Stella AI Systems Stella. Join Founding 50
← Back to home

Privacy Policy

Effective May 26, 2026

Stella AI Systems ("Stella", "we", "us") is a messaging-automation service based in Cebu City, Philippines. We build and operate AI assistants that reply to customer messages and comments on Facebook, Instagram, and WhatsApp on behalf of businesses. This policy explains what personal data we handle, why, and your rights over it. We process personal data in line with the Philippine Data Privacy Act of 2012 (RA 10173) and Meta's Platform Terms.

1. Information we collect

From people who message a Page we operate (end users):

  • Your public Facebook/Instagram profile basics provided by Meta — name and a page-scoped ID (PSID) (we do not receive your email or phone number from Meta).
  • The content of the messages and comments you send to the Page.
  • Any contact details you choose to share in the conversation (e.g., a phone number, email, or business name) so a team can follow up.

From businesses that hire us (clients): account and contact details, and the business information used to configure the assistant (products, prices, FAQs, hours, tone).

2. How we use it

  • To generate and send helpful, on-brand replies to your inquiries 24/7.
  • To recall your earlier messages so the conversation stays coherent.
  • To capture and pass qualified inquiries (a "lead") to the business so a person can follow up.
  • To produce aggregate insights for the business (e.g., volume, peak hours).
  • To operate, secure, and improve the service.

We do not sell your personal data, and we do not use your messages to train third-party foundation models.

3. Service providers we share with

We share the minimum data needed with infrastructure providers who process it on our behalf:

  • Amazon Web Services — hosting and database storage (region: Asia Pacific, Singapore).
  • OpenRouter / the underlying AI model provider — message text is sent to generate a reply.
  • Meta Platforms — to receive your message and deliver our reply via the Messenger/Graph API.

Some providers process data outside the Philippines (e.g., Singapore and the United States); we rely on appropriate safeguards for these transfers.

4. Retention

Conversation history is automatically deleted about 180 days after the last message. Lead/contact details captured for a business are kept while that business's account is active, or until you ask us to delete them — whichever comes first.

5. Security

Data is encrypted in transit (TLS) and at rest, stored in access-controlled AWS infrastructure with least-privilege permissions. Access tokens and secrets are held in encrypted storage.

6. Your rights & choices

You may request access to, correction of, or deletion of your personal data, and you can object to or withdraw consent for processing. See our Data Deletion instructions. You can also remove our app's access at any time in your Facebook settings under Settings → Business Integrations.

7. Children

Our service is intended for businesses and adults. We do not knowingly collect data from children under 13 (or under the minimum age in your jurisdiction).

8. Changes

We may update this policy; we'll revise the "Effective" date above when we do.

9. Contact

Questions or privacy requests: hello@stellaaisystems.com. We are the data controller for personal data processed through our service.