Effective date: October 20, 2026
D4B Studio LLC, a registered company in Michigan, United States (“D4B Studio,” “we,” “us,” or “our”), provides business automation, messaging, and related integration services. This policy explains how we process personal information through our website, applications, and services, including N8NManagerBots.
1. Our role
We handle information when people contact us or use our services. We also process information on behalf of businesses that authorize our applications to operate their messaging and automation services. Those businesses determine the purposes of their customer interactions and may have their own privacy policies. We coordinate with them where necessary to respond to requests about information processed on their behalf.
2. Information we process
Depending on the enabled service, we process:
- Names, phone numbers, email addresses, messaging profile information, and account identifiers.
- Business names, logos, contact details, configuration, and approved business content.
- Messages, conversation history, summaries, and attachments, including voice recordings and transcriptions where supported.
- Lead, appointment, order, inventory, payment-status, and expense information supplied through enabled workflows.
- Connected business-asset identifiers, granted permissions, and authorization tokens used to operate integrations.
- Technical records such as timestamps, delivery status, network information, workflow execution records, and errors.
Information comes from you, the business you contact, authorized account connections, and platforms used to deliver the service. Please do not send passwords, payment-card numbers, government identification documents, or other unnecessary sensitive information through our bots.
3. How we use information
Our current business automation services support Cafeteria and Clothing management. We will update this policy as additional services are introduced.
We process information to deliver requested services; answer questions; interpret and route messages; collect inquiries; support enabled order, inventory, reporting, and related business functions; generate documents; notify authorized staff; maintain integrations; troubleshoot failures; prevent misuse; and respond to privacy requests and applicable obligations.
We do not sell personal information or use customer conversations and connected business data for our own advertising or marketing. D4B Studio does not use that information to train general-purpose AI models.
4. Automation and AI
Some workflows send relevant message content, conversation context, audio, or document content to AI services to interpret requests, transcribe audio, extract information, or generate responses. Automated output can be inaccurate. Contact the relevant business for confirmation of important details or human assistance.
We use the paid Gemini API. Under Google's applicable paid-service terms, prompts and responses are not used to improve Google's products. Limited processing or retention may still occur for safety and abuse monitoring; this is not a promise of zero provider retention. Google's terms are available at https://ai.google.dev/gemini-api/terms.
5. Providers and other recipients
Information is disclosed as necessary to the business whose service you use, its authorized staff, and providers supporting the enabled features. Not every provider receives every user's information.
- Meta: WhatsApp messaging and authorized Meta integrations. Facebook Messenger integrations, where enabled, also operate through Meta.
- Supabase: application databases and associated storage, including business and conversation records.
- Google: paid Gemini API language processing and audio transcription.
- Hosting and document infrastructure: servers running our self-hosted n8n automation and PDF-rendering services, and DigitalOcean hosting where used. PDF rendering can involve business logos, customer details, and transaction or report content.
- Email services: delivery and handling of correspondence, including privacy requests.
Messaging platforms may independently process information under their own policies. We may disclose information where required by law or reasonably necessary to protect rights, investigate misuse, or maintain security. A business transfer may involve information subject to applicable protections.
6. Retention
Our standard retention schedule is:
| Information | Retention |
|---|---|
| Conversation messages, audio, attachments, and summaries | 90 days after the conversation's last activity |
| Lead and contact records | 12 months after the last meaningful interaction |
| Business configuration and logos | While the service is active, followed by deletion within 30 days of termination |
| Workflow execution payloads | Up to 14 days |
| Routine security and operational logs | Up to 30 days |
| Minimal privacy-request handling records | Up to 12 months, excluding deleted conversation content |
These periods apply to copies under our control. Separate operational records, such as orders, appointments, accounting records, and associated documents, follow documented business requirements and applicable obligations rather than the chat-history schedule. We may retain necessary information longer to meet legal obligations, resolve disputes, or investigate security incidents.
Restricted backups expire through their configured rotation rather than individual record deletion. Their retention depends on the relevant provider and backup configuration. If a backup is restored, applicable deletion requests are reapplied. Independent copies held by a business or platform follow that recipient's practices.
7. Privacy requests and deletion
Email info@d4bstudio.tech to request access, correction, or deletion, or to raise a privacy concern. For deletion, use the subject “Data Deletion Request” and identify the phone number or email used with the service, the business or bot contacted, and the records concerned. Do not send passwords or unnecessary identity documents.
We may verify your identity and authority and coordinate with the business responsible for the records. Requests may be handled manually. We aim to acknowledge requests within five business days and complete verified requests within 30 days, or sooner where required. We will explain any necessary extension or permitted retention.
Deletion can include associated conversation records, media, contact information, and derived records within the verified scope. We retain only information necessary for applicable obligations or a permitted exception. Deletion from our systems does not automatically remove copies held independently by Meta, the business, or other recipients.
Businesses may revoke connected-platform authorization. Revocation stops the authorized connection but does not itself delete previously stored records; they remain subject to this policy and applicable deletion requests.
8. Website and technical information
Contacting us through our website or email provides the information you submit. Website and infrastructure services may process technical request information to deliver and protect the site. Third-party services linked from our website have their own policies. This policy does not represent that advertising trackers or optional analytics are enabled.
9. Security and processing locations
We use safeguards intended to protect information and restrict access to authorized purposes. No system guarantees absolute security. D4B Studio operates in the United States, and providers may process information in other countries according to their infrastructure and applicable terms. We do not promise a single processing location for all services.
10. Children
Our services are intended for business users and adult customer interactions and are not directed to children. If you believe a child has supplied personal information, contact us so we can investigate and take appropriate action.
11. Changes and contact
We may update this policy as services or practices change and will update the effective date. Where required, we will provide additional notice.