SteamBun
Legal

Privacy Policy

Effective date: October 24, 2026
Last updated: October 24, 2026

This policy explains how DigitalAI Marketing LLC ("DigitalAI", "we", "us") handles information through SteamBun, our AI assistant for restaurants. The policy covers our app on the Meta Platform (Facebook, Instagram and Messenger), our team chat bots, and this website, getsteambun.com (together, the "Service").

SteamBun is used by restaurants ("Clients"). When a customer messages or comments on a Client's Facebook Page or Instagram account, SteamBun may read and reply on that Client's behalf. In that case we process the customer's information for the Client, as its service provider.

Contents

  1. Information we collect
  2. How we use information
  3. You are chatting with an AI
  4. How we share information
  5. We do not sell your data
  6. Each Client's data is kept separate
  7. How long we keep data
  8. Deleting your data
  9. Security
  10. California privacy rights (CCPA)
  11. Children
  12. Changes to this policy
  13. Contact us

1. Information we collect

From Clients (restaurants) who connect SteamBun

  • Account and contact details: name, business name, email, phone number, and the people in the Client's team chat.
  • Facebook Login and Page access: the Client's Facebook user ID and name, the Pages and Instagram business accounts the Client chooses to connect, and the access tokens Meta issues so SteamBun can act on those Pages. We request only the permissions a feature needs, such as managing Page messages, reading and replying to comments, and publishing posts.
  • Business content: menus, hours, specials, order and sales information, photos and other materials the Client gives us or connects (for example, an order calendar or a point-of-sale report).
  • Team chat messages: messages sent to or about SteamBun in the Client's team group chat (for example, on Telegram or Messenger).

From customers who interact with a Client's Page or Instagram account

  • Messenger and Instagram direct messages: the content of messages sent to the Client's Page or Instagram account, any attachments, the time each message was sent, and the Page-scoped or Instagram-scoped ID that Meta provides. Meta may also share the customer's public profile name and profile picture.
  • Comments and engagement: comments, replies, mentions and reactions on the Client's posts, with the commenter's name and ID as provided by Meta.
  • Information a customer chooses to share in a conversation, such as a phone number, order details, a pickup time or dietary notes.

From visitors to this website

  • This site does not use advertising or analytics cookies. Our hosting provider may log basic technical data (such as IP address, browser type and pages requested) for security and reliability. If you email us, we receive your email address and your message.

2. How we use information

We use information only to provide and run each Client's SteamBun assistant. That means we use it to:

  • read and reply to messages and comments on the Client's Page and Instagram account;
  • create, schedule and publish the posts and flyers the Client asks for;
  • send the Client's team order and sales summaries, reminders and answers in its team chat;
  • keep the Service secure, prevent abuse, fix problems and meet legal obligations; and
  • contact Clients about their account and the Service.

We do not use data received from Meta Platforms (Facebook, Instagram or Messenger) for advertising, profiling, building marketing lists, or any purpose unrelated to running the Client's assistant. We do not use one Client's data to benefit another Client. We do not use customer conversations to train general-purpose AI models for other businesses. We follow the Meta Platform Terms and Developer Policies, including their limits on how Platform Data may be used.

3. You are chatting with an AI

SteamBun is an automated AI assistant, not a person. When SteamBun replies to you in Messenger, on Instagram or in a comment thread on a Client's behalf, it tells you it is an AI bot:

  • at the start of the conversation;
  • after a long gap in the conversation; and
  • whenever a conversation moves from a person to the bot.

This follows California's Bolstering Online Transparency (BOT) Act (California Business and Professions Code sections 17940 to 17943) and Meta's Messenger policies. You can ask to reach a person at the restaurant at any time, and the Client's staff can step in and reply themselves.

4. How we share information

We share information only as needed to run the Service:

  • With the Client whose Page, account or team chat the information came from.
  • With service providers that help us run SteamBun, such as cloud hosting, AI model providers that generate replies, messaging platforms (Meta and Telegram), and social posting tools. They may use the information only to provide their service to us, under confidentiality and data protection terms.
  • With Meta, when we send replies, comments or posts through Meta's official APIs on the Client's behalf.
  • For legal reasons, if required by law or legal process, or to protect the rights, safety or property of people or the Service.
  • In a business transfer, such as a merger or a sale of assets, subject to this policy.

5. We do not sell your data

We do not sell personal information, and we do not share it for cross-context behavioral advertising. We never sell, license or rent data received from Meta Platforms to data brokers or anyone else.

6. Each Client's data is kept separate

Each Client has its own SteamBun assistant. Each Client's Page connections, access tokens, customer conversations, business content and team chat history are stored and processed separately from every other Client's. Only that Client's assistant can access them, along with authorized DigitalAI staff who need access to support that Client.

7. How long we keep data

  • While a Client uses SteamBun, we keep its data for as long as needed to run its assistant (for example, conversation history, so replies have context).
  • When a Client disconnects or cancels, we stop accessing its Pages and delete its Meta access tokens. Within 30 days, we delete or de-identify its data, including any customer messages and comments we stored. Copies in backups are removed within a further 60 days.
  • When Meta tells us that a person has removed our app or asked for deletion, we delete the data we received about that person through Meta.
  • We may keep limited records longer when the law requires it (for example, tax and billing records) or to resolve disputes.

8. Deleting your data

You can ask us to delete your data at any time, whether you are a Client or a customer who messaged a Client. Full instructions are on our Data Deletion page. In short:

  • Remove the app: in Facebook, go to Settings & privacy > Settings > Business integrations (or Apps and websites), find SteamBun, and select Remove.
  • Email us at hello@getsteambun.com with the subject "Data deletion request", and tell us which Page or restaurant you interacted with.

We will confirm your request and complete it within 30 days, unless the law allows or requires us to keep certain information.

9. Security

We protect information with measures such as encrypted connections (HTTPS), encryption of access tokens, limited staff access, and the use of Meta's official APIs instead of shared passwords. No system is completely secure. If a breach affects your information, we will notify you and the relevant authorities as the law requires.

10. California privacy rights (CCPA)

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act, gives you the right to:

  • Know what personal information we collect, use and disclose, and the categories of sources and recipients;
  • Delete personal information we collected from you;
  • Correct inaccurate personal information;
  • Opt out of the sale or sharing of personal information (we do not sell or share it);
  • Limit the use of sensitive personal information (we do not use it for any purpose that would require this); and
  • Not be discriminated against for using these rights.

Categories collected in the last 12 months:

  • identifiers (such as name, email, phone number and platform IDs);
  • commercial information (such as order details);
  • internet or other electronic activity (such as messages and comments sent to a Client's Page); and
  • information you choose to share in conversations.

We collect this information from Clients, from customers directly, and from Meta and the other platforms a Client connects. We use it for the purposes in section 2 and disclose it only as described in section 4.

To make a request, email hello@getsteambun.com. We will verify your request by matching the information you give us with the information we hold, and we will respond within 45 days. You may use an authorized agent. If we process your information on behalf of a restaurant, we may forward your request to that restaurant and help it respond.

11. Children

SteamBun is a service for businesses and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has given us information, contact us and we will delete it.

12. Changes to this policy

We may update this policy. When we do, we will change the "Last updated" date above. For material changes, we will notify Clients by email or in their team chat before the change takes effect.

13. Contact us

DigitalAI Marketing LLC (SteamBun)
Email: hello@getsteambun.com
Website: getsteambun.com

← Back to home