Privacy Policy
Last updated: October 26, 2026
This Privacy Policy explains how Cedear ("Cedear", "we", "us", "our") collects, uses, shares and protects information when you use the Cedear platform at https://cedear.org, including our website chat widget, inbox, AI assistant, integrations and related services (the "Service").
Cedear is operated by Emmanuel Soala Koko, Nigeria. For any privacy question or request, contact us at support@cedear.org.
1. Who this policy applies to
Business users: businesses and their team members who create a Cedear account to manage customer conversations, social media, campaigns and automations.
End customers: people who contact a business that uses Cedear (for example through a website chat, WhatsApp, Messenger, Instagram, email or SMS). For this information, the business is the data controller and Cedear processes it on the business's behalf.
Website visitors: people who visit cedear.org.
2. Information we collect
2.1 Information you give us
Account details: name, email address, password (stored only as a secure hash), business name, phone number and team members you invite.
Business content: knowledge-base documents, saved replies, chatbot settings, campaign and automation content you create.
Support requests and messages you send to us.
2.2 Information processed when the Service is used
Conversation data: messages, attachments, voice notes and contact details exchanged between a business and its customers through connected channels.
Technical data: IP address, browser type, device information, pages visited and error logs, used to run, secure and improve the Service.
Cookies: strictly necessary cookies for sign-in, security (CSRF protection) and preferences such as language. We do not use advertising cookies.
2.3 Payment information
Subscription payments are processed by Paystack (and, where offered, Squad). Card details are entered on the payment provider's page and are never stored on Cedear's servers. We receive only the payment status, amount, reference and a token that lets the provider charge renewals you have agreed to.
3. Information from connected services
Businesses can choose to connect third-party accounts. We only access these services when a business user explicitly connects them, and only for the purposes described below. A business can disconnect any integration at any time from its Cedear settings.
3.1 Google
Cedear uses Google OAuth in two ways:
Sign in with Google: we receive your name, email address and profile picture (scopes openid, userinfo.email, userinfo.profile) to create and sign in to your Cedear account.
Google Workspace connection (optional, for automations): when a business connects its Google account, Cedear may access:
Google Calendar (calendar.events, calendar.freebusy): to check availability and create, update or cancel appointments that the business's automations or chatbot book for its customers.
Google Sheets (drive.file): to read, add or update rows in only the spreadsheets and forms you choose in Google's file picker (or that you create through CEDEAR); for example to record leads or orders. CEDEAR cannot see any other file in the business's Google Drive.
Google Forms (drive.file): to read forms and their responses that the business selects, so new responses can trigger its automations.
We use Google user data only to provide these user-facing features. We do not sell Google user data, do not use it for advertising, and do not use it to build or train generalized AI or machine-learning models. Humans at Cedear do not read Google user data unless you give us permission (for example for a support request), it is necessary for security or abuse investigation, or it is required by law.
Cedear's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Google user data may be included in text sent to our AI providers (Anthropic and OpenAI) only when a business's automation uses it to write a reply, and neither provider uses API data to train its models. Google access tokens are encrypted at rest and all data is transferred over HTTPS. When a business disconnects Google we delete the stored tokens immediately, so Cedear can no longer read or change anything in its Google account. Details an automation already saved (for example a booking time or a form answer in its history) stay with the business's records until the business deletes them, and are deleted within 30 days of the account being closed.
You can revoke Cedear's access at any time from Cedear (Automations → Google → Disconnect) or from your Google Account at https://myaccount.google.com/permissions. When access is revoked we delete the stored Google tokens.
3.2 Meta (Facebook, Instagram, Messenger, WhatsApp)
When a business connects its Facebook Pages, Instagram professional accounts or WhatsApp Business accounts, Cedear receives the access tokens and permissions the business grants (such as managing Page messages, Instagram messages, WhatsApp messages and publishing posts). We use them to receive and send messages in the business's inbox, reply with the business's AI assistant, and publish posts the business schedules. To request deletion of data received from Meta, see section 9.
3.3 Other integrations
If a business connects Linear (issue tracking), Shopify, WooCommerce or BigCommerce (online stores), Twilio (calls and SMS) or its own email mailbox, Cedear accesses that service only as needed to provide the connected feature, such as creating support issues, looking up a customer's own orders, or sending and receiving messages.
4. How we use information
To provide the Service: deliver messages, run the inbox, chat widget, campaigns and automations.
To power the AI assistant: generate replies to a business's customers, summaries and suggestions, based on the business's own knowledge base and settings.
To create support issues for a business's team when a customer reports a technical problem.
To process subscription payments and send service emails (verification, password resets, receipts and important notices).
To keep the Service secure: prevent fraud, abuse and spam, and investigate errors.
To comply with legal obligations.
We do not sell personal information and we do not use customer conversation data for advertising.
5. AI processing
To generate AI replies, relevant parts of a conversation and the business's knowledge base are sent to our AI providers through their business APIs: Anthropic (Claude) writes the replies, and OpenAI turns knowledge-base text into search data. Under their API terms, neither Anthropic nor OpenAI uses data sent through the API to train its models. Before text is sent, Cedear removes card numbers, passwords, one-time codes and similar sensitive data it detects. AI replies are checked by Cedear's safety rules before they are sent.
6. Service providers (sub-processors)
We share information only with providers that help us run the Service, under contracts that limit their use of it:
Hostinger: website hosting and database.
Anthropic: AI reply generation.
OpenAI: knowledge-base search and AI reply generation.
Supabase: search index for business knowledge bases.
Pusher: real-time delivery of messages to the inbox.
Sentry: error monitoring.
Paystack and Squad: payment processing.
Twilio: voice calls and SMS, where a business uses them.
Services a business chooses to connect (Google, Meta, Linear, Shopify, WooCommerce, BigCommerce, email providers), only for that business's connected features.
We may also disclose information if required by law, to protect the rights and safety of our users or the public, or as part of a merger or acquisition (in which case this policy will continue to apply).
7. Requests from public authorities
We review every request from a public authority for legality, challenge requests we consider unlawful, disclose only the minimum information necessary, and keep a record of each request and our response.
8. Data retention
We keep information for as long as a business's account is active or as needed to provide the Service. Businesses can delete conversations, contacts and connected accounts at any time. When an account is closed, or when we receive a valid deletion request, we delete or anonymise the related personal information within 30 days, except where we must keep it longer by law (for example, payment records for tax purposes).
9. Your rights and how to delete your data
Depending on where you live (including under Nigeria's Data Protection Act and the EU/UK GDPR), you may have the right to access, correct, delete or export your personal information, and to object to or restrict certain processing. To make a request, email support@cedear.org from the email address on your account. We will respond within 30 days.
Data deletion (including data received from Facebook, Instagram or WhatsApp): email support@cedear.org with the subject "Data deletion request" and tell us the account or Page involved. Business users can also disconnect the channel under Inbox → Channel Setup, which stops all further access. If you are a customer of a business that uses Cedear, you can also contact that business directly.
10. Security
We protect information with encryption in transit (HTTPS), encryption of the access tokens of connected services, hashed passwords, access controls, rate limiting and monitoring. No method of transmission or storage is completely secure, but we work to protect your information and will notify affected users of a data breach as required by law.
11. International transfers
Our providers may process information in countries other than yours, including the United States and the European Union. Where required, we rely on appropriate safeguards for these transfers.
12. Children
The Service is intended for businesses and is not directed to children under 16. We do not knowingly collect personal information from children.
13. Changes to this policy
We may update this policy from time to time. We will post the new version on this page with a new "Last updated" date, and notify business users of significant changes by email or in the Service.
14. Contact us
Cedear, operated by Emmanuel Soala Koko, Nigeria
Email: support@cedear.org
Website: https://cedear.org