Your information. Clear choices.

Privacy notice · Updated 12 September 2026

Who operates BIGI

BIGI is operated by Stockholm IT Academi AB, organisation number 559337-9141, VAT number SE559337914101, Fallskärmsgatan 1 lgh 1302, 128 34 Skarpnäck, Stockholm, Sweden. Contact info@heybigi.com or gdpr@sita.dev about privacy.

We are responsible for account, security and service-administration information. When an Instagram account owner uses BIGI to handle follower conversations or collect leads, that owner determines the purpose of that processing and we process those records on their instructions. Contact the account owner or us to exercise your rights concerning those records.

Information BIGI uses

We process your account identifiers, email, Instagram profile and permitted media; onboarding answers, business links and knowledge; chats, campaign settings, instructions and corrections; permitted comments and messages and their identifiers; lead-form responses; and technical records needed to secure and operate the service. Website discovery reads links you provide to suggest information for your review.

Instagram access depends on the permissions you grant. We store connection tokens encrypted on the server. We use essential session cookies to keep you signed in and protect connection and email-verification flows.

Why we use it

We use this information to provide your requested service, authenticate access, answer eligible conversations, run your selected campaigns, maintain business context, provide reports and respond to support requests. Account and service administration relies on performance of our agreement; security and abuse prevention on legitimate interests; optional uses on consent where required; and legally required records on legal obligations. An Instagram permission grant does not replace an account owner's responsibility to establish a lawful basis for processing follower data.

AI and Brain memory

Relevant messages, context and approved knowledge are sent to the configured AI service to generate replies or suggestions. Media transcription sends the requested audio to the transcription service. BIGI can store workspace-specific memory from conversations, campaigns and corrections when enabled. Memory is visible and manageable in Brain; critical business facts require confirmation. This feature stores context for your workspace rather than training a new foundation model.

The current hosted configuration uses Google Vertex AI for text and image generation, with OpenAI available for fallback text generation and Groq for configured audio transcription. Vercel hosts the application; Supabase provides database and file storage; Resend delivers service emails. These providers process information needed for their services. Before public operation, the deployed provider list, processing agreements, transfer safeguards and backup retention must be confirmed. BIGI is currently in development and is not open for general customer registration.

Sharing and international processing

Replies and permitted actions are sent to Meta. Lead responses and conversation records are available to the relevant workspace owner. Service providers may process information outside the EEA; applicable provider locations and transfer arrangements must be disclosed for the public deployment. We do not sell your personal information.

Retention and deletion

Conversation records, chats and leads use a default retention period of 90 days. The workspace owner can change this from 7 to 730 days; conversation retention is measured from its last update. Business knowledge, campaigns and saved media remain until removed or the workspace is deleted. Some memory episodes expire after 90 days. Scheduled maintenance removes processed webhook envelopes after 7 days, completed service-email records after 30 days, and audit records after 365 days. Detailed before-and-after audit content is cleared after 30 days. These are scheduled cleanup periods; a failed job may delay removal and requires recovery. Unprocessed events may remain while delivery failures are resolved.

Deleting your account stops access and queues removal of the workspace and its stored files. File cleanup waits for previously issued upload links to expire and retries if storage is unavailable. We confirm completion after the deletion finishes. Disconnecting Instagram stops future access through that connection but does not delete your workspace or messages already sent on Instagram. Provider copies and backups follow the applicable provider retention arrangements; deleting live BIGI records does not establish that those copies have already been erased.

You can export your workspace in Profile and manage memory in Brain. See data deletion instructions to request deletion of your workspace or follower information. We may retain information where necessary to meet legal obligations or resolve disputes and will explain any applicable exception when responding.

Requests from public authorities

We review requests for legal validity and require an applicable legal basis before disclosing information. We challenge or seek to narrow unlawful or excessive requests, limit any lawful disclosure to the necessary information, and record the decision. We notify the relevant account owner where lawful. BIGI does not let an AI assistant approve such disclosures.

Your rights

Depending on the circumstances, you can request access, correction, erasure, restriction, portability or object to processing. Where we rely on consent, you can withdraw it. We may ask for proportionate information to verify a request. You may complain to the Swedish Authority for Privacy Protection, IMY, or your local supervisory authority.

We update this notice when our service or processing changes. Company and contact details · Terms