Privacy policy
Last updated: 2026-10-28
Fullbase is a product of Outframe Tech Ltd, Markou Mousouri 21, 4102 Limassol, Cyprus ("we"). Contact: info@outframe.co. Fullbase answers customers of furniture and catalogue showrooms on their website chat, WhatsApp, Instagram and email, and helps the showroom's owner reply, send prices and quotes, book visits and run campaigns.
Two roles
- For a showroom's customers, the showroom decides why and how their data is used. We process it on the showroom's behalf, as its processor, and only to provide the service to that showroom. Each showroom's data is kept apart from every other showroom's.
- For showroom owners and staff who use the Fullbase app, and for visitors of fullbase.ai, we decide how their data is used.
What we process
- Messages a customer sends to a showroom on any channel, and the showroom's replies: text, photos, voice notes and their transcript, and files.
- Contact details a customer gives or a channel provides: name, phone number, email address, the name and id their WhatsApp or Instagram profile shows, and the ad a conversation started from.
- What they are looking for, as they describe it, the products shown or discussed, prices and quotes the showroom sent, visit requests and bookings, and notes the showroom's staff write.
- Consents and opt-outs: agreement to be contacted about a request, to receive WhatsApp updates or to join the showroom's email list, each with its date, and any opt-out (STOP, leaving the list).
- Campaigns: emails the showroom sends to its email list and whether each arrived, bounced or was marked as spam; posts on the showroom's own Instagram and Facebook pages; and counts of visits from the showroom's campaign links, kept with a scrambled form of a random number, never with a name.
- For owners and staff: name, email, login and session data, and what they do in the app.
- Technical data: IP addresses in our hosting provider's logs; on a showroom's website, a random id so a chat continues, the chosen language, and a 7-day note of the campaign link a visitor came from; a login cookie in the app. This site, fullbase.ai, sets no cookies.
Why
- To answer the customer and pass their request to the showroom.
- To send what the customer asked for: a price, a quote, a visit confirmation or reminder.
- To send WhatsApp updates and campaign emails only to customers who agreed, and never after they said STOP or left the list.
- To keep the service secure, prevent abuse and fix problems.
We do not sell personal data, show advertising, or use customers' messages to train AI models.
AI
Replies on a showroom's behalf are written by an AI assistant, which says so in its first message on each channel. Exact prices and every email answer wait for the showroom's approval. The AI provider processes messages to write the reply and does not use them to train its models.
Who else processes data
| Provider | What for | Where |
|---|---|---|
| Vercel | hosting the app and showroom websites | EU (Frankfurt); company in the US |
| Neon | database | EU (Frankfurt) |
| Cloudflare (R2) | photos and files | EU |
| Anthropic | writing replies, reading photos, sorting email | US |
| Resend | sending and receiving email | EU (Ireland); company in the US |
| ElevenLabs | turning voice notes into text | US |
| Meta (WhatsApp, Instagram, Facebook) | the channels themselves | under Meta's own terms |
Where data leaves the EU, it is transferred under the Standard Contractual Clauses or the EU–US Data Privacy Framework, as applicable.
How long we keep it
- Raw message records received from WhatsApp and Instagram: the message content is cleared after 30 days.
- Conversations, customer records, quotes, visits and campaign data: as long as needed to provide the service to the showroom, then deleted, or sooner if the showroom or the customer asks.
- Owner and staff accounts: until the account is closed.
Your rights
You can ask for a copy of your data, to correct it, to delete it, to restrict or object to its use, and to take it elsewhere. A showroom's customer can ask the showroom directly or write to us at info@outframe.co; we answer without undue delay and at the latest within one month. To delete your data, see Deleting your data. You can complain to the Cyprus Commissioner for Personal Data Protection (dataprotection.gov.cy).
Changes
We date every version of this page and note important changes here.