Privacy policy
Last updated 2026-08-31
Who we are
CXTIME is an AI-powered omnichannel inbox and CRM operated by Airtime Asia Limited, a company registered in Bangladesh. For the purposes of data protection law, Airtime Asia Limited is the controller of the data described in the website section below, and a processor of the data businesses handle inside the product.
Questions about this policy, or any request relating to your data, go to hello@airtimelab.com.
What this website collects
When you browse this marketing website, we and our analytics and advertising providers collect information about your visit: the pages you view, the buttons and calls to action you click, and other interactions with the page. We also collect basic device and browser information, such as browser type, screen size, referring link and operating system.
Your approximate location, at the city or region level, is estimated by these providers from your IP address. We do not collect your precise GPS location.
When you submit the demo request form, we also collect the details you type: your name, company, email, phone and your message. These go to AirtimeLab infrastructure so our team can contact you about a demo. The chat widget sends the messages you write, and any name, email or phone you give it, so our assistant and team can answer you; those messages are handled the same way as any CXTIME conversation.
Analytics, advertising and who we share data with
This website uses Google Analytics 4 to understand how visitors find and use the site, and Google's and Meta's advertising tools to measure our ads and reach the right audiences. To do this, we share your website activity with Google and Meta, who act as independent controllers for the measurement and advertising they carry out with it.
We use the Meta Pixel, which runs in your browser, together with the Meta Conversions API. Some of the same events are also sent to Meta from our servers, so that measurement still works when a browser blocks the pixel.
This sharing lets us and these platforms build advertising audiences, including audiences of people who have already visited this site, so we can show CXTIME ads to past visitors on Meta and, in future, on Google's advertising network. This practice is known as retargeting.
Cookies, and why there is no cookie banner
This website uses cookies and similar technologies, both our own first-party ones and cookies set by Google and Meta, for analytics and advertising. This is a change from how this site worked before, and this policy reflects that new reality.
We do not show a cookie consent pop-up. Instead, consent defaults are set automatically by region using Google Consent Mode. For visitors in the European Economic Area and the United Kingdom, analytics and advertising storage are denied by default, so those cookies are not set unless local law allows it. For visitors in Bangladesh and most other regions, they are allowed by default. We also honour your browser's Do Not Track signal.
You stay in control wherever you are. You can opt out through your browser's cookie and Do Not Track settings; turn off personalised ads at Google Ads Settings (https://adssettings.google.com) and Meta ad preferences (https://www.facebook.com/adpreferences); and switch off analytics with the Google Analytics opt-out add-on (https://tools.google.com/dlpage/gaoptout). Clearing your cookies removes the identifiers this site has stored in your browser.
If you submit the demo form
When you give us your email or phone through the demo form, we may share a hashed (scrambled) version of them with Meta and Google. Hashing lets these platforms match your enquiry to an account you already have with them, for measurement and advertising, without us handing over your details in readable form.
Our legal basis for this is your consent, given when you choose to submit the form, together with our legitimate interest in measuring and improving our advertising. You can withdraw consent and ask us to delete your data at any time by emailing hello@airtimelab.com; the data deletion page at https://cx.airtimelab.com/data-deletion/ explains the full process.
What the CXTIME product stores
CXTIME is used by businesses to manage customer conversations across messaging channels, comments and reviews. For each business workspace the product stores: conversations and their message content, contact profiles built from those conversations, notes, tags, orders and deal records the business creates, knowledge base content the business uploads, and the credentials needed to keep its channels connected. Channel credentials are stored encrypted.
The business that operates the account controls this data. Airtime Asia Limited processes it only to provide the service, for example to power the unified inbox, AI replies, customer memory, task management and analytics for that business. We do not sell it and we do not use one business's data to serve another.
AI features send conversation content to the AI model powering the workspace in order to generate replies, transcribe voice notes and understand images. Access inside a business account is limited by role.
How data is protected and where it lives
Data is encrypted in transit and at rest. Channel credentials and other secrets are additionally encrypted at the application level. Privileged actions inside the product are recorded in a tamper-proof audit trail.
Product data is hosted on AirtimeLab infrastructure on servers located in the European Union. Airtime Asia Limited operates from Bangladesh, so support staff may access data from Bangladesh under the same role-based controls.
How long data is kept
Conversation data is retained for as long as the business account remains active. When a business closes its account, conversation data is deleted within 90 days.
Voice notes are a special case: the audio file is deleted within 10 days of being received, and only the text transcript is kept with the conversation.
Demo requests and enquiries sent through this website are kept only as long as needed to follow up with you.
Facebook Messenger data
Businesses that connect a Facebook Page to CXTIME receive messages from Facebook Messenger through our platform. When a person messages a connected Page, CXTIME receives and stores their Page-Scoped User ID (PSID), display name, profile picture (where available), and the content of their messages. This data is stored on behalf of the business that owns the Page.
CXTIME uses this data only to display conversations in the business inbox, to allow the business team and AI assistant to reply, and to build a contact history for that business. We do not use it for advertising, we do not sell it, and we do not share it with other businesses.
If you messaged a Page that uses CXTIME and would like your data removed, you can remove the app from your Facebook account at Facebook Settings > Security and Login > Apps and Websites. Airtime Asia Limited will receive an automatic deletion request and will anonymise your contact details within 24 hours. You can also email hello@airtimelab.com to request manual deletion; include the name of the Page you messaged and we will process it within 30 days.
For more detail on how this works, see our data deletion page at https://cx.airtimelab.com/data-deletion/.
Your rights
You can ask for access to the personal data we hold about you, ask for it to be corrected, or ask for it to be deleted. Email hello@airtimelab.com and we will respond within 30 days. For deletion connected to Facebook Messenger, the data deletion page at https://cx.airtimelab.com/data-deletion/ describes the automatic path as well.
If you are a customer of a business that uses CXTIME, that business controls the account your conversations live in, so direct your request to them first. We support the businesses on our platform in answering such requests.
You can also control how Google and Meta personalise advertising to you directly with them, through Google Ads Settings and Meta ad preferences, and you can opt out of analytics with the Google Analytics opt-out add-on, as described in the cookies section above.
Changes to this policy
When this policy changes, the date at the top of the page changes with it. A change that expands what this website collects, or adds a new way your data is shared, will always be reflected here before it takes effect.