens are encrypted and used only to maintain the integration and receive authorized messaging events.

We use information to:

• Provide and operate NBOS.
• Authenticate users and protect accounts.
• Manage CRM leads, business operations, files, projects, finance, support, and internal workflows.
• Attribute leads to marketing channels and connected business accounts.
• Create CRM Leads from incoming Instagram Direct or Facebook Messenger messages when a connected account is configured.
• Maintain security, audit trails, and system reliability.
• Send transactional notifications and administrative emails.
• Comply with legal, security, and operational requirements.

We do not sell personal information.

We may share information only when necessary:

• With authorized NBOS users inside the organization.
• With infrastructure and service providers that help operate NBOS.
• With connected third-party platforms, such as Meta, Google, email providers, storage providers, and hosting providers, only as required for integration functionality.
• When required by law, legal process, security obligations, or to protect the rights and safety of NBOS, Neetrino, users, clients, or others.

NBOS may use third-party providers for hosting, database storage, file storage, email delivery, authentication, integrations, and infrastructure. These may include:

• Meta / Facebook / Instagram for OAuth, connected business accounts, and messaging webhooks.
• Neon PostgreSQL for database hosting.
• Cloudflare R2 for file storage.
• Redis / Upstash Redis for caching, queues, or token/session-related operations.
• Resend for transactional email.
• Google services if Gmail or Google integrations are connected.
• Hosting, monitoring, and infrastructure providers used to operate NBOS.

These providers process data only as needed to provide their services to NBOS.

NBOS uses technical and organizational safeguards to protect information, including:

• Encrypted storage of integration tokens and credentials.
• Access control and role-based permissions.
• Secure authentication and session handling.
• HTTPS for production services.
• Audit logs and security monitoring.
• Separation of public and authenticated routes.
• Restricted administrative access.

No system can guarantee absolute security, but NBOS is designed to reduce unauthorized access, disclosure, alteration, or loss of information.

NBOS retains information for as long as necessary to operate the platform, support business workflows, comply with legal or operational obligations, and maintain auditability.

Some deleted business records may be moved to trash or soft-deleted before permanent removal according to system retention rules. Certain audit logs, security logs, and integration event records may be retained for operational, troubleshooting, and compliance purposes.

Meta webhook events and Meta-derived CRM Leads may be retained as part of CRM history unless a valid deletion request is submitted and approved.

Depending on your location and relationship with NBOS, you may have rights to:

• Request access to personal information.
• Request correction of inaccurate information.
• Request deletion of certain information.
• Object to or restrict certain processing.
• Disconnect connected integrations where you are an authorized administrator.

NBOS employees should contact their administrator or company representative for account-related requests. External individuals, including people who contacted a connected Instagram or Facebook account, may contact us using the email below.

To request deletion of information associated with NBOS or Meta/Facebook/Instagram integrations, contact:

nbos@neetrino.com

Please include enough information to identify the relevant data, such as:

• Your name.
• Your contact email.
• The Instagram or Facebook account/page you contacted.
• Approximate date of the message.
• Any relevant sender handle or message context.

For security reasons, we may need to verify your identity or authority before processing a request.

Authorized NBOS administrators may also disconnect Meta accounts from the NBOS Integrations settings. Disconnecting an integration removes stored integration secrets and stops future message ingestion, but may not automatically delete existing CRM Leads or historical records unless separately requested.

See also our Data Deletion Instructions.

NBOS and its service providers may process and store information in countries other than your own. Where required, we use appropriate safeguards to protect information according to applicable laws and service provider agreements.

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date and may notify users through NBOS or other appropriate channels.

For privacy questions, data requests, or Meta/Facebook/Instagram data deletion requests, contact:

Neetrino IT Company
Email: nbos@neetrino.com
Website: https://nbos.neetrino.com