Privacy Policy

Last updated: October 4, 2026

Zowof ("we") is a cloud POS, accounting and customer-messaging platform operated at zowof.com. This policy explains what data we process, why, how we protect it and how to ask for deletion. It covers our websites and apps and the connection of businesses' Facebook Pages and Messenger.

1. Roles

Each business using Zowof is the controller of its own customers' data; we act as a processor to provide the service. Every business has its own isolated database.

2. Data we process

• Account data: business name, owner name/email/phone, users and roles.
• Facebook Page data (when the Page owner connects a Page): Page ID, name, category, picture, and the Page access token (stored encrypted).
• Messenger messages of the connected Page: message text, attachment links, timestamps and direction, and the sender's Page-scoped ID, name and profile picture as provided by Facebook.
• Comments on the Page's posts and replies; posts that the business creates or schedules through Zowof.
• Technical data: security and error logs, IP addresses.

We never ask for or store Facebook passwords; connection uses Facebook's official OAuth consent screen.

3. Why we use it

To show a Page's conversations in one inbox and reply to them; for automated replies, reports and staff escalation only as configured by the business; to publish or schedule posts when the Page owner explicitly requests it; and for security. We reply only to customer-initiated conversations.

4. Sharing

We do not sell data and do not use it for advertising. We share it only with our infrastructure/hosting provider, with an optional AI provider if the business enables AI-assisted replies (conversation text needed to draft a reply is sent to the provider the business selected, e.g. OpenAI, Anthropic or DeepSeek; off by default), and where legally required.

5. Security

Per-business database isolation with least-privilege database users, encryption of secrets at rest, HTTPS, HMAC verification of every Meta webhook request, and continuous automated monitoring.

6. Retention and deletion

Data is kept while the account is active. Disconnecting a Page stops receiving its data immediately. On a deletion request or account closure we delete the related data within 30 days, except where retention is legally required. See Data deletion.

7. Your rights, children, changes

You may request access, correction or deletion. Our services are for businesses and not directed to children under 13. We may update this policy; the date above will change.

8. Contact

info@zowof.com