Legal

Privacy policy

What we collect, why we collect it, and how we protect it. Plain language first, legal language second.

Last updated 14 May 2026

This Privacy Policy explains how OonoBox (“we”, “us”, “our”) collects, uses, stores and discloses information when you visit our website or use our products.

1. What we collect

Account data

When you sign up we collect your name, work email, business name, and the phone number(s) you connect to the WhatsApp Business Platform. We collect billing details when you start a paid plan.

Customer conversation data

On your behalf, we store the messages your customers send to you and the replies you send back. We process attachments (images, documents, audio) sent through connected channels for the purpose of displaying them in your inbox.

Usage data

We log basic product analytics — page visits, feature usage, error reports — to keep the product reliable. We do not sell this data.

2. How we use your data

  • To operate the inbox, routing, templates and reporting features.
  • To provide customer support when you ask for it.
  • To bill you, where applicable.
  • To improve product quality through aggregate, anonymised analytics.

3. What we never do

  • We do not sell your data, or your customers' data, to anyone.
  • We do not use your customer conversations to train AI models.
  • We do not share data with advertisers.

4. Sharing

We share data only with subprocessors necessary to operate the service (cloud hosting, payment processing, error monitoring, the WhatsApp Business Platform). A current list is available on request.

5. Retention

Active account data is retained for the life of your account. After cancellation, customer conversation data remains available for export for 30 days, then is deleted from production systems within 90 days. Backups are rotated within 12 months.

6. Your rights

You may request access, correction, export or deletion of your personal data at any time. Email privacy@oonobox.co.zw.

7. Security

Data is encrypted in transit (TLS 1.2+) and at rest. Access to production systems requires single sign-on and is restricted on a need-to-know basis. We run a quarterly access review.

8. Changes

We'll post material changes to this policy on this page and notify active customers by email at least 30 days before they take effect.

9. Contact

Questions about this policy? Email privacy@oonobox.co.zw.