Beskline Logo
Back to HomeTerms of Service →
DATA PRIVACY & SECURITY COMMITMENT

Privacy Policy

Effective Date: November 6, 2026•Last Updated: November 6, 2026•GDPR & CCPA Compliant

01Overview & Scope

Beskline Inc. ("Beskline", "we", "us", or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy details our data practices across our web platform, APIs, Progressive Web App (PWA), website chat widget, WebMCP runtime, and Model Context Protocol (MCP) server endpoints.

02Information We Collect

We collect information strictly necessary to provide intelligent agentic orchestration:

Account & Brief Data

Account email, handles (e.g. @handle), intake brief parameters (objectives, roles, context, tone, constraints), and catalogue items.

Encrypted Third-Party Credentials

WhatsApp tokens (Whapi, WaAPI, Twilio, 360dialog), Gmail OAuth refresh tokens, and external MCP headers. All encrypted via AES-256-GCM.

Messages & Documents

Chat conversation threads, inline text documents, and base64 attachments parsed to construct LLM vision or textual prompts.

Ledgers & Push Subscriptions

Auditable token consumption records, Tchokopay Mobile Money transaction metadata, and VAPID browser push endpoints.

03Security & AES-256-GCM Encryption Architecture

Beskline utilizes defense-in-depth security to protect your workspace:

  • Symmetric Encryption at Rest: Sensitive chat message content and external integration tokens are encrypted using AES-256-GCM authenticated encryption formatted with the enc:v1: prefix.
  • Row-Level Security (RLS): The Supabase PostgreSQL database enforces strict access policies isolated under the dkline schema. Team members (freelancers/editors) are restricted from accessing chat logs and workspace settings.
  • MCP Security Architecture (v2): Egress filtering with IP blocklists prevents Server-Side Request Forgery (SSRF) targeting loopbacks or cloud metadata addresses (169.254.169.254). Tool definitions are pinned with SHA-256 hashes to prevent rug pulls.

04Google API User Data & Limited Use Disclosure

GOOGLE API SERVICES USER DATA POLICY COMPLIANCE

Beskline's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

No AI Model Training: We do not use data accessed via Gmail API integrations to train, retrain, or fine-tune artificial intelligence or machine learning models. Gmail credentials are used solely to execute user-requested mailbox actions (search, read, draft, send).

05Sub-processors & Third-Party Sharing

We never sell your data. We disclose necessary information strictly to authenticated sub-processors essential to the Services:

  • OpenRouter: Routes inference tokens to selected LLM providers (Google, Anthropic, OpenAI, Meta, DeepSeek).
  • Supabase: Managed PostgreSQL database, authentication, and encrypted data storage.
  • Tchokopay: Processes Mobile Money payments for credit top-ups in XAF.
  • WhatsApp API Providers: Whapi Cloud, WaAPI, Twilio, or 360dialog when WhatsApp routing is enabled.

06Cookies & Local Storage

We do not utilize cross-site advertising tracking cookies. We utilize browser cookies for authentication sessions and HTML5 Local Storage for user preferences:

• beskline_theme: light, dark, or system preference
• beskline_language: selected UI and LLM language
• beskline_active_account_owner_id: active workspace switcher state
• sb-access-token: encrypted session authentication

07Your Rights (GDPR & CCPA/CPRA)

You maintain the right to access, rectify, port, or erase your personal information at any time:

  • Delete Conversations: You can purge conversation histories directly in the workspace.
  • Revoke Tokens: Remove integration credentials (WhatsApp, Gmail, MCP) at any time.
  • Complete Erasure: Contact us at privacy@beskline.com to permanently delete your account and all associated data.

08Contact Our Privacy Team

For privacy inquiries, GDPR/CCPA requests, or security reports, reach out to our team:

Beskline Inc. Data Protection Office
Privacy Email: privacy@beskline.com
Legal Inquiries: legal@beskline.com
Website: https://beskline.com