Your data, used for a defined purpose.

Scope and controller

Sky Matinée operates this service to support guest communication, reservation requests and internal event operations. This policy applies to information processed by the automation and its authorized operators. It does not replace the separate policies of Meta, Google, Telegram, an event venue or another third-party service.

Information we process

Depending on how you interact with Sky Matinée, the service may process:

• Instagram-scoped identifiers, username, display name and profile metadata made available through Meta;
• messages, replies and supported attachment or media metadata sent to the official account;
• reservation details you choose to provide, such as name, contact detail, date, party size and notes;
• conversation state, human-handoff status and actions taken by authorized operators;
• technical request, security and error information needed to operate and protect the service;
• for authorized staff, Telegram identifiers and operational messages sent to the restricted operator workspace.

How and why we use information

We use this information only to:

• answer guest questions and maintain conversation continuity;
• create, review, update or cancel reservation requests;
• provide current event and business information from approved sources;
• route a conversation to an authorized human operator when needed;
• prevent duplicates, investigate errors, secure the service and document operational outcomes;
• comply with applicable legal obligations and respond to valid privacy requests.

We do not sell personal data, build advertising profiles or use personal data for unrelated marketing.

Google user data and API use

The service connects only to a Google account and business workbook explicitly authorized by the Sky Matinée owner. Google Sheets and related Drive metadata are used to read and maintain approved business-information, reservation and CRM records. The service does not browse unrelated files in the authorizing account.

Data obtained through Google APIs is used only to provide or improve these visible operational functions. We do not transfer or sell Google user data for advertising, credit assessment or data-broker purposes, and we do not use it to train a generalized or independently offered AI model.

Automation and service providers

Relevant message content and approved business context may be processed by an AI model to draft a reply or support an operator decision. Deterministic controls govern reservation effects, provider sends and human handoff. Where necessary for the service, information may be processed by Meta, Google, Telegram, our self-hosted automation infrastructure and infrastructure providers acting on our behalf.

Storage, retention and security

Conversation context is bounded to the operational window required for continuity. Reservation, CRM and audit records are retained only while needed for the relevant operation, dispute handling, security or a legal obligation. Backups and technical logs follow controlled retention and access rules.

We use encrypted HTTPS connections, restricted administrative access, encrypted credentials, least-privilege provider permissions and reviewable operator controls. No internet transmission or storage system can be guaranteed to be completely secure.

Your choices and rights

You may ask us to access, correct or delete information associated with your interaction, subject to identity verification and any limited retention required by law or for a legitimate security or dispute purpose. See our Data deletion instructions. You may also stop messaging the official account or revoke a connected provider grant using that provider's controls.

Contact and policy changes

For a privacy question, contact the official Instagram profile @skymatine.belgrade. We may update this policy when the service, providers or applicable requirements change. The effective date above identifies the current version.