Privacy notice

Who operates this service

E-Khannam Marketing & Sales OS is an internal customer relationship workspace for the BK Mongolia / E-Khannam sales team. Business contact details require confirmation before public launch.

Information we collect

When you message our Facebook Page, we receive message text, Page-scoped sender and Page identifiers, message identifiers and timestamps. Unsupported message types may be recorded as an interaction without downloading attachments. Staff may record contact details you provide, property preferences, budget, notes, interaction history, appointments and sales progress. We also retain reply drafts, review decisions, delivery results and operational audit records. Team accounts use authentication session cookies.

How information is used

We use this information to respond to enquiries, maintain conversation history, coordinate site visits and support the sales team. Access is restricted by staff roles and lead assignments. This application does not offer public account registration.

AI assistance and human review

Relevant message text, CRM context, verified project knowledge and database inventory may be processed by OpenAI to propose structured facts and reply plans. AI proposals do not change confirmed CRM facts. Staff review drafts and must approve the exact final message before explicitly sending it. The application does not automatically send AI replies. Availability is sourced from the units database and must be reconfirmed by the team.

Service providers

Meta carries Messenger conversations; Supabase provides authentication and data storage; Vercel hosts the application; OpenAI processes AI requests. These providers may process information in other countries under their own terms. AI requests use the API’s store:false option; this does not promise zero provider retention. We do not intentionally place passwords or API keys in AI prompts or operational logs.

Retention and security

Records remain in the workspace until an authorized administrator removes them. Automatic expiry is not currently implemented. The business must confirm its retention schedule before public launch. Backups and provider records can have separate retention periods. Access controls, webhook signature checks and server-side credentials protect the workflows, but no system can promise absolute security.

Access, correction and deletion

Contact the privacy administrator to request access, correction or deletion of your records. We verify the request against the originating conversation before disclosing or changing information. See the Data deletion page for the request process.

Privacy contact — BK Mongolia / E-Khannam: [CONTACT EMAIL TO BE PROVIDED BY THE BUSINESS]. This placeholder is not an active email address. Until it is replaced, contact the E-Khannam Facebook Page from your existing conversation and ask for the privacy administrator. Do not send passwords, access tokens or unnecessary identity documents.