Alljoyzinho Suporte · Instagram

Privacy Policy

How the Alljoyzinho Suporte app, Alljoy Hub's virtual assistant on Instagram, processes the personal data of people who send us direct messages or comment on our posts.

Effective date: 13 November 2026 · Last updated: 13 November 2026

1. Data controller

The controller of your personal data is JASMIM EXPEDITO - UNIPESSOAL LDA, Portuguese tax and company number (NIPC) 519320417, owner of the trade name Alljoy Hub and of the Alljoyzinho Suporte app, with registered office at Rua Palmira Bastos, n.º 32, 2870-036 Montijo, Portugal.

Privacy contact: alljoyhubb@gmail.com.

2. Scope

This policy applies only to the Alljoyzinho Suporte app, which uses the official Instagram API (Meta) to:

  • receive direct messages (DMs) sent to Alljoy Hub's official Instagram account;
  • receive comments made on that account's posts;
  • generate and send customer support replies about Alljoy Hub.

The app has no sign-up and no login: it only processes data when someone writes to the Alljoy Hub account or comments on its posts. Instagram's own processing of data is governed by the Instagram Privacy Policy.

3. Data collected through Instagram

When you send us a direct message or comment on a post, Instagram sends the app a notification containing:

  • your Instagram-scoped user ID (IGSID), a number specific to our account that does not reveal your name;
  • the text of the message or comment;
  • technical identifiers of the message or comment and of the post commented on, and the date and time;
  • for comments, your Instagram username, which is received but not stored.

The app does not download or store photos, videos, audio or other attachments; it only records that a message had an attachment. It does not access your profile, profile picture, name, followers, contacts, location or other conversations. Read receipts, reactions and message edits are ignored.

What is stored

Conversation history

IGSID, the text of your messages and of the assistant's replies, detected language, type of request (for example, general question or complaint), message identifier, and date and time.

Replies and delivery

The text of each reply, the recipient (IGSID or comment identifier), the delivery status and any technical errors.

Internal records

For complaints, sensitive matters, requests for a human, out-of-scope questions, excessive messages and deletion requests: a pseudonymous reference (not your IGSID), the channel, the language and, where useful, the text with emails, phone numbers, usernames, links, card numbers and IBANs automatically removed.

Technical logs

Identifiers of messages already processed (so we never reply twice) and operational logs without message text and without user identifiers.

Please do not send sensitive data (for example, health data) by message. If you mention a food allergy or intolerance, the assistant replies with a fixed message recommending that you tell the restaurant team directly; that message is kept in the history like the others.

4. Purposes and legal basis

PurposeLegal basis (GDPR)
Answering your questions and requests about Alljoy HubLegitimate interest in replying to people who contact us (Art. 6(1)(f)) and, when you ask about our services, steps taken at your request before entering into a contract (Art. 6(1)(b))
Keeping the conversation context (up to the 8 most recent messages) to give consistent repliesLegitimate interest (Art. 6(1)(f))
Recording complaints and other requests for internal reviewLegitimate interest in improving the service and handling complaints (Art. 6(1)(f))
Preventing duplicate replies and abuse (at most 6 automatic replies per person per hour)Legitimate interest in the security and proper operation of the service (Art. 6(1)(f))
Handling requests to exercise your rights, including deletionCompliance with a legal obligation (Art. 6(1)(c) and Arts. 12–22)

We do not use your data for advertising, marketing profiling or sale to third parties.

5. Use of artificial intelligence

  • Replies are generated by a language model that runs locally (Ollama with the Qwen3 model) on equipment managed by the company. Message text is not sent to any external artificial intelligence provider.
  • The model answers based on a fixed knowledge base of public information about Alljoy Hub and on the most recent messages of the same conversation.
  • Your messages are not used to train or fine-tune the model.
  • Some requests (complaints, allergies, requests for a human, deletion requests and topics not yet announced) receive fixed, pre-written messages without going through the model.
  • Replies pass through automatic filters before being sent, to avoid unconfirmed information and promises the assistant cannot keep.
  • Transparency: in the first reply of every conversation, the assistant states that it is a virtual assistant and that its replies are generated by artificial intelligence. It also confirms this whenever asked.
  • The assistant does not ask for sensitive data (for example, health data) or for identification data such as name, email, phone number or tax number.
  • The assistant does not make decisions with legal or similarly significant effects on you (Art. 22 GDPR). Automatic replies may contain errors and do not replace official information published by Alljoy Hub.

Human support

When you ask to speak with the team, make a complaint or raise a sensitive matter, the request is recorded internally and flagged to the Alljoy Hub team for review. The team may reply to you directly on Instagram. The assistant does not promise response times or contact.

6. Storage, security and retention period

Where the data is kept

Data is kept in a local database on equipment managed by the company. It is not stored in cloud storage services.

Security measures

  • The app only accepts notifications signed by Meta (HMAC SHA-256 signature checked on every request); all others are rejected.
  • The connection between Meta and the app uses HTTPS. The only address exposed to the internet receives Instagram notifications; administration functions cannot be reached from the internet.
  • API credentials are kept outside the source code and repositories.
  • Operational logs do not include message text or user identifiers; internal records use pseudonymous references and anonymised text.

Retention period: 90 days

Messages, comments, replies and their related records (internal records, technical identifiers, operational and error logs) are automatically deleted 90 days after they were created. The clean-up runs every day, and deleted content is overwritten in the database. Operational log files are daily and are also kept for 90 days only.

The only exception is internal records that must be kept because of a legal obligation or a documented legitimate need (for example, an ongoing formal complaint). In those cases the reason is recorded and the record is kept only for as long as that reason applies.

If you request deletion (section 9), the data is deleted before the 90 days.

Backups

The app does not create backups of its database, and the database is not synchronised with cloud services. If backups are ever created, they will be subject to the same 90-day period and to deletion requests.

7. Sharing data with third parties

Data is not sold or shared for commercial purposes. For the service to work, the following are involved:

  • Meta Platforms Ireland Limited (Instagram): delivers messages and comments to us and receives the replies we send, under its own privacy policy.
  • Cloudflare, Inc.: network tunnel service that carries Meta's notifications to the app over an encrypted (HTTPS) connection. Data passes through Cloudflare's network in transit but is not stored by the app in that service.

These providers may process data outside the European Economic Area under the GDPR transfer mechanisms described in their own policies. We may also disclose data where required by law, for example at the request of a competent authority.

8. Your rights under the GDPR

At any time, you may:

  • access your data and obtain a copy;
  • ask for inaccurate data to be corrected;
  • ask for your data to be deleted (right to erasure);
  • ask for processing to be restricted;
  • object to processing based on legitimate interest;
  • ask for data portability, where applicable.

To exercise these rights, send a direct message to Alljoy Hub's official Instagram account or write to the contact in section 11. We reply within one month at the latest, which may be extended under Art. 12(3) GDPR. Because the app does not store usernames, we may ask you to send the request from the Instagram account concerned, to confirm your identity.

You also have the right to lodge a complaint with the Portuguese data protection authority, Comissão Nacional de Proteção de Dados (CNPD): www.cnpd.pt.

9. How to request deletion of your data

Send a direct message to Alljoy Hub's official Instagram account with the text “Delete my data” (or «Eliminar os meus dados»). The assistant automatically confirms that the request has been recorded. The request is flagged to the team, which tracks the legal deadline, and the data stored by the app about that account is deleted within one month at the latest.

Full instructions are on the Alljoyzinho Suporte data deletion page.

10. Children

Instagram requires a minimum age to create an account. The app is not intended to collect data from children and does not ask for age. If you are a parent or legal guardian and know that a child has sent us data, you can request deletion as described in section 9.

11. Privacy contact

Controller: JASMIM EXPEDITO - UNIPESSOAL LDA, NIPC 519320417, Rua Palmira Bastos, n.º 32, 2870-036 Montijo, Portugal.

12. Changes to this policy

This policy may be updated when the app changes or when the law requires it. The date of the last update is shown at the top of the page. In case of discrepancy, the Portuguese version prevails.

Effective date: 13 November 2026.