Owner Data Processing Terms
Last updated: 2026-09-27 · Operator: Feng Bo (individual) · fengbomail@gmail.com
At a glance
- You are responsible for the content you put into BeforeMe; we keep and use it only on your instructions. Legally, you are the “controller” and we are the “processor”.
- We use this data for one purpose only: answering others’ questions for you. We do not use it for other purposes, sell it, use it for advertising or train our own models with it.
- You can delete your data at any time or ask us to export it. It is fully deleted within 30 days after account closure.
- If a security incident occurs, we notify you within 48 hours of discovering it.
- We notify you 30 days before changing providers. You may object; if you do, you can close your account before the change takes effect, without any loss.
1. Scope
These terms apply to personal data you (the owner) enter or collect through BeforeMe: your published items, private notes, contacts you add, and the parts of visitors’ questions and contact details on your page that relate to you.
We act as controller for data needed to operate the platform itself (visitor abuse prevention records, security logs and your account information). See the Privacy Policy.
2. What we process, why and for how long
| Item | Details |
|---|---|
| Purpose | Answering visitors’ and contacts’ questions using content you approved for publication; passing on questions that need your personal attention |
| Data types | Text you write (which may mention others), contacts’ names and groups, visitors’ questions and contact details they voluntarily leave |
| People concerned | You, your contacts, visitors asking questions on your page and people mentioned in your content |
| Duration | For the life of the account; question records automatically deleted after 90 days; unhandled requests passed on kept for at most 180 days; all data deleted within 30 days after account closure |
3. Our obligations
- Process only on your instructions. Your instructions are the actions you take in the console: publishing, withdrawing, authorising and deleting. We will tell you if we believe an instruction is unlawful.
- Confidentiality. Only the operator himself (Feng Bo), the AI coding tools he uses for maintenance (only for troubleshooting and releases, under his authorisation), and the providers listed in section 4 can access your data.
- Security measures. HTTPS encryption throughout transmission and encrypted database storage; deterministic code decides who can see what, not AI; visitor identifiers are stored only as salted hashes; every access is audited and you can view the records in the console.
- Help you respond to rights requests. If someone requests access to, correction or deletion of data related to your page, we will pass the request on to you and provide the necessary technical assistance.
- Incident notification. We will notify you within 48 hours of discovering a security incident that may affect your data, explaining what happened, who may be affected and what we have done, to help you meet your own notification obligations.
- Deletion and return. When closing your account, you may first ask us to export your data (currently done manually, with delivery within 15 days). We delete all data within 30 days after account closure, unless retention is legally required.
- Cooperation with verification. You may request information needed to demonstrate compliance with these terms; we will respond truthfully.
4. Other providers (subprocessors)
We engage the following providers to assist with processing and require them to assume data protection obligations no less protective than these terms:
| Provider | Role | Location |
|---|---|---|
| Google Cloud | Website and database hosting | USA |
| DeepSeek (default) | Generating answers and organising updates you submit | China |
| Other AI providers you choose for your page (if any) | Generating answers on your page | As shown in the console |
We notify you 30 days before adding or replacing a provider. You may object; if you do, you may close your account before the change takes effect, and we will delete your data under section 3(6).
5. International transfers
Data is stored in the USA and may be processed by AI providers in China or other countries. Google Cloud’s data processing terms include EU Standard Contractual Clauses. DeepSeek currently does not provide such clauses, so we send it only the minimum content necessary to answer, without any information that directly identifies visitors. If most of your visitors are in Europe, you may choose another provider for your page (once that feature is available).
6. Your obligations
- You have a lawful basis to publish and record the content you put into BeforeMe, including content about others; you are responsible for informing them or obtaining consent where required.
- Do not enter others’ sensitive information (health, finances, identity documents, home addresses, whereabouts, etc.) without explicit authorisation and a lawful basis.
- Promptly handle requests passed on to you, especially deletion requests.
7. Other provisions
- If these terms conflict with the Terms of Use, these terms prevail for data processing matters.
- These terms are governed by Brazilian law; disputes are resolved as set out in section 9 of the Terms of Use.
- We will notify you of material changes in advance and ask you to confirm your acceptance again.