This Privacy Policy explains how OonoBox (“we”, “us”, “our”) collects, uses, stores and discloses information when you visit our website or use our products.
1. What we collect
Account data
When you sign up we collect your name, work email, business name, and the phone number(s) you connect to the WhatsApp Business Platform. We collect billing details when you start a paid plan.
Customer conversation data
On your behalf, we store the messages your customers send to you and the replies you send back. We process attachments (images, documents, audio) sent through connected channels for the purpose of displaying them in your inbox.
Usage data
We log basic product analytics (page visits, feature usage, error reports) to keep the product reliable. We do not sell this data.
2. How we use your data
- To operate the inbox, routing, templates and reporting features.
- To provide customer support when you ask for it.
- To bill you, where applicable.
- To improve product quality through aggregate, anonymised analytics.
3. What we never do
- We do not sell your data, or your customers' data, to anyone.
- We do not use your customer conversations to train AI models.
- We do not share data with advertisers.
4. Sharing
We share data only with subprocessors necessary to operate the service (cloud hosting, payment processing, error monitoring, the WhatsApp Business Platform). A current list is available on request.
5. Google user data
When you connect a Google account (for the Sheets and Calendar features), OonoBox requests only the permissions needed to carry out the actions you set up, such as adding rows to a spreadsheet you choose or creating calendar events.
- Access: we access your Google Sheets and Google Calendar data only to perform the automated actions you configure.
- Use: this data is used solely to provide those features to you. We do not use it for advertising, and we do not use it to train AI or machine-learning models.
- Storage: we store an encrypted Google token to keep the connection active, plus the references you configure (such as a spreadsheet or calendar id). We do not copy or retain the contents of your spreadsheets or calendar beyond what is needed to complete an action.
- Sharing: we never sell Google user data, and we share it only with the subprocessors listed above strictly to operate the service.
- Control: you can disconnect Google at any time from within OonoBox, which revokes our access.
OonoBox's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
6. Retention
Active account data is retained for the life of your account. After cancellation, customer conversation data remains available for export for 30 days, then is deleted from production systems within 90 days. Backups are rotated within 12 months.
7. Your rights
You may request access, correction, export or deletion of your personal data at any time. Email privacy@oonobox.co.zw.
8. Security
Data is encrypted in transit (TLS 1.2+) and at rest. Access to production systems requires single sign-on and is restricted on a need-to-know basis. We run a quarterly access review.
9. Changes
We'll post material changes to this policy on this page and notify active customers by email at least 30 days before they take effect.
10. Contact
Questions about this policy? Email privacy@oonobox.co.zw.