Privacy notice

Effective September 25, 2026.

What we collect

When you request setup, we collect your name, email, business name, optional LINE account name, and the details you submit. For an activated LINE service, we process customer messages, LINE user identifiers, conversation history, catalog facts, customer labels and staff notes, order requests and their status. Team accounts include email, role, password hash, sign-in codes and sessions, and an optional linked LINE identifier and notification choices. We do not receive a customer’s phone number or email from the LINE Messaging API automatically.

How the service uses information

We use inquiry details to respond to setup requests. The business maintains its catalog and customer records, reviews order requests, and decides whether to confirm a sale. The bot uses approved answers and available catalog facts to answer questions; relevant customer text and catalog facts may be sent to the configured AI provider for classification. LINE-linked team members can receive brief order alerts. Staff of the relevant business can access that business’s workspace and inbox; NexaStream operators may review service records to support the service.

Providers and storage

LINE delivers messages and alerts. OpenAI Sites and Cloudflare host the website and database. Anthropic processes messages when AI replies are enabled. Resend delivers sign-in and fallback staff notification emails when configured. We do not collect payment card details on this website.

Access, correction, and deletion

To request access, correction, export, or deletion, use the setup form on the home page and describe the request. For a business customer’s information, we coordinate with the business responsible for the LINE account. Records are retained while needed to operate the service and handle legitimate business requests; a specific retention schedule should be agreed with each business before activation.

Security

Channel credentials are encrypted before storage. Team passwords are stored as salted hashes, and sessions use protected cookies. Access to each business’s records is checked against active team membership. No online service can guarantee absolute security, so please do not include passwords or channel tokens in the public setup form.