Trang này chỉ có bằng tiếng Anh.
PRIVACY POLICY
Last updated October 26, 2026
Version 1.1
CHANGELOG
This changelog records every change to this document since the version you agreed to. Version 1.1 adds disclosures and corrections only — it creates no new obligations for you, so there is nothing to accept again. Each entry names the change that introduced it.
v1.1 — September 17, 2026. What changed since v1.0:
- Connected social accounts. We now describe that when a business connects a Facebook Page or Instagram Business account we receive and store the text and author name of comments and direct messages sent to that account, which appear in that business's inbox inside OwnersPal. (PR #2076, August 19, 2026.)
- Campaign attribution on the websites we host for businesses. We now describe that the campaign identifiers that brought a visitor to such a website (gclid, fbclid, utm values and the landing page) are stored with any booking or enquiry they submit, so that business can measure its own campaigns. (PR #2217, September 9, 2026.)
- AI-enhanced photos. We now describe the Brand Photoshoot: which of a business's own photos are sent to OpenAI and fal.ai, the enhancements applied, the record of how each enhanced copy was made, the AI-enhanced label stamped into the image file, and the rule that enhanced copies without their real background are never added to the media library, used for automatic videos, or sent to Google Business Profile. (PR #2256, September 11, 2026.)
- Conversion tracking and ad measurement on the websites we host for businesses. We now describe a business's own Meta and Google Ads tags on its website, the cookies and local-storage entries they use, the marketing consent they require, Global Privacy Control always overriding an earlier acceptance, and the once-a-day upload of an ad click identifier together with a SHA-256 hash of the email address or phone number given with a booking — never the address or number itself. (PR #2267, September 12, 2026.)
- Cookie banner on the websites we host for businesses. We now describe that such a website shows a cookie banner only when the business has connected an ad account with conversion tracking, and that the visitor's choice is stored only in their own browser for 12 months, never on our servers. (PR #2295, September 13, 2026.)
- Card verification on the free Starter plan. We now describe the no-charge card check run through Stripe before the free video, and that we keep only a record that a card was verified plus Stripe's reference for it — never the card number or security code. (PR #2281, September 13, 2026.)
- Records of agreements and choices. We now describe the agreement and consent records we keep (the legal document version, the exact statement agreed to, the time, IP address, browser user agent and sign-in method), the automatic-renewal consent record, the marketing opt-out records behind the email suppression list and the STOP keyword, and the cookie-choice receipts for OwnersPal's own website and app. (PR #2284, September 13, 2026.)
- Other processing described in full. We now describe opt-in diagnostic screenshots attached to problem reports, aggregate website statistics, imported website testimonials, Google reviews shown in videos, voice hooks, website assistant questions, AI search-visibility checks and published service areas. (PR #2284, September 13, 2026.)
- Subprocessors, server location and retention. Runway was added to the AI service providers we use (PR #2076, August 19, 2026); the server location now reads “United States” instead of a blank (PR #1175, July 27, 2026); and specific retention periods are stated for the categories that have one (PR #2284, September 13, 2026).
- Privacy requests on the websites we host for businesses. We now describe the “Your privacy choices” form on such a website: the name, email address, request type and optional message you enter are sent to that business, which decides how to answer, and we keep a service-provider record of the request — its reference, type, message, a one-way fingerprint (salted hash) of your email address and when it was received, but not your name or email address — for 24 months, after which the message and the fingerprint are deleted. Submissions are rate-limited by network address, which is held only for the length of the limit window, at most one day (PR #2406, September 17, 2026).
- Do Not Sell or Share My Personal Information. We now describe the opt-out link in OwnersPal’s own footer: we do not sell personal information, the link turns marketing cookies off in your browser, and a Global Privacy Control signal sent by your browser is always treated as that opt-out, taking precedence over any earlier cookie choice you made in that browser for as long as the signal is sent (PR #2406, September 17, 2026).
- Keeping the same person consistent across video shots. We now describe the optional setting, off unless a business turns it on, that sends one of that business's own uploaded photos of a person to our AI service provider fal.ai as a reference image so the person looks the same in every shot of a video, the private copy of that photo kept with the account while the setting is on, the one-hour expiry of the link sent to fal.ai, and the 90-day limit on how long a stored copy is kept after it was last used as a reference, and the deletion of every stored copy when the setting is turned off or the account is deleted — and that we never create, store or compare face scans, face templates or any other biometric identifiers. (PR #2404, September 17, 2026.)
- Navigation preferences. We now describe that when you pin a shortcut to the navigation sidebar inside OwnersPal, we store that choice on your account so your shortcuts are the same on every device you sign in from, and that we use these stored choices to understand which areas of the product businesses use most. We do not combine them with other businesses’ choices to rank, score or recommend anything to you. They are kept for as long as your account exists and are deleted with it. (PR for rail favourites, September 19, 2026.)
- Styled AI-enhanced photos now appear in the media library. A styled version from a Brand Photoshoot that you approve is now also listed in your media library, always labelled AI-enhanced, and can be downloaded as that same labelled file. This replaces the earlier statement (see the AI-enhanced photos entry above, September 11, 2026) that copies with a generated background are never added to the media library. Such a copy is still never used for automatic videos, your website, your ads or cards, or sent to Google Business Profile. (September 20, 2026.)
- Details and photos from a Google Maps listing. We now describe exactly what we look up from a business’s Google Maps listing and how long we keep it: the Google Place ID for as long as the account exists; the other details — including Google’s description of the business and its category and types, the copies that fill in the business’s profile and website (also those picked during sign-up or from a Google search when setting an ad area) and translations of Google’s description — for at most 30 days unless the business confirms or edits them, after which unconfirmed details and Google map coordinates are deleted; a map pin the business moves itself is its own. The same limit covers the copies we make of these details in ad-targeting plans and presets, targeting suggestions, listing checks, AI search visibility checks and records of which details generated content used; competitor places picked for ad targeting are kept only as their Place IDs; details the business has not confirmed are not sent to its other listings; and we name the copies that are not deleted with the details — content the business makes and our records of how it was made, its website address made from its business name, and copies held by ad platforms and AI providers. We no longer save the listing’s photos or use them in new videos, photoshoots, ads, cards or posts; the links to them that we had saved were deleted, including in our records of where a business’s details came from and in brand kit logos, except the photo link on posts that were already published; we still keep the copies inside videos and cards that were already made, and photoshoot versions already made from one of these photos, which only that business can see and which can’t be used for anything new; a website with fewer than two photos of its own may show them live, credited, and your browser loads them directly from Google. This replaces the earlier statements that we retrieve customer reviews through these APIs (we do not) and that we cache your device’s location on your device for twelve months (we do not). (PR for Google Places compliance, September 24, 2026.)
- Photos imported from Square. We now describe connecting a Square account to copy the photos from its item library into the media library: the read-only access we ask Square for, what we copy and store, that we never post to Square, and that every copied photo is deleted when the business disconnects Square, removes our access in Square, or deletes its account. (PR for Square photo import and the photo origin question, September 24, 2026.)
- Where uploaded photos came from. We now describe the record we keep when you answer “Where did these photos come from?” before adding photos to your media library: your answer, the exact statement you confirmed and its version, how many photos it covered, the time, your IP address and your browser's user agent. It is deleted together with your account. (PR for Square photo import and the photo origin question, September 24, 2026.)
- Visible AI mark on styled photos. A styled Brand Photoshoot version now also carries a visible “AI-generated scene” mark on the picture itself, in addition to the AI label in the image file’s metadata. (September 24, 2026.)
- Saved Google Maps photos deleted. The links to Google Maps photos that we had saved were deleted, including in our records of where a business’s details came from and in brand kit logos, except the photo link on posts that were already published. That also covers links in businesses’ media libraries (including pictures we had saved from a business’s own website that were Google Maps photos), menu pictures, profile and logo images, team members’ photos on the websites we host for businesses (the published website, edits not yet published, and the saved copy used to undo a website rebuild, which also holds menu pictures), the record of the photo a creative card was made from, posts that were never published, and our internal records of how videos were made. Posts that were waiting to go out with a Google Maps photo are stopped. We still keep the copies inside videos and cards that were already made, including working copies made while producing those videos (cropped frames, enhanced copies, depth maps, crops of a face used to keep a person looking the same across shots, and copies uploaded to a video provider), and photoshoot versions already made from a Google Maps photo, which only that business can see and which can’t be used for anything new. (PR for deleting saved Google Maps photos, September 24, 2026.)
- Deleting enhanced copies. We now say where you delete a Brand Photoshoot copy (its photoshoot, or the media library for a styled copy), that deleting it removes the copy and its file from our storage, that we keep your earlier pick or rejection of it to steer your own later shoots, and that a photo in the trash is deleted together with its file 7 days later. Before this change, photos deleted from the trash kept their file in our storage. (PR for deleting photoshoot copies and their files, September 26, 2026.)
- Account deletion report. We now describe the report you see after deleting your account yourself (what we deleted, where it was stored, and what we keep, why and until when, with a spreadsheet download) and the same summary we email to the address on your account; we keep no copy of the report. (PR for the account deletion report, September 27, 2026.)
- Do Not Sell or Share, restated. OwnersPal's own website and app no longer show a marketing cookie choice, because they set no marketing cookies. The "Do Not Sell or Share My Personal Information" link now says that we do not sell or share your personal information for cross-context behavioral advertising, so there is nothing to opt out of, and that we honor Global Privacy Control by keeping analytics cookies off while your browser sends it. Websites we host for businesses keep their own marketing cookie choice. (PR removing the marketing cookie choice, September 27, 2026.)
- Keeping the same person consistent — Illinois and Texas. We now say that the optional setting that keeps the same person consistent across video shots is not currently offered to businesses located in Illinois or Texas, and that if such a business had turned it on, its stored reference copies are deleted the next time it makes a video, and in any case within 90 days of their last use. (September 27, 2026.)
- Business address at checkout. We now say that when you subscribe, Stripe’s checkout asks for your business address in a shipping-address field, that nothing is shipped, and that the address is used to calculate sales tax and to offer Google Pay, stored by Stripe with your billing details and not copied into our own systems, and that Apple Pay, Google Pay, Link, Amazon Pay and Cash App Pay, when you choose one, also process the payment under their own privacy notices. (September 29, 2026.)
- Paying by bank debit. We now say that if you pay by bank debit (ACH), Stripe collects and verifies your bank account details, which can include connecting to your bank through Stripe Financial Connections, and that we do not store your bank details. (September 29, 2026.)
- Recommendation and decision records. We now describe the records OwnersPal keeps of the recommendations it makes for a business, the owner’s decision on each and the results afterwards: held as counts and totals with no customer names, emails, phone numbers or review text, kept for up to 36 months and deleted with the account. (October 2, 2026.)
- How long we keep things after you delete your account. We now say that the record that a deletion happened is kept for 3 years and then deleted, that entries about the account in our staff action log are kept with that log, and that copies in our database backups are gone within 7 days and mentions in our hosting and error-tracking logs within 90 days. The deletion report now shows these periods and dates. (PR for the deletion retention periods, October 2, 2026.)
- Downloading a copy of your data. We now describe the self-serve download in your account settings: what the export holds, the download link we email and show in your settings, that the link stops working after 24 hours and the files are deleted within the following 24 hours, and what the export leaves out. Before this change, a copy of your data was available only through our privacy request form. (PR for self-serve data export, October 2, 2026.)
- Connected AI assistants. We now describe what happens if you connect OwnersPal to an AI assistant such as Claude or ChatGPT: the four read-only permissions you can approve, what a connection never shares, that the assistant’s provider handles what it receives under its own terms (possibly outside the EEA, the UK or Switzerland), the registration document we fetch without any of your data, how to revoke a connection in Settings › AI assistants (removing OwnersPal inside an assistant ends the connection only if that assistant tells us), that a connection ends on its own 90 days after you approve it, how long we keep connection and usage records, and that both are deleted with your account. (PR for connected AI assistants, October 2, 2026.)
- Ad spending approvals. We now describe the record we keep when you approve an ad campaign to spend from your own ad account, and that it is deleted together with your account. (October 2, 2026.)
- Legal bases and transfer countries. For people in the EU and the UK, the list of legal bases we rely on now includes performing our contract with you and our legitimate interests, which the summary of that section already named, with examples of the legitimate interests and your right to object to them. The section on international transfers now names the United States and the European Union, where our service providers process information, where it previously showed a blank, and points to our list of subprocessors. (PR for legal bases and transfer countries, October 3, 2026.)
- Google Search ad locations. We now say that Google Ads receives the map locations a business targets in its Google Search campaigns, including competitor places it picked. (October 3, 2026.)
- Deletions that finish later. We now say that if a deletion you start cannot finish right away, we keep a record of your request, finish the deletion afterwards and email you the report when it is done, covering what was deleted when the deletion finished; and that the note that you asked (your account ID, when you asked, and the language you used) is deleted together with your account. (PR for finishing interrupted account deletions, October 5, 2026.)
- The link you signed up from. We now describe that when you create an account from a link in one of our own posts, we keep that link's campaign tag (its utm values) to learn which of our posts bring sign-ups and paying subscribers, counted only as daily totals per post, without a cookie or other browser storage, for as long as your account exists. (PR for sign-up link attribution, October 7, 2026.)
- Connected platforms: LinkedIn, YouTube and how long we keep what they send. We now describe the LinkedIn connection: the two permissions we ask for, what we store and what we never read. For YouTube, we now say that OwnersPal uses YouTube API Services, link to the YouTube Terms of Service and the Google Privacy Policy, and explain how to remove our access on Google’s security settings page. We describe the statistics we read from connected Facebook Pages, Instagram accounts, LinkedIn Pages, YouTube channels and Google Business Profiles. We describe what we read from the Meta, Google Ads and TikTok ad accounts businesses connect, and the two extra Meta permissions we ask for when a Page is managed through Meta Business Manager. We also say what ending a connection deletes and how long we keep what each platform sends: comments and messages from Facebook and Instagram until the connection ends, and their daily statistics until you delete your account or ask us to; Google Business Profile review copies, statistics and value estimates for at most 30 days; LinkedIn Page statistics for at most a year; YouTube video IDs for at most 30 days; Meta and Google ad campaigns and their daily results until you delete your account; and the daily spend and results of TikTok ad campaigns for 13 months. A deletion request sent through Meta deletes the connection, the comments, messages and statistics we received from that account and the IDs Meta gave our posts there, and, for a request made in your Facebook settings, the results of your Meta ad campaigns, daily and in total, with their copies. We now also say that our decision records keep the amounts your ad campaigns had spent for up to 36 months, including one record of a month’s and a day’s Meta ad spend kept for your ad spending limit when a Meta request deletes the results, and that we store the ID Meta uses for you only to match a deletion request Meta sends us. (PR for connected-platform retention, October 8, 2026.)
- The Meta ID and removing our access at Facebook. We now say that we also use the ID Meta uses for you when you disconnect Facebook or Instagram or delete your account: we keep OwnersPal’s access at Facebook while another connection we can match to your Facebook login still uses it, including one in another OwnersPal account, and remove it otherwise; if we have not stored the ID yet, we ask Meta for it at that moment without keeping it. Section 8 now says that disconnecting Facebook, or an Instagram account connected through Facebook, removes our access at Facebook too, and that an Instagram account connected with Instagram login still has to be removed in your Instagram settings. (PR for revoking Facebook access on disconnect, October 10, 2026.)
- Meta deletion requests and our decision records. Section 8 now says that a deletion request made in your Facebook settings also deletes our decision records that hold anything we received from Meta or worked out from it, and that we no longer keep a record of your Meta ad spend for your ad spending limits: for the rest of that month, a campaign on another ad platform is launched or started, or keeps running, only if Meta can tell us how much your Meta ad account has spent. (PR for Meta deletion requests and decision records, October 14, 2026.)
- Anthropic as an AI model provider. We added Anthropic to the AI service providers we may share information with. Anthropic’s Claude models may answer the same text and image requests that OpenAI answers today, such as writing captions, reading your photos and planning your video. Until we move a feature, its description in this policy still names OpenAI; our subprocessors page lists both providers. (PR for Anthropic as an AI model provider, October 15, 2026.)
- Which AI provider answers each feature. The descriptions of AI-enhanced photos, website testimonials and website assistant questions now say that their AI requests are answered by OpenAI or Anthropic, whichever of the two we use at the time, instead of naming OpenAI alone, and the AI service providers named under “Use of AI Technologies” now include Anthropic. Website assistant questions are still screened by OpenAI’s moderation service, the monthly AI search visibility checks still use OpenAI, and styled photo versions are still made through fal.ai. (PR for naming both AI providers in each feature, October 15, 2026.)
- Previous versions of hosted websites. Section 8 now says that we keep up to 50 previous published versions of each website we host for a business, so the business can restore one, and that they are deleted together with the account. (PR for the website editor’s version history, October 16, 2026.)
- Translating the websites we host for businesses. The AI section now says that the text a business writes for its website, including the text, button labels and photo captions in sections it builds itself, is translated by OpenAI into the website’s other languages, which details are never sent, and how long the translations are kept. (PR for owner-built sections in the website editor, October 16, 2026.)
- Setup of business websites, email and Google listings. Section 1 now says that when a business uses our guided setup for its website, business email or Google listing, we store its setup progress, including its domain’s DNS and email providers, the DNS records we read from public DNS and whether its website answers, and that this is kept while the account exists and deleted with it. (PR for guided setup, October 16, 2026.)
- Business email setup. Section 1 now says that, for a business’s email setup, we store the email provider it chose, the mail servers (MX records) its domain uses, read from public DNS, and the public DNS values it copies from its email provider (the domain verification code, the DKIM public key, and Microsoft’s mail server name and DKIM host names), never passwords; and that when the business asks, we send a test email to an address at its own domain, which we use only to send that email: its setup progress keeps only when the last test email was sent and whether the business told us it arrived. (PR for the guided setup email step, October 18, 2026.)
- Depth maps no longer listed. The part of section 4 on Google Maps Platform no longer lists depth maps (pictures we used to make that guess how far away each part of a photo is) among the working copies we keep inside videos that were already made, because we no longer make them. (PR for removing depth estimation, October 20, 2026.)
- Accounts whose sign-up was never finished. Section 8 now says that an account that never confirms its user is 18 or older and authorized to manage the business’s marketing, and never agrees to our Terms of Service, this Privacy Policy and our Data Processing Agreement, is deleted with everything stored in it 30 days after it was created (for an older account, 30 days after the day we started asking), after one email 7 days before; that we keep the date of that email with the account; and that an account with an active or trial paid plan is not deleted this way. (PR for the consent screen, October 20, 2026.)
- Support requests and automatic problem reports. Section 1 now names the support requests you send us and the automatic problem reports your browser sends when something breaks on our side: only technical details (the kind of problem, its error code, the page address without record numbers, reference numbers, the app version, the time and a count), never anything you typed, form contents, screenshots or files. Section 8 now says they are deleted 180 days after the problem last happened or was last worked on (90 days for reports sent while signed out), and with your account. (PR for automatic problem reports, October 20, 2026.)
- Google listing setup. Section 1 now says that, for a business’s Google listing setup, we look the listing up through Google’s Places API to check that it can be found and shows the business’s website; that from this check we keep only the listing’s Google Place ID and our own note of whether the listing shows the business’s website and when we last compared them, and the Google Place ID of a search result that turned out not to be the business’s listing, with when we found this, so we do not look it up again for 29 days; and that its setup progress also includes whether it already had a Google listing or needed one, how it is verifying the listing with Google and when it told us it asked Google for a postcard. (PR for the guided setup Google listing step, October 23, 2026.)
- Two service providers removed. Section 4 no longer lists Postmark (a fallback email provider) or Runway (an AI video provider that was called directly). We no longer use either one, so no personal information is sent to them; Resend is our only email provider, and Fal remains the gateway for our AI video models. (PR for removing providers we no longer use, October 23, 2026.)
- Phone assistant. We now describe the optional phone assistant that answers calls to a business's phone assistant number with an AI (sections 1, 4, 6 and 8): before anything else, every caller the assistant answers hears, in English, that they have reached a virtual assistant and that the call may be recorded (normally "Hi, you've reached the virtual assistant for [business name]. This call may be recorded." and, if our service cannot confirm the call when the assistant picks up, "Hi, you've reached a virtual assistant. This call may be recorded.", after which the assistant says the line isn't available and ends the call; on such a call, Google's Gemini, reached through ElevenLabs, may read anything the caller says before the call ends, and we keep no transcript), and the business can add its own words only after that disclosure; no call audio is recorded; the call is carried by Twilio and processed live by ElevenLabs, with Google's Gemini language model, reached through ElevenLabs, writing the replies, and calls made while the assistant is off or cannot answer are handled by Twilio alone, which connects them to the business's transfer number or plays a fixed voice message saying the line is unavailable, with no AI listening and nothing sent to ElevenLabs or Google's Gemini; Twilio also keeps the business's transfer number in the settings of its phone assistant number, so that it can still connect calls when our service cannot be reached, and we ask Twilio to remove it from there when the business changes or clears it or deletes its account, and keep retrying until it is removed (until then, a call made while our service cannot be reached may still be connected to the old number); for a call the assistant answers, other than one our service could not confirm, we keep the caller's phone number, the call's time, length and outcome, and a transcript and a summary, from which we automatically remove card, bank and government ID numbers and medical terms that we detect (detection can miss some, and medical terms are detected in English only), and for any other call, including one our service could not confirm, we keep at most the caller's phone number and the call's time, length and outcome; this call history is deleted automatically after 90 days, and sooner if the business deletes the call, turns the phone assistant off or deletes its account; a booking or message the caller gives is delivered to the business as the caller gave it, with only the card numbers we detect removed, and kept like any other booking or message; and we ask ElevenLabs, which keeps a conversation for no more than 30 days, and Twilio, which may keep records that the law requires, to delete their copies of each call once it ends: normally right after the call, and within two days if we do not receive the call's end notice, and if that notice never reaches us and we also could not link the call to its ElevenLabs conversation when it started, we cannot tell ElevenLabs which conversation to delete, so only ElevenLabs' own 30-day limit removes it. For a call made while our service was down, we ask within about an hour of our service coming back; the log of a call made more than three days before then stays with Twilio under its own retention. Callers can mention health details, such as an allergy, or read out a card, bank or government ID number, and the statements that we do not process sensitive information now say so. The phone assistant takes no orders or payments, sends no text messages and makes no outgoing calls of its own; it only connects a caller to the business's transfer number, and Twilio connects a transfer only to that number. (PR for the phone assistant, October 24, 2026.)
- Google Search Console setup. Section 1 now says that when a business connects its own Google Search Console during setup, we use Google’s Search Console API and Site Verification API only to verify its website, add it to the business’s Search Console, submit its list of pages and check that the business is still its owner; that we store the access tokens, the website’s address, Google’s verification code for it (which the website shows in its page code) and the business’s permission level, and read none of its Search Console search data; that our use follows the Google API Services User Data Policy, including its Limited Use requirements; and that we delete this when the business disconnects Search Console, within 7 days (or 9 days if Google could not be reached for more than a day) when the connection ends in another way, and with the account. Section 14 now names both APIs. (PR for the guided setup Search Console step, October 25, 2026.)
- Social profiles setup. Section 1 now says that, for a business’s social media profiles setup (Facebook, Instagram and Threads), its setup progress also includes the social platforms it chose, the @name it picked for them, the @name from the link to each profile it already has, the profile text we drafted for it or that it edited or approved, how it was drafted, when it asked us for drafts, and what it told us it has done (the checks it made on its own public pages and the account-safety steps it ticked), and that we never store its passwords, two-factor codes or recovery codes. (PR for the guided setup Social profiles step, October 25, 2026.)
- Phone assistant disclosure and call records. The disclosure every caller the phone assistant answers hears first now says that they have reached an AI assistant and that the call may be recorded and shared with our service providers (normally "Hi, you've reached the AI assistant for [business name]. This call may be recorded and shared with our service providers." and, if our service cannot confirm the call when the assistant picks up, "Hi, you've reached an AI assistant. This call may be recorded and shared with our service providers."), and the assistant is instructed to say the same in the caller's language when the caller speaks another language it supports (sections 1 and 6). The record of each call's length that we keep for billing now also notes, for a call the assistant answers, which version of the disclosure was used, the call's language and whether the disclosure was heard (sections 1 and 8). If a caller asks the assistant not to keep a record of the call, we store no transcript or summary of it (sections 1 and 6). Section 6 now says that the assistant is instructed to tell a caller who mentions suicide or self-harm about 988 and, if a caller threatens the business, its staff or anyone, to end the call and leave the business an urgent message, which we tell the business about by email without the caller's words; section 1 says that booking notes in which we detect an allergy or a dietary need are marked for the business's staff to confirm. (PR for the AI assistant disclosure, October 25, 2026.)
- Phone assistant transfers and the message fallback. Whenever Twilio rings a business's transfer number for a call the assistant does not answer or for a call it transfers (other than a call made while our service cannot be reached), whoever picks up must press 1 to take the call, and that part of the call is not recorded and no AI hears it; and a call that came in while the assistant was already on as many calls as the business allows at once, and that no one at the transfer number takes, is answered by the assistant only to take a message and handled like any other call it answers (sections 1 and 6). Section 6 also now names the business's phone assistant number, not its transfer number, as the number whose calls Twilio alone handles while the assistant is off or cannot answer. (PR for call screening and the message fallback, October 25, 2026.)
- Phone minute packs and automatic top-up. Section 1 now describes the records we keep when you buy phone assistant minute packs or turn on automatic top-up (each purchase, the pack minutes added or taken back after a refund or dispute, how many pack minutes each call used, your automatic top-up choices, and the record of your agreement to automatic top-up with the time, your IP address and your browser's user agent), why we keep them, that Stripe processes these payments and we do not store your card details, that they are included in your data download, and the emails we send when 80% of the phone assistant's minutes are used, when they run out, when an automatic top-up payment fails and when automatic top-up turns off because the pack's price changed; section 8 says these records are deleted with your account. (PR for phone minute packs and automatic top-up, October 25, 2026.)
- Social profile text. Section 1 now says that when a business asks us to write the text for its social media profiles, we send its business name, the kind of business, its town, the About text it wrote, the @name it chose and whether it takes bookings to OpenAI or Anthropic, and screen the result with OpenAI’s moderation service; that we do not send its phone number, address, website or opening hours, or any detail that only Google supplied and it has not confirmed; that we never post the text for it; and, in the paragraph on setup, that the profile text we keep is the text we drafted for it or that it edited or approved (not only the text it approved), with how it was drafted and when it asked us for drafts. (PR for the guided setup social profile text, October 26, 2026.)
- One-click DNS setup. Section 1 now says that, if a business’s domain is with a DNS provider for which we have switched on automatic setup through the Domain Connect standard (only after the provider accepts our record templates), we read the domain’s public _domainconnect DNS record and send the domain name, and nothing else about the business, to that provider’s public Domain Connect service to ask whether it can add the website or email records; that if the business chooses “Set it up for me”, we send its browser to the provider’s own page with a link, signed by VIVE AI, Inc., that names the records to add, and the provider makes the changes only if the business approves them there; and that the provider acts for the business and is not one of our service providers, we never receive the business’s login at the provider, and we keep nothing from the provider’s answers. (PR for guided setup one-click DNS, October 26, 2026.)
- Social profile check results. Section 1 now says that, for a Facebook Page or Instagram account a business has connected, its setup progress also keeps the result of checking that profile (which items matched what was set up, never the profile’s contents), and that we delete these results when the business disconnects that platform, when Meta asks us to delete its data, and together with the account. (PR for the guided setup social profile check, October 26, 2026.)
- Two factual corrections. The free plan is now called by its current name, Watch (it was called Starter), and the website translation paragraph now says the eight other languages a business’s website offers (Vietnamese was added; it said seven). Nothing about what we collect or how we use it changed. (PR for search visibility, October 26, 2026.)
v1.0 — July 14, 2026. The first version recorded against a server-side record of agreement.
This Privacy Notice for VIVE AI, Inc. (doing business as OwnersPal ) (
- Visit our website
at https://ownerspal.app or any website of ours that links to this Privacy Notice
- Use
OwnersPal .OwnersPal is an AI marketing platform for small and local businesses. It generates short marketing videos from real business photos, auto-publishes to social channels (Facebook, Instagram, TikTok, YouTube, Google Business Profile), monitors and replies to customer reviews on Google and Yelp, manages ad campaigns across Google Ads, Google Local Services Ads, Microsoft Ads, Yelp, and Meta, captures and follows up on inbound leads, and reports cross-platform performance and ROI from a single dashboard.
- Engage with us in other related ways, including any marketing or events
Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. We are responsible for making decisions about how your personal information is processed. If you do not agree with our policies and practices, please do not use our Services.privacy@ownerspal.app .
SUMMARY OF KEY POINTS
This summary provides key points from our Privacy Notice, but you can find out more details about any of these topics by clicking the link following each key point or by using our table of contents below to find the section you are looking for.
What personal information do we process? When you visit, use, or navigate our Services, we may process personal information depending on how you interact with us and the Services, the choices you make, and the products and features you use. Learn more about personal information you disclose to us.
Do we process any sensitive personal information? Some of the information may be considered
Do we collect any information from third parties?
How do we process your information? We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We may also process your information for other purposes with your consent. We process your information only when we have a valid legal reason to do so. Learn more about how we process your information.
In what situations and with which
How do we keep your information safe? We have adequate
What are your rights? Depending on where you are located geographically, the applicable privacy law may mean you have certain rights regarding your personal information. Learn more about your privacy rights.
How do you exercise your rights? The easiest way to exercise your rights is by https://ownerspal.app/privacy-request
Want to learn more about what we do with any information we collect? Review the Privacy Notice in full.
TABLE OF CONTENTS
1. WHAT INFORMATION DO WE COLLECT?
Personal information you disclose to us
In Short: We collect personal information that you provide to us.We collect personal information that you voluntarily provide to us when you
Personal Information Provided by You. The personal information that we collect depends on the context of your interactions with us and the Services, the choices you make, and the products and features you use. The personal information we collect may include the following:
billing addresses
contact or authentication data
contact preferences
navigation preferences
passwords
business name and business details (industry, services offered, service area)
names
phone numbers
email addresses
mailing addresses
Sensitive Information.
Payment Data. If you are a business customer on the free Watch plan, we ask you to verify a card before your free video with a no-charge check through Stripe; we keep only a record that a card was verified and Stripe’s reference for that card, never the card number or security code. When you subscribe, Stripe’s checkout page also asks for your business address in a shipping-address field. Nothing is shipped: the address is used to calculate sales tax and lets checkout offer Google Pay. Stripe stores it with your billing details; we do not copy it into our own systems. If you pay with Apple Pay, Google Pay, Link, Amazon Pay or Cash App Pay, that provider also processes the payment under its own privacy notice. If you pay by bank debit (ACH), Stripe collects and verifies your bank account details, which can include connecting to your bank through Stripe Financial Connections; we do not store your bank details. We may collect data necessary to process your payment if you choose to make purchases, such as your payment instrument number, and the security code associated with your payment instrument. All payment data is handled and stored byStripe https://stripe.com/privacy
Phone Minute Packs and Automatic Top-Up. If you buy phone assistant minutes in packs or turn on automatic top-up, we keep a record of each purchase: the pack, its price, your plan, whether you bought it or automatic top-up did, its status (waiting for payment, paid, failed or expired, with the reason a payment failed), Stripe's references for the checkout page and for the payment, any amount refunded, and when it was made and paid. We also keep a record of the pack minutes added to your account and of any taken back after a refund or dispute, and each call's billing record notes how many pack minutes the call used. For automatic top-up we keep your choices (whether it is on, the pack and how many automatic purchases it may make in each billing period) and a link to the record of your agreement to it (see Agreement and Consent Records below). Stripe processes these payments; we do not store your card details. We use these records to add the minutes you pay for, to bill you for them and to answer your questions about a charge, which is part of performing our contract with you (see section 3). They are kept until your account is deleted and are deleted with it (see section 8), and they are included in the copy of your data you can download from your account settings (see section 11), except Stripe's reference for the checkout page. We also email you, in the language you chose for your account, when your phone assistant's calls have used 80% of the minutes it can use in a billing period and when those minutes run out, with a link to Phone settings; each of these two emails is sent at most once per billing period, except that we tell you again if you add minutes or turn automatic top-up on and the minutes run out again. If an automatic top-up payment fails, or automatic top-up turns off because your pack's price changed with your plan, we tell you by email and in the app. These emails contain no information about your callers.
Connected Social Accounts. When a business connects a Facebook Page or Instagram Business account, we also receive and store the text and author name of comments and direct messages sent to that account, which we surface in the business's unified inbox inside OwnersPal. So that we can match a deletion request Meta sends us (see section 8), we also store the ID Meta uses for the person who connected the account and which of our Meta apps they connected through. We also use this ID when you disconnect Facebook or Instagram or delete your OwnersPal account. One Facebook login can be behind several OwnersPal connections, including ones in another OwnersPal account. So that ending one does not cut off the others, we keep OwnersPal’s access at Facebook while another connection we can match to that login still uses it, and remove it otherwise. We match using the IDs we have stored; where an ID is missing, we count the other Facebook and Instagram connections made through Facebook in the same OwnersPal account as using that login, and a connection we cannot match does not keep the access. If we have not stored the ID for the connection you end, we ask Meta for it at that moment and do not keep it. We keep it after a disconnect, so that a later request still finds the information, and delete it when we handle such a request or when you delete your OwnersPal account.
Statistics From Connected Accounts. When a business connects a Facebook Page, an Instagram professional account, a LinkedIn Page, a YouTube channel or a Google Business Profile, we read the statistics that platform reports about the business’s own page, account, channel or profile. We store them as daily totals so the business can see how its marketing performs: for example views, reach, likes, comments, shares, saves and clicks, the subscribers a YouTube channel gained or lost, and for a Google Business Profile the calls, website visits and direction requests it received. These are counts; they do not identify the people who viewed or interacted. How long we keep them depends on the platform (see section 8).
Ad Accounts You Connect. When a business connects its own Meta, Google Ads or TikTok ad account, we list the Meta ad accounts or TikTok advertiser accounts it can manage so it can pick one (for Google Ads we use only the account it connects). For a connected Meta or Google Ads account we also read the conversion-tracking tags set up in it (the Meta Pixel ID, and the Google Ads conversion tracking ID and conversion action). We create, pause and resume only the campaigns the business approves in that account, and the platform bills the business directly, never us. We also read each campaign’s daily results (spend, impressions, clicks and conversions) and store them with the campaign, so the business can see its results and we can keep its campaigns within the spending limits it sets. Before a Meta campaign is launched or started again, we also ask Meta how much each Meta ad account involved has spent this month and today, in total (including campaigns run outside OwnersPal), only to check it against those limits; we do not store those amounts. We ask the same before a Google or TikTok campaign starts in a month in which a deletion request through Meta left no record of the Meta spend (see section 8). These are totals for the business’s own campaigns; they do not identify the people who saw or clicked an advert.
Instagram Accounts Managed Through Meta Business Manager. If your Facebook Page is managed through Meta Business Manager, Meta requires two more permissions before Instagram lets us post or read statistics for you: to read and to manage the ad accounts your Business Manager can reach. We ask for them only if Instagram refuses one of our requests for that reason, so that posting to your Instagram account and reading its statistics work. Meta grants them for your ad accounts too. We use them for Meta ads only when you choose to connect a Meta ad account in OwnersPal: we then list the ad accounts you can manage so you can pick one, and read the Meta Pixel set up in it (see “Ad Accounts You Connect” above). We create and start a Meta campaign only after you approve it. Once it runs, you can pause it, and we also pause it automatically, without asking, if it passes your daily or monthly ad spending limits, reaches the total budget you set for it, or its link stops opening your website. Until you start connecting a Meta ad account, we do not read, store or change your ads or ad accounts with them. We keep the list of permissions Meta says you granted until you reconnect again, disconnect or delete your account. When Instagram refuses one of our requests because a permission is missing and we ask you to reconnect, whether or not your Page is managed through Business Manager, we also keep a short note of why we asked (which reconnect is needed, and when and where the refusal happened), until you reconnect, disconnect or delete your account.
Photos Imported From Square. If a business connects its Square account, we ask Square only for read access to that business's item library (Square's ITEMS_READ permission) and store the access token Square gives us, encrypted. When the business chooses “Sync now”, we copy the photos from its Square item library into its OwnersPal media library, together with each photo's Square item name and identifiers and the business's Square merchant ID, and we add a photo to a menu item only when that item has no photo yet and its name matches the Square item name exactly. We do not copy images made with Square Photo Studio, and we never post anything to Square. When the business disconnects Square, or when we learn that the business removed our access there (as soon as Square notifies us, or at the latest the next time we contact Square), we delete every photo copied from Square, the Square photo identifiers we kept, any photoshoot versions made from those photos, and any menu photos that use them, and we end the connection. They are also deleted when the account is deleted.
All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal information.
Information automatically collected
In Short: Some information — such as your Internet Protocol (IP) address and/or browser and device characteristics — is collected automatically when you visit our Services.We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity (like your name or contact information) but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Services, and other technical information. This information is primarily needed to maintain the security and operation of our Services, and for our internal analytics and reporting purposes.
Like many businesses, we also collect information through cookies and similar technologies.
The information we collect includes:
- Log and Usage Data. Log and usage data is service-related, diagnostic, usage, and performance information our servers automatically collect when you access or use our Services and which we record in log files. Depending on how you interact with us, this log data may include your IP address, device information, browser type, and settings and information about your activity in the Services (such as the date/time stamps associated with your usage, pages and files viewed, searches, and other actions you take such as which features you use), device event information (such as system activity, error reports (sometimes called
"crash dumps" ), and hardware settings).
- Device Data. We collect device data such as information about your computer, phone, tablet, or other device you use to access the Services. Depending on the device used, this device data may include information such as your IP address (or proxy server), device and application identification numbers, location, browser type, hardware model, Internet service provider and/or mobile carrier, operating system, and system configuration information.
- Location Data. We collect location data such as information about your device's location, which can be either precise or imprecise. How much information we collect depends on the type and settings of the device you use to access the Services. For example, we may use GPS and other technologies to collect geolocation data that tells us your current location (based on your IP address). You can opt out of allowing us to collect this information either by refusing access to the information or by disabling your Location setting on your device. However, if you choose to opt out, you may not be able to use certain aspects of the Services.
- Campaign Attribution Data on Hosted Business Websites. When you visit a website that OwnersPal hosts for one of its business customers and accept marketing cookies there, the campaign identifiers that brought you to it (gclid, fbclid, utm values and the page you landed on) are stored with any booking or enquiry you then submit, so that business can measure its own campaigns; VIVE AI, Inc. processes this information on the business's behalf.
- The Link You Signed Up From. If you create an OwnersPal account after following a link in one of our own posts, we keep the campaign tag that link carried (its utm_source, utm_medium, utm_campaign and utm_content values) and when we recorded it, so we can learn which of our posts bring sign-ups and paying subscribers, counted only as daily totals per post. The tag travels in the link itself: we do not use a cookie or any other browser storage for it. We keep it for as long as your account exists and delete it when you delete your account, and it is included when you download a copy of your data.
- Value of a Won Lead. If you leave your contact details with a business that uses OwnersPal and later become its customer, that business can record what the sale was worth; the amount is kept with your details and is deleted along with them.
- AI-Enhanced Photos. If you are a business customer and run a Brand Photoshoot, photos from your own media library that the shoot considers are sent to one of our AI model providers, OpenAI or Anthropic, so a vision model can read each one. The read is saved with the photo in your account and records what the photo shows: the type of subject and where it sits, how many faces are in it (faces are counted only to keep them out of styled versions; the read does not identify anyone or create a face template), any words printed in the photo, such as on a sign, cup or card, and its exposure, color cast, sharpness and clutter. Text-only calls to the same provider then plan each shot from that record and your business details (name, type, brand colors and voice, words you asked us to avoid, menu item names). Every photo gets a real-background version made on our own servers by cropping and color adjustment only, with no generative AI model. For a styled version, the cropped photo and a text prompt (which quotes any printed words so they stay unchanged) are sent to our AI model provider fal.ai, which runs OpenAI’s GPT Image or, as a fallback, Google’s Nano Banana 2, to add generic set dressing and lighting around your real subject. For a product photo, fal.ai first cuts your real product out with a background-removal model (BiRefNet) so its own pixels can be placed onto a plain studio backdrop, then paints only that backdrop with OpenAI’s GPT Image or, as a fallback, Black Forest Labs’ FLUX Fill. A vision model from the same provider also compares each styled version with your real photo before it is offered to you. When our automated read detects a face, a person or a logo in a photo, or cannot read a photo with confidence, that photo only receives the real-background version. We store each result as an enhanced copy together with a record of how it was made (the original photo it came from, the steps and AI models used, whether the background was kept or generated, and the shot’s scene, lighting and mood tags), label styled copies as AI-generated, both in the image file’s metadata and with a visible “AI-generated scene” mark on the picture itself, and add a copy to your media library once you pick it. A copy that keeps its real background joins the photos your automatic videos, website, ads and cards can use. A styled copy (with a generated background) is shown in your media library with an AI-enhanced label and can be downloaded as that same labelled file, but it is never used for automatic videos, your website, your ads or cards, or sent to your Google Business Profile. The cut-outs and studio versions made by earlier shoots stay with the photoshoot: they are never added to your library, used for automatic videos, or sent to your Google Business Profile. When you pick or reject a result (and the reason you choose, if you give one), we keep that decision with the shoot and use your own earlier decisions to steer your later shoots; they are never combined with other businesses’ decisions, and no engagement data such as likes or clicks is used. You can delete enhanced copies at any time: delete a version from its photoshoot, or a styled copy from your media library. Deleting one removes the copy and its file from our storage for good; we keep your earlier decision to pick or reject it, which only steers your own later shoots. A saved copy that keeps its real background is deleted from your media library like your other photos: it goes to the trash, and 7 days later it is deleted together with its file.
- Privacy Requests on Hosted Business Websites. If you use "Your privacy choices" on a business website that OwnersPal hosts, the name, email address, request type and optional message you enter are sent to that business, which decides how to answer, and appear in its OwnersPal inbox. VIVE AI, Inc. keeps a record of the request as the business's service provider: its reference, type, message, a one-way fingerprint (salted hash) of your email address and when it was received, but not your name or email address. After 24 months we delete the message and the fingerprint. To limit abuse, submissions are rate-limited by network address, which is held only for the length of the limit window (at most one day). To have the record erased sooner, email privacy@ownerspal.app with your reference.
- Do Not Sell or Share My Personal Information. OwnersPal does not sell your personal information or share it for cross-context behavioral advertising, so there is nothing to opt out of. OwnersPal's own website and app set no marketing cookies, and their cookie banner offers essential and analytics cookies only. The "Do Not Sell or Share My Personal Information" link in OwnersPal's footer says so and links to where you can ask for a copy of your data or for its deletion. We honor Global Privacy Control: while your browser sends the signal, analytics cookies stay off on OwnersPal's own website and app, taking precedence over any earlier cookie choice you made in this browser.
- Conversion Tracking & Ad Measurement on Hosted Business Websites. If a business that OwnersPal hosts a website for has connected its own Meta or Google Ads account, and you accept marketing cookies on that website while your browser sends no Global Privacy Control signal, that business's own advertising tags load on its pages. Such a website asks for that choice with its own cookie banner, shown only when the business has connected a Meta or Google Ads account with conversion tracking (a hosted business website without one sets no marketing cookies and shows no banner) and never while your browser sends a Global Privacy Control signal, which is treated as a rejection, even if you accepted earlier. The banner offers Accept all and Reject all with equal prominence and a Settings view, and you can change your choice at any time from the website's "Cookie settings" link. The choice is stored only in your browser (op_site_consent_v1) for that website for 12 months, after which you are asked again; OwnersPal does not keep a record of that choice on its servers, because for that website the business decides how its visitors' data is used. A business website can be reachable at more than one address (for example its ownerspal.app address, its own domain name, and that domain with "www." in front); these tags, like the op_attr cookie, run only at its main address (its own domain name without "www." when it has one, otherwise its ownerspal.app address), so the marketing choice you make there is the one that applies to the whole website, and at its other addresses nothing loads and no click identifier is recorded. Its Google Ads tag stores its own cookies (names starting with _gcl_, such as _gcl_aw, _gcl_au and _gcl_gs) on that address only, plus a _gcl_ls entry in your browser's local storage. Its Meta Pixel loads only when that main address is the business's own domain name itself (such as example.com, not an ownerspal.app address or an address under another domain such as book.example.com), because the Pixel places its _fbp and _fbc cookies on the highest-level domain your browser allows, which anywhere else would be shared with other websites; the Pixel runs with automatic event detection switched off. These tags send Meta and/or Google your IP address, browser and device information, the page you viewed and the page that referred you, and their cookie identifiers. Their requests go to Meta's and Google's own servers (such as facebook.com, google.com, googleadservices.com, googletagmanager.com and doubleclick.net), so your browser also sends those companies any cookies they have already set on their own domains, and they may set or update such cookies (Google, for example, names IDE and NID); OwnersPal cannot read or delete those cookies, which are governed by Meta's and Google's own cookie policies and can be cleared in your browser's settings. If the business has turned on Meta's automatic advanced matching or Google's enhanced conversions in its own ad account, a tag may also send a hash of contact details you enter into the website's forms. If you then make a booking there after arriving from one of its adverts, once a day we send Meta and/or Google the advert click identifier from your visit together with a one-way cryptographic hash (SHA-256) of the email address or phone number you gave that business (never the email address or phone number itself), so that business can measure which of its campaigns led to a real booking. Google receives that hash only when the business's Google Ads account reports that it has accepted Google's customer data terms; otherwise Google receives the click identifier alone. The hash is created at the moment of sending and is never stored by us; a booking is only sent within 30 days of being made, and deleting the booking stops it from being sent. Only a choice you make on that business's own website counts: accepting marketing cookies on OwnersPal's own website never loads these tags or records the click identifier on a business's website. So that it only ever deletes identifiers these tags created, the page keeps a local-storage entry (op_conversion_tags_v1 followed by the website's name) listing which of those identifiers were already in your browser before the tags first loaded there; it holds identifier names only. Each tag starts with its consent withheld (the Meta Pixel with its consent "revoke" command, the Google Ads tag with its ad_storage, analytics_storage, ad_user_data and ad_personalization consent "denied") and is switched to granted, and sends its page view, only once its script has finished loading and your marketing consent for that website still stands at that moment. If you withdraw marketing consent on that website while one of its pages is open, the page immediately sends the Meta Pixel its consent "revoke" command, which stops it sending events, sets the Google Ads tag's ad_storage, analytics_storage, ad_user_data and ad_personalization consent to "denied", under which Google's tag stops reading and writing its cookies, deletes the _fbp, _fbc and _gcl_ cookies and the _gcl_ local-storage entries those tags created at that address (never an identifier that was already in your browser before the tags first loaded there, and never a cookie another website set on a higher-level domain), keeps that list so that any of those identifiers a tag still writes afterwards can be deleted too, and deletes the op_attr cookie that holds the click identifier; the same happens when the page next detects a Global Privacy Control signal from your browser. Whenever you open any page of that website without marketing consent for it at its main address (including on a later visit after withdrawing, while your browser sends Global Privacy Control, after the business has disconnected its ad account, or at one of the website's other addresses), the page deletes whatever of those identifiers the tags created there on an earlier visit or page (including any a tag wrote after you withdrew consent), then deletes that list, and deletes op_attr. A booking or enquiry you make after withdrawing consent, or while your browser sends Global Privacy Control, carries no click identifier and is never sent to Meta or Google; a booking made before you withdrew consent can still be sent unless it is deleted. Neither tag loads on later visits unless you accept marketing cookies on that website again. VIVE AI, Inc. processes this information on the business's behalf.
Other information we process
Depending on the features you or a business use, we also process the following information:
- Agreement and Consent Records. When you create an account, we record, for each legal document you agree to (our Terms of Service, this Privacy Notice and our Data Processing Addendum), the version you agreed to, the exact statement you agreed to, the time, your IP address, your browser's user agent and how you signed in. When you subscribe to a paid plan, we also record your agreement to its automatic renewal: the plan, the price, the exact renewal terms shown to you, the time, your IP address and your browser's user agent. When you turn on automatic top-up for the phone assistant, or change its pack or the number of automatic purchases it may make, we record your agreement the same way: the pack's price, the exact words shown to you (which name the pack, its price, when you will be charged, how many times and how much at most in each billing period, and how to turn it off), their version, the time, your IP address and your browser's user agent. When you approve an ad campaign to spend from your own Meta, Google or TikTok ad account, we record the campaign, the ad platform, the budget the platform will receive, the budgets you entered, whether you chose our targeting or the platform's own optimisation, your ad spending limits at that moment, the exact statement you approved and its version, the time, your IP address and your browser's user agent. When you add photos through the “Where did these photos come from?” question in your media library, we record the answer you chose, the exact statement you confirmed and its version, how many photos it covered, the time, your IP address and your browser's user agent, and we link each of those photos to that record. When you confirm “This is my own photo” for a photo we had kept out of your videos, posts and website because it looked like a copy of a photoshoot version made from a Google Maps photo, we record the same details for that photo (the exact statement you confirmed and its version, the time, your IP address and your browser's user agent) together with which photo it was (its identifier and a fingerprint of the image, kept even if you later delete the photo), and note that record on the photo. We keep these records so we can show what you agreed to, and they are deleted together with your account.
- Recommendation and Decision Records. OwnersPal keeps a record of the recommendations it makes for your business, your decision on each, and the results afterwards, as counts and totals. These decision records hold no customer names, emails, phone numbers or review text, are kept for up to 36 months, and are deleted with your account.
- Marketing Opt-Out Records. If you unsubscribe from a marketing email that a business sends through OwnersPal (such as a birthday, holiday or review-request email), we keep your email address, the business you unsubscribed from and the time on a suppression list that is checked before every such email, so that business does not email you again even if it later adds your address again. If you reply STOP to a review-request text message sent from our shared sending number, we keep your phone number, the time and how you opted out on a suppression list that is checked before every text message sent from that number, for every business; replying START or UNSTOP removes it.
- Cookie Choice Records. When you accept or reject cookies, or save your cookie preferences, on OwnersPal's own website and app (not on the websites we host for businesses), we store a record of that choice on our server: a random receipt id that your browser keeps with your cookie preferences, the categories you chose, the version of our cookie notice, how you made the choice and the time. The record contains no IP address and no browser details, and nothing is recorded when your choice comes from a Global Privacy Control signal.
- Diagnostic Screenshots in Problem Reports. If you report a problem (for example, a video that failed) and agree, in a prompt shown before anything is captured, to attach diagnostic details, we store a screenshot of the page you were viewing together with a short summary of recent page activity (the paths of recent requests, how long they took and their status, and up to the last 20 browser console messages). The screenshot can show personal information that was visible on the screen. If you decline, nothing extra is attached. The screenshot is used only to diagnose the problem you reported.
- Support Tickets and Automatic Problem Reports. When you contact our support (for example with the Feedback or Help button), we keep what you send us, our replies and the status of your request so we can help you. When something in OwnersPal breaks because of a fault on our side (for example, a page stops working or our server returns an error), your browser sends us an automatic problem report, without you pressing anything, so we can fix the fault and tell you when it is fixed. An automatic problem report contains only technical details: the kind of problem and its error code, the address of the page with any record numbers removed, the part of the app it happened in, reference numbers for the failed request and for the matching entry in our error-tracking service, the app version, the time, and how many times it happened. It never contains anything you typed, the contents of forms, screenshots or files. If you are signed in, the report is linked to your account and shows under Help in your settings, where our reply appears; if you are signed out, it is stored without any account. Our team is told about new problems by email or text message, with the technical details only, never your name, email address or business name. We use these reports only to find and fix faults in OwnersPal.
- Aggregate Website Statistics. Websites that OwnersPal hosts for businesses count page views and button taps per day, together with a coarse traffic source (a referring domain such as google.com, or "direct"). These counters use no cookies and no device identifiers, keep no IP address and cannot be linked to you.
- Website Testimonials. If a business imports the testimonials published on its own website, we store only the text and star rating of each testimonial (the text is extracted with the help of OpenAI or Anthropic). The customer's name is not stored, and the testimonial is shown as coming from a "Customer".
- Reviews Shown in Videos. If a business connects its Google Business Profile, we keep a copy of its Google reviews (the star rating, the review text exactly as written and the reviewer's name) so that its videos can show them. Only a shortened name, such as "Jane D.", is ever shown; the full name is kept internally only to avoid duplicates. A review that is no longer on Google stops being shown. Each copy is kept for at most 30 days after we last received it from Google, and all of them are deleted when the business disconnects its Google Business Profile (see section 8). A video already made with a review keeps showing it until the business deletes that video or its OwnersPal account.
- Voice Hooks in Videos. If a business turns on voice hooks, a short spoken opening line for its videos is generated from its own business details (such as its name, opening hours and call to action) with a preset synthetic voice from ElevenLabs, provided through fal.ai. No voice is cloned and no customer information is sent.
- Website Assistant Questions. If a business turns on the assistant on the website OwnersPal hosts for it, a question you type into the assistant is screened by OpenAI's moderation service and sent, together with that business's public website information, to OpenAI or Anthropic to generate an answer. We do not store or log your questions or the answers; the conversation stays only in your browser tab. If you choose to send your question to the business, the question and the email address or phone number you give are saved as an enquiry to that business, which VIVE AI, Inc. processes on the business's behalf.
- Phone Assistant Calls. If a business turns on the optional phone assistant, an AI answers calls made to the phone number we provide for that business. Before anything else, every caller the assistant answers hears, in English, that they have reached an AI assistant and that the call may be recorded and shared with our service providers. Normally they hear: "Hi, you've reached the AI assistant for [business name]. This call may be recorded and shared with our service providers." If the assistant picks up but our service cannot confirm the call, it says "Hi, you've reached an AI assistant. This call may be recorded and shared with our service providers.", tells the caller the line isn't available and ends the call. Google's Gemini, reached through ElevenLabs, may read anything the caller says before the call ends, and we keep no transcript of such a call. The business can add its own words only after that disclosure and cannot change or remove it. We do not record the audio of the call. For a call the assistant answers, other than one our service could not confirm, we keep, for the business, the caller's phone number (unless the caller withholds it), the call's time, length and outcome, a written transcript and a short summary and, if the caller books or leaves a message, the details they give and, for a booking, their spoken agreement to the business's booking terms. Before we store a transcript or summary, we automatically remove card, bank and government ID numbers and medical terms that we detect; detection can miss some, and medical terms are detected in English only. Messages and booking details reach the business as the caller gave them, with only the card numbers we detect removed, because the business may need them (for example, a note about an allergy). Calls made while the phone assistant is off or cannot answer are handled by Twilio alone: Twilio connects the caller to the business's transfer number if it has set one, and otherwise, or if no one answers, plays a fixed voice message saying the line is unavailable. No AI listens to these calls, and neither ElevenLabs nor Google's Gemini receives them; for those calls we keep at most the caller's phone number (unless the caller withholds it) and the call's time, length and outcome, with no transcript. Whenever Twilio rings the business's transfer number for a call the assistant does not answer or for a call it transfers (other than a call made while our service cannot be reached), whoever picks up there first hears a fixed voice message from Twilio and is connected to the caller only after pressing 1; that part of the call is not recorded and no AI hears it. If a call came in while the assistant was already on as many calls as the business allows at once and no one at the transfer number takes it, the assistant answers it only to take a message (see section 6), and we keep the same information about it as for any other call the assistant answers. This call history is deleted automatically after 90 days, and sooner if the business deletes the call, turns the phone assistant off or deletes its account (see section 8). A booking or message taken on a call is delivered to the business and kept like any other booking or message it receives, until the business deletes it or its account. Booking notes in which we detect an allergy or a dietary need are marked for the business's staff to confirm. For each call that reaches the assistant, we also keep a record of the call's length for billing, which contains no caller information and is deleted together with the business's account; for a call the assistant answers, other than one our service could not confirm, that record also notes which version of the opening disclosure was used, the call's language and whether the disclosure was heard, which we check against the call's transcript before anything is removed from it, and the record of any other call notes no version and does not mark the disclosure as heard. If a caller asks the assistant not to keep a record of the call, the assistant is instructed to tell them it won't be kept and to note the request; we then store no transcript or summary of the call, but we still keep the caller's phone number and the call's time, length and outcome in the call history, any booking or message taken on the call and the call's billing record are kept as usual, and we ask ElevenLabs and Twilio to delete their copies as for every call. VIVE AI, Inc. processes this information on the business's behalf. The phone assistant takes no orders or payments, sends no text messages and makes no outgoing calls of its own; it only connects a caller to the business's transfer number.
- AI Search Visibility Checks. For businesses on plans that include it, once a month we send the business's own category, city and name to OpenAI as part of everyday search questions, and store each question, whether the business was mentioned in the answer and the names of any other businesses the answer named. No customer information is used, and these records are deleted together with the business's account.
- Social Profile Text. If a business asks us to write the text for its Facebook, Instagram or Threads profiles, we send its business name, the kind of business, its town, the About text it wrote, the @name it chose and whether it takes bookings to OpenAI or Anthropic, whichever of the two we use at the time, to write the text, and the text that comes back is screened by OpenAI’s moderation service. We do not send the business’s phone number, address, website or opening hours, or any detail that only Google supplied and the business has not confirmed. We do not post the text for the business; we keep the text we drafted for it or that it edited or approved, how it was drafted and when it asked us for drafts (see the paragraph on setup below).
- Service Area on Hosted Business Websites. If a business sets a service location and a service radius, that radius is published in the structured data of the website OwnersPal hosts for it, so that search engines can show the area it serves.
- Website, Email, Google Listing and Social Profiles Setup. If a business uses OwnersPal's guided setup for its website, business email or Google listing, we store its setup progress, including which setup steps are done, its domain's DNS and email providers, the domain's DNS records (which we read from public DNS) and whether its website answers when we check it. For business email, its setup progress also includes the email provider it chose, the mail servers (MX records) its domain uses, which we read from public DNS, and the values it copies from its email provider and pastes into OwnersPal: the domain verification code, the DKIM public key, and Microsoft's mail server name and DKIM host names. These are values meant for public DNS, never passwords. If the business asks, we send a test email to an address at its own domain through our transactional email providers; we use that address only to send that email and do not add it to the business's setup progress, which keeps only when the last test email was sent and whether the business told us it arrived. If the business’s domain is with a DNS provider for which we have switched on automatic setup through the Domain Connect standard (we do this for a provider only after it accepts our record templates), then while the website or email step still has DNS records to add, we read the domain’s public _domainconnect DNS record and ask that provider’s public Domain Connect service whether it can add those records automatically; these requests carry the domain name and no other information about the business. If the business then chooses “Set it up for me”, we send its browser to that provider’s own page with a link that names the domain, the records to add (the same public DNS records the step shows the business to copy by hand) and the OwnersPal page to return to, signed by VIVE AI, Inc. so that the provider can tell the link comes from OwnersPal. The provider shows the business the changes, makes them only if the business approves them there and then sends the business back to OwnersPal; if the business approved the changes, we then check the domain’s DNS records again. The DNS provider acts for the business and is not one of our service providers: we never receive or keep the business’s login at the provider, and we keep nothing from the _domainconnect record or from the provider’s answers. For its Google listing, we look the listing up on Google Maps through Google's Places API, using the listing's Google Place ID if we have one or else a search for the business's name and address or location, to check that the listing can be found and shows the business's website. From this check we keep only the listing's Google Place ID and our own note of whether the listing shows the business's website and when we last compared them, and, if a search finds a place that turns out not to be the business's listing, that place's Google Place ID and when we found this, so we do not look it up again for 29 days; nothing else Google returns to it is kept. Its setup progress also includes whether it already had a Google listing or needed one, how it is verifying the listing with Google (by postcard, phone, email, video or instantly) and, if it tells us it asked Google for a postcard, when it told us. If the business also connects its own Google Search Console during setup (“Allow with Google”), we use Google’s Search Console API and Site Verification API, with the business’s permission, only to verify its website with Google, add the website to the business’s Search Console, submit the website’s list of pages (its sitemap) and check that the business is still listed as the website’s owner. For this we store the access tokens Google gives us, the website’s address as we register it with Google, the verification code Google issues for that address (which the business’s website then shows in its page code, so that Google can confirm the business owns it) and the business’s permission level for the website in Search Console. We do not read any of the business’s Search Console search data, such as its searches, clicks or impressions. Our use of this information adheres to the Google API Services User Data Policy, including its Limited Use requirements: we use it for nothing else, we do not transfer it to anyone except as needed to provide this feature, and we do not sell it. When the business disconnects Search Console, we ask Google to end our access and delete the tokens, the website’s address, the verification code and the permission level right away; if the connection ends in another way, for example because it expires or the business removes OwnersPal’s access in its Google account, we delete them within 7 days, or within 9 days if it ends because Google could not be reached for more than a day; and we delete them together with the account. Once the verification code is deleted, the business’s website no longer shows it, and Google may stop listing the business as the website’s owner until it connects again. If a business uses the guided setup for its social media profiles (Facebook, Instagram and Threads), its setup progress also includes the social platforms it chose, the @name it picked for them, the @name from the link to each profile it already has, the profile text we drafted for it or that it edited or approved, how it was drafted, when it asked us for drafts, and what it told us it has done: the checks it made on its own public pages and the account-safety steps it ticked. For a Facebook Page or Instagram account the business has connected, its setup progress also keeps the result of checking that profile (which items matched what was set up, never the profile’s contents); we delete these results when the business disconnects that platform, when Meta asks us to delete its data, and together with the account. We never store its passwords, two-factor codes or recovery codes. We use this to guide the business through setup and to tell it if something stops working; we keep it while the account exists and delete it together with the account.
Connected AI assistants
If you connect OwnersPal to an AI assistant you choose, such as Claude, ChatGPT or another assistant that supports the Model Context Protocol (MCP) standard, that assistant can read information about your own business from your OwnersPal account. It can only read: no connection can create videos, spend money, post anything or change your business information, content or settings. The assistant can read only what the permissions you approved on the authorization screen allow, and only when you ask it to, or when it asks while acting for you in your conversation with it. When it asks for your website findability score, OwnersPal may check your website again to bring that score up to date.
The permissions you can approve are:
- “See your business name, website, address and website findability score”
- “See your dashboard, health score, monthly numbers and review counts (never individual reviews or reviewer names)”
- “See your video library and captions”
- “See your ad campaigns, budgets and results”
A connection never shares individual reviews or reviewer names; leads, bookings, customer messages or any other information about an individual customer of yours; your passwords or the access tokens of accounts you have connected to OwnersPal; or your video files or links to where they are stored.
OwnersPal does not send your information to the assistant’s provider on its own initiative: the assistant contacts OwnersPal using the access you authorized, and we answer only within the permissions you approved. Once information reaches the assistant, the assistant provider’s own terms and privacy policy govern it, and the provider may process it outside the European Economic Area, the United Kingdom or Switzerland under those terms.
When you connect an assistant, OwnersPal may fetch that assistant’s public registration document (and, for some well-known assistants, its logo) from the web address the assistant supplies, so that we can show you which application is asking for access. That request carries none of your data.
You can disconnect an assistant at any time in Settings › AI assistants by choosing Revoke, which stops its access immediately. Removing OwnersPal inside the assistant ends the connection only if that assistant tells OwnersPal, and not every assistant does; to be sure a connection has ended, revoke it in Settings › AI assistants. A connection also ends on its own 90 days after you approved it; the assistant then has to ask you to approve it again.
For each assistant you connect, we keep a connection record: which assistant it is, which permissions you approved, and when it was connected, last used and disconnected. We keep it for 180 days after the connection ends (when it is revoked, or when it expires 90 days after you approved it), and then delete it. We also keep a usage record of each request the assistant makes: which OwnersPal tool it used, when, which assistant made the request, whether it succeeded and how long it took. Usage records never contain what the assistant asked or what we answered, and are kept for up to 180 days. We keep these records to show you your connections, to keep a record of what you authorized and to investigate misuse. Connection and usage records are deleted when you delete your OwnersPal account. Answers already delivered to an assistant stay in that assistant’s history; to delete them, use that assistant’s own tools.
If you are in the EU or the UK, we share this information with the assistant because you instruct us to, as part of providing the Services under our contract with you (Article 6(1)(b) GDPR). Review counts and ratings are statistics about your own customers’ reviews; for those, we act as your processor on your documented instruction under our Data Processing Addendum.
Google API
Our use of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.YouTube
If a business connects a YouTube channel, OwnersPal uses YouTube API Services. Your use of YouTube through OwnersPal is also subject to the YouTube Terms of Service, and Google’s handling of your information is described in the Google Privacy Policy.
With the permissions you approve on Google’s consent screen, OwnersPal uploads the videos you approve to your channel, marked on YouTube as containing altered or synthetic content. It also reads your channel’s statistics from YouTube Analytics (such as views, likes, comments, shares and subscribers gained or lost). We store the access Google gives us (encrypted), the ID YouTube gives each video we upload, YouTube’s error message when an upload fails (kept with our record of that post), and daily totals of your channel’s statistics. We also read your channel’s name to show you which channel is connected, without storing it. We do not read or store who watched or commented. We do not sell YouTube data, use it for advertising or share it, except as needed to provide these features.
You can disconnect YouTube at any time on the Connections page in OwnersPal. You can also remove OwnersPal’s access to your Google account at any time on Google’s security settings page at https://security.google.com/settings/security/permissions. Section 8 says how long we keep YouTube information and when we delete it.
If a business connects LinkedIn, OwnersPal asks LinkedIn for two permissions: to publish posts as a LinkedIn Page you administer, and to manage the Pages you administer. We use the second only to find which Pages you administer and to read the statistics LinkedIn reports for them; we never change a Page’s settings or administrators. We receive and store: the access LinkedIn gives us (encrypted) and when it expires; the ID of the Page you choose (we show you the names of the Pages you administer so you can choose one, but we do not store them); the ID LinkedIn gives each post we publish for you; and daily totals of your Page’s statistics (impressions, likes, comments, shares and clicks).
We publish only the posts you approve, as your Page. We do not read or store LinkedIn members’ profiles, posts, comments or messages, and we do not sell LinkedIn data or use it for advertising. The posts you publish are sent to LinkedIn, which handles them under its own terms and privacy policy.
You can disconnect LinkedIn at any time on the Connections page in OwnersPal; we then revoke our access at LinkedIn. You can also remove OwnersPal from the services you have permitted in your LinkedIn account settings, which stops our access. Section 8 says how long we keep LinkedIn information and when we delete it.
Information collected from other sources
In Short: We may collect limited data from public databases, marketing partners,In order to enhance our ability to provide relevant marketing, offers, and services to you and update our records, we may obtain information about you from other sources, such as public databases, joint marketing partners, affiliate programs, data providers,
2. HOW DO WE PROCESS YOUR INFORMATION?
In Short: We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law.We process your personal information for a variety of reasons, depending on how you interact with our Services, including:
- To facilitate account creation and authentication and otherwise manage user accounts. We may process your information so you can create and log in to your account, as well as keep your account in working order.
- To save or protect an individual's vital interest. We may process your information when necessary to save or protect an individual’s vital interest, such as to prevent harm.
3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR INFORMATION?
In Short: We only process your personal information when we believe it is necessary and we have a valid legal reason (i.e.If you are located in the EU or UK, this section applies to you.
The General Data Protection Regulation (GDPR) and UK GDPR require us to explain the valid legal bases we rely on in order to process your personal information. As such, we may rely on the following legal bases to process your personal information:
- Consent. We may process your information if you have given us permission (i.e.
, consent) to use your personal information for a specific purpose. You can withdraw your consent at any time. Learn more about withdrawing your consent.
- Performance of a Contract. We may process your personal information when it is necessary to perform our contract with you, such as our Terms of Service, including to provide the Services you use and to act on your instructions, or to take steps you ask us to take before entering into a contract with you.
- Legitimate Interests. We may process your information when it is reasonably necessary for our legitimate business interests and those interests are not outweighed by your interests and fundamental rights and freedoms. For example, we may process your personal information to:
- keep our Services and your account secure, and detect, investigate and prevent fraud and abuse;
- find, diagnose and fix errors and other problems in our Services; and
- run internal analytics and reporting on how our Services are used, so that we can operate and improve them.
- Legal Obligations. We may process your information where we believe it is necessary for compliance with our legal obligations, such as to cooperate with a law enforcement body or regulatory agency, exercise or defend our legal rights, or disclose your information as evidence in litigation in which we are involved.
- Vital Interests. We may process your information where we believe it is necessary to protect your vital interests or the vital interests of a third party, such as situations involving potential threats to the safety of any person.
If you are located in Canada, this section applies to you.
We may process your information if you have given us specific permission (i.e.
In some exceptional cases, we may be legally permitted under applicable law to process your information without your consent, including, for example:
- If collection is clearly in the interests of an individual and consent cannot be obtained in a timely way
- For investigations and fraud detection and prevention
- For business transactions provided certain conditions are met
- If it is contained in a witness statement and the collection is necessary to assess, process, or settle an insurance claim
- For identifying injured, ill, or deceased persons and communicating with next of kin
- If we have reasonable grounds to believe an individual has been, is, or may be victim of financial abuse
- If it is reasonable to expect collection and use with consent would compromise the availability or the accuracy of the information and the collection is reasonable for purposes related to investigating a breach of an agreement or a contravention of the laws of Canada or a province
- If disclosure is required to comply with a subpoena, warrant, court order, or rules of the court relating to the production of records
- If it was produced by an individual in the course of their employment, business, or profession and the collection is consistent with the purposes for which the information was produced
- If the collection is solely for journalistic, artistic, or literary purposes
- If the information is publicly available and is specified by the regulations
- We may disclose de-identified information for approved research or statistics projects, subject to ethics oversight and confidentiality commitments
Vendors, Consultants, and Other Third-Party Service Providers. We may share your data with third-party vendors, service providers, contractors, or agents (
The
- AI Service Providers
- Allow Users to Connect to Their Third-Party Accounts
- Cloud Computing Services
- Functionality and Infrastructure
Optimization
- Invoice and Billing
sms delivery and voice calls (phone assistant)
Transactional email delivery
We
- Business Transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
- AI Assistants You Connect. If you connect OwnersPal to an AI assistant, such as Claude or ChatGPT, that assistant receives the information that the permissions you approved allow, when it asks for it. Its provider receives that information on your instruction, not as our service provider, and handles it under its own terms and privacy policy. Learn more in Connected AI assistants.
- When we use Google Maps Platform APIs. When a business links its Google Maps listing, we use Google’s Places API to look up that listing’s public details: business name, address, phone number, website, opening hours, rating, price level, amenities, whether it is open, Google’s description of the business (its editorial summary), the business’s category and types, its location on the map (latitude and longitude), its Google Place ID, and references to the listing’s photos with the names of the people who took them. We keep the Google Place ID for as long as the business has an account. We keep the other details for at most 30 days after we last looked them up, unless the business confirms or edits them in OwnersPal, which makes them the business’s own information; after 30 days, details that were not confirmed are deleted, and so are map coordinates that came from Google. The same applies to the copies of these details that fill in the business’s profile and website: the name, address, location, type of business, phone number and website filled in from the listing (including the name, location and type of business filled in when the business picks its listing during sign-up), the map pin and address picked from a Google search when setting an ad area, and the translations of Google’s description made for the business’s website; and to the copies we make from them: the map pin and name in the business’s ad-targeting plan and saved presets, the targeting suggestions we make from its listing, the phone number and website in our checks of its listings, the questions we ask AI assistants in its AI search visibility check, and our record of which details a piece of generated content used. A map pin the business moves itself is the business’s own and is kept, and so is a targeting suggestion the business accepts (such as a price range), which becomes its own choice. Details the business has not confirmed are not sent to its other listings, such as its Facebook Page. When a business picks competitor places from a Google search to target its ads, we keep only their Google Place IDs: their names and addresses are looked up from Google each time they are shown, and their map locations when a campaign on Meta (Facebook and Instagram) is launched. Some copies are not deleted with the details. Content the business makes with OwnersPal while a detail is in its profile keeps it — for example a video’s end card, a card, a post and its caption, a monthly report or marketing text — and so do our records of how that content was made. The web address of the business’s OwnersPal website, which we make from its business name, stays until the business changes it, and its earlier addresses keep working. Copies sent to other services stay with them under their own terms: Meta (Facebook and Instagram) receives the map locations a business targets in the campaigns it runs there through OwnersPal, with their labels, which can include a map pin or business name that came from Google and the map locations of competitor places it picked; TikTok receives only those labels, to find the areas to target; Google Ads receives the map locations a business targets in the Google Search campaigns it runs there through OwnersPal, as points without their labels, which can include a map pin that came from Google and the map locations of competitor places it picked; and the AI providers that write or check the business’s content receive the details they work from. We no longer save photos from Google Maps or use them in new videos, photoshoots, ads, cards or posts. The links to Google Maps photos that we had saved were deleted, including in our records of where a business’s details came from and in brand kit logos, except the photo link on posts that were already published. We still keep the copies inside videos and cards that were already made, including working copies made while producing those videos (cropped frames, enhanced copies, crops of a face used to keep a person looking the same across shots, and copies uploaded to a video provider), and photoshoot versions already made from a Google Maps photo, which only that business can see and which can’t be used for anything new. When a business’s website hosted by OwnersPal has fewer than two photos of its own, it may show that listing’s photos from Google Maps, credited to the people who took them and to Google Maps. Your browser then loads those photos directly from Google, so Google receives your IP address and information about your browser, as described in the Google Privacy Policy. Maps on those websites are embedded Google maps. If you choose to use your device’s location when setting an ad area in OwnersPal, your browser shares it with us and we store the point you choose with your business profile until you change it. The Google Maps Platform APIs that we use store and access cookies and other information on your devices. If you are a user currently in the European Economic Area (EU countries, Iceland, Liechtenstein, and Norway) or the United Kingdom, please take a look at our Cookie Notice.
We may use cookies and similar tracking technologies (like web beacons and pixels) to gather information when you interact with our Services. Some online tracking technologies help us maintain the security of our Services
We also permit third parties and service providers to use online tracking technologies on our Services for analytics and advertising, including to help manage and display advertisements, to tailor advertisements to your interests, or to send abandoned shopping cart reminders (depending on your communication preferences). The third parties and service providers use their technology to provide advertising about products and services tailored to your interests which may appear either on our Services or on other websites.
To the extent these online tracking technologies are deemed to be a
Specific information about how we use such technologies and how you can refuse certain cookies is set out in our Cookie Notice
6. DO WE OFFER ARTIFICIAL INTELLIGENCE-BASED PRODUCTS?
In Short: We offer products, features, or tools powered by artificial intelligence, machine learning, or similar technologies.As part of our Services, we offer products, features, or tools powered by artificial intelligence, machine learning, or similar technologies (collectively,
Use of AI Technologies
We provide the AI Products through third-party service providers (OpenAI , Anthropic fal.ai
Our AI Products
Our AI Products are designed for the following functions:
AI bots
Video generation
Image analysis
Text analysis
Natural language processing
AI automation
How We Process Your Data Using AI
All personal information processed using our AI Products is handled in line with our Privacy Notice and our agreement with third parties. This ensures high security and safeguards your personal information throughout the process, giving you peace of mind about your data's safety. Translating the websites we host for businesses. When a business whose plan includes its website publishes that website, we send the text the business wrote for it (its description and tagline, menu item names and descriptions, frequently asked questions, team members’ roles and biographies, and the text, button labels and photo captions it adds to its own sections) to OpenAI to translate it into the eight other languages the website offers, so visitors can read it in their language. People’s names, prices, links and photos are not sent. We keep these translations with the business’s account and delete them together with the account; translations of a description we took from Google are deleted together with that description.
How to Opt Out
We believe in giving you the power to decide how your data is used. To opt out, you can:
Contact us using the contact information provided
Log in to your account settings and update your user account
Keeping the same person consistent across video shots (optional)
If you turn on the optional setting to keep the same person consistent across the shots of a video (available on higher OwnersPal plans, off by default), and a person appears in more than one shot, we send one of the photos you uploaded of that person to our AI Service Provider fal.ai as a reference image, so the person looks the same throughout the video. We do this only to produce the video you asked for. We do not create, store, or compare face scans, face templates, or any other biometric identifiers, and we only use photos you uploaded. We keep the reference photo for at most 90 days after the last time it was used as a reference, and delete it sooner if you turn the setting off or delete your account. You should only turn this setting on if the people shown have agreed to appear in your content. This setting is not currently offered to businesses located in Illinois or Texas.
Answering phone calls (optional)
If a business turns on the optional phone assistant, an AI answers calls made to the phone number we provide for that business. It is not a person. Before anything else, every caller the assistant answers hears, in English, that they have reached an AI assistant and that the call may be recorded and shared with our service providers. Normally they hear: "Hi, you've reached the AI assistant for [business name]. This call may be recorded and shared with our service providers." If the assistant picks up but our service cannot confirm the call, it says "Hi, you've reached an AI assistant. This call may be recorded and shared with our service providers.", tells the caller the line isn't available and ends the call. Google's Gemini, reached through ElevenLabs, may read anything the caller says before the call ends, and we keep no transcript of such a call. The business can add its own words only after that disclosure and cannot change or remove it. If the caller speaks one of the other languages the assistant supports, it is instructed to say again, in that language, that it is an AI assistant for the business and that the call may be recorded and shared with our service providers. We do not record the audio of the call. The call is carried by Twilio and processed live by ElevenLabs, which turns the caller's speech into text and speaks the assistant's replies in a preset synthetic voice (no voice is cloned). Google's Gemini language model, reached through ElevenLabs, writes each reply from the words of the call so far and the business's published information. The assistant takes no orders or payments, sends no text messages and makes no outgoing calls of its own (it only connects a caller to the business's transfer number), and it is instructed never to ask for a card number. It is also instructed to tell a caller who mentions suicide or self-harm that they can call or text 988, the Suicide and Crisis Lifeline, and, if a caller threatens the business, its staff or anyone, to end the call and leave the business a message marked URGENT; we also email the business that the message is waiting, without the caller's words, and the message stays in its inbox. When the assistant transfers a call, Twilio connects it only to the business's transfer number. Calls to the business's phone assistant number while the phone assistant is off or cannot answer are handled by Twilio alone: Twilio connects the caller to the business's transfer number if it has set one, and otherwise, or if no one answers, plays a fixed voice message saying the line is unavailable. No AI listens to these calls, and neither ElevenLabs nor Google's Gemini receives them. Twilio also keeps the business's transfer number in the settings of its phone assistant number, so that it can still connect calls when our service cannot be reached; we ask Twilio to remove it from there when the business changes or clears it or deletes its account, and keep retrying until it is removed (until then, a call made while our service cannot be reached may still be connected to the old number). Whenever Twilio rings the business's transfer number for a call the assistant does not answer or for a call it transfers (other than a call made while our service cannot be reached), whoever picks up first hears a fixed voice message from Twilio, "Call for [business name]. Press 1 to answer.", and the caller is connected only once they press 1, within about 8 seconds. If no one picks up or no one presses 1, the call is treated as not answered, so a voicemail on that number does not pick it up, and the caller hears the fixed voice message saying the line is unavailable. That part of the call is not recorded, and no AI hears it. One exception: if a call came in while the assistant was already on as many calls as the business allows at once and no one at the transfer number takes it, the assistant answers it only to take a message. The caller first hears the opening disclosure above and then "Sorry, everyone is busy right now. I can take a message and make sure the team gets it." On such a call the assistant can answer questions from the business's published information and take a message, but cannot book or transfer, and the call lasts at most about 3 minutes. It is handled like any other call the assistant answers, by the same service providers and with the same records and deletion requests. If the business has no minutes left for such a call, or the assistant cannot be reached for it, the caller hears the fixed voice message saying the line is unavailable, and the transfer number is not rung a second time. ElevenLabs works with the conversation before we remove anything from it. We ask ElevenLabs and Twilio to delete their copies of each call once it ends: normally right after the call, and within two days if we do not receive the call's end notice. For a call made while our service was down, we ask within about an hour of our service coming back; the log of a call made more than three days before then stays with Twilio under its own retention. If that notice never reaches us and we also could not link the call to its ElevenLabs conversation when it started, we cannot tell ElevenLabs which conversation to delete, so only ElevenLabs' own 30-day limit removes it. In any case ElevenLabs keeps a conversation for no more than 30 days, and Twilio may keep records that the law requires it to keep. For a call the assistant answers, other than one our service could not confirm, we keep a transcript and a short summary for the business (see section 8). If the caller asks the assistant not to keep a record of the call, we store no transcript or summary of it (see section 1). Before we store them, we automatically remove card, bank and government ID numbers and medical terms that we detect; detection can miss some, and medical terms are detected in English only. A business can turn the phone assistant off at any time, which deletes its saved call history.
7. IS YOUR INFORMATION TRANSFERRED INTERNATIONALLY?
In Short: We may transfer, store, and process your information in countries other than your own.Our servers are located in the United States
If you are a resident in the European Economic Area (EEA), United Kingdom (UK), or Switzerland, then these countries may not necessarily have data protection laws or other similar laws as comprehensive as those in your country. However, we will take all necessary measures to protect your personal information in accordance with this Privacy Notice and applicable law.
If you connect an AI assistant to OwnersPal, the information it reads goes to that assistant’s provider at your instruction and is handled under that provider’s own terms, which may include processing outside the EEA, the UK or Switzerland. Learn more in Connected AI assistants.
8. HOW LONG DO WE KEEP YOUR INFORMATION?
In Short: We keep your information for as long as necessary toWe will only keep your personal information for as long as it is necessary for the purposes set out in this Privacy Notice, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements).
When we have no ongoing legitimate business need to process your personal information, we will either delete or
Some information has a specific retention period: aggregate website statistics are kept for 13 rolling months; diagnostic screenshots are deleted automatically after at most 90 days, and screenshots never attached to a report within about 24 hours; automatic problem reports are deleted 180 days after the problem last happened or was last worked on, or 90 days after for reports sent while signed out, and every support request linked to your account is deleted when you delete your account; the hashed email address or phone number used for conversion measurement is never stored, and a booking can only be sent within 30 days of being made (7 days for Meta); agreement, automatic-renewal consent, automatic top-up consent, phone minute purchase and pack-minute, ad-spend approval, photo-origin and AI search visibility records are deleted together with the account they belong to; photos copied from Square are deleted when the business disconnects Square or deletes its account; and marketing opt-out records are kept for as long as they are needed to keep honoring the opt-out. Accounts whose sign-up was never finished: until an account confirms that the person using it is 18 or older and authorized to manage marketing for the business, and agrees to our Terms of Service, this Privacy Policy and our Data Processing Agreement, it can only show the screen that asks for this. If that is not done, we delete the account and everything stored in it 30 days after it was created or, for an account created before we started asking, 30 days after the day we started. Seven days before, we send one email to the address on the account with the date and a link to finish, and we keep the date that email was sent with the account; an account that received it is not deleted sooner than 7 days after it was sent. An account with an active or trial paid plan, and the accounts we operate ourselves, are never deleted this way; we contact the owner instead. Such a deletion works like deleting the account yourself, including the record that a deletion happened. Previous versions of the websites we host for businesses: each time a business publishes its website, and when we move websites to a new design, we keep a copy of the published version so the business can restore it. We keep the 50 most recent versions of each website (a version saved when we moved a website to a new design is kept for at least 30 days), and all of them are deleted together with the account.
Reference photos used to keep the same person consistent across video shots: when that optional setting is on, a private copy of the reference photo is stored with your account so the video can still be finished if you delete the original photo, and the temporary link we send to fal.ai expires after one hour. Each stored copy is deleted 90 days after the last time it was used as a reference — using it again in a new video restarts that 90 days — and sooner than that when you turn the setting off or delete your account. The setting is not currently offered to businesses located in Illinois or Texas; if such a business had turned it on, its stored copies are deleted the next time it makes a video, and in any case within those 90 days.
Brand Photoshoot records: the note a vision model makes about each photo is stored with that photo in your account and is removed when the photo is permanently deleted or when you delete your account. Photoshoot records, including the record of how each enhanced copy was made and your picks and rejections, are deleted when you delete your account.
Connected AI assistants: a connection record (which assistant, which permissions you approved, and when it was connected, last used and disconnected) is kept for 180 days after the connection ends (when it is revoked, or when it expires 90 days after you approved it) and then deleted; usage records of the assistant’s requests, which never contain what it asked or what we answered, are kept for up to 180 days. Both are deleted when you delete your account.
Phone assistant calls: the call history we keep for a business's phone assistant (the caller's phone number, the call's time, length and outcome and, for a call the assistant answers, other than one our service could not confirm, the transcript and summary) is deleted automatically after 90 days, and sooner when the business deletes that call, turns the phone assistant off or deletes its account. Before we store a transcript or summary, we automatically remove card, bank and government ID numbers and medical terms that we detect; detection can miss some, and medical terms are detected in English only. The phone assistant does not record call audio. ElevenLabs processes the conversation before we remove anything from it. We ask ElevenLabs and Twilio to delete their copies of each call once it ends: normally right after the call, and within two days if we do not receive the call's end notice. For a call made while our service was down, we ask within about an hour of our service coming back; the log of a call made more than three days before then stays with Twilio under its own retention. If that notice never reaches us and we also could not link the call to its ElevenLabs conversation when it started, we cannot tell ElevenLabs which conversation to delete, so only ElevenLabs' own 30-day limit removes it. In any case ElevenLabs keeps a conversation for no more than 30 days after the call. When the business deletes its account, we ask Twilio again for the calls still in its call history; Twilio may keep records that the law requires it to keep. The business's transfer number, which Twilio keeps in the settings of its phone assistant number, is removed at our request when the business changes or clears it or deletes its account; we keep retrying until it is removed. A booking or message the assistant takes is delivered to the business and kept like any other booking or message it receives, until the business deletes it or its account; it is not deleted with the call history. The record of each call's length that we keep for billing contains no caller information and is deleted together with the business's account. For a call the assistant answers, other than one our service could not confirm, it also notes which version of the opening disclosure was used, the call's language and whether the disclosure was heard; it is kept even when a caller asks the assistant not to keep a record of the call.
Information from connected platforms. When you disconnect an account on the Connections page in OwnersPal, we delete our access to it and, where the platform offers a way, revoke it there too (Google, TikTok, X, LinkedIn and Square, and Facebook for a Facebook Page or an Instagram account connected through Facebook). At Facebook we keep our access while another connection we can match to the same Facebook login still uses it (see section 1); to end it sooner, remove OwnersPal in your Facebook settings. An Instagram account connected with Instagram login offers no such way: to end our access there, also remove OwnersPal in your Instagram settings. At the same time we delete the information listed below. We keep a record of the connection (which account it was, except for TikTok ads, and when it was connected and disconnected) and our records of the posts we published for you. From a Google Business Profile we also keep what we built from its information: the growth suggestions we showed you and the figures behind them, our decision records (for up to 36 months), your monthly reports (with their review counts, ratings, reply rates and the topics customers mentioned) and the saved copy of your listing details (opening hours, phone number, website and categories). We keep these until you delete your OwnersPal account. What we delete:
- Facebook and Instagram: the comments and direct messages we received from that account. The daily statistics stay in your account so you can see your past results, until you delete your account or ask us to delete them.
- Google Business Profile: the copies of your reviews and questions (with the replies you drafted for them in OwnersPal), your daily statistics, and the value estimates we work out from those statistics. While you stay connected, we keep each review copy for at most 30 days after we last received it from Google, and each day’s statistics and value estimates for at most 30 days. The inbox conversation for each review, including any reply you approved, is deleted along with the review copy: no more than 30 days after we last received the review from Google, or right away when you disconnect.
- LinkedIn: your Page’s daily statistics. While you stay connected, we keep them for at most one year.
- YouTube: your channel’s daily statistics and the IDs of the videos we uploaded. While you stay connected, we keep a video’s ID for at most 30 days after it was uploaded.
- Meta and Google ad accounts: the access. Your campaigns, with their total spend, and their daily results stay in your account, so that your spending limits and your spending history stay accurate, until you delete your OwnersPal account. A deletion request made in your Facebook settings also deletes the results of your Meta ad campaigns, daily and in total (see below).
- TikTok ads: the access to your TikTok ad account, and the link between the connection and your TikTok advertiser account. Each campaign we ran for you keeps the ID of the advertiser account it ran in and its total spend until you delete your OwnersPal account, so that your spending limits can still pause it. We keep each campaign’s daily spend and results for 13 months, so that your spending limits and your spending history stay accurate, and then delete them, or sooner if you delete your OwnersPal account.
- Every ad account: our records of the recommendations we make and your decisions on them also hold the total each campaign had spent when you deployed, started or paused it or a spending limit paused it, and the spending alerts we raised for it. Those records are never changed. They stay after a connection ends; we keep them for up to 36 months, and delete them with your OwnersPal account. A deletion request through Meta deletes, sooner, the ones that hold anything we received from Meta or worked out from it (see “Facebook deletion requests” below).
If a connection ends in another way, for example because it expires or you remove OwnersPal’s access in your Google account, we delete the same information within 7 days, or within 9 days if it ends because the platform could not be reached for more than a day. We check every day whether our access to your Google account is still valid. If you remove OwnersPal’s access on Facebook, Instagram or LinkedIn instead, we learn that the connection has ended only when that access expires; to have the information deleted right away, also disconnect the account on the Connections page in OwnersPal, or contact us.
Facebook deletion requests: if you remove OwnersPal in your Facebook settings and send a request there to delete your information, Meta passes the request to us. This also covers Instagram accounts you connected through Facebook. We then delete the connection, its access, the ID Meta uses for you, the comments, messages and Page and Instagram daily statistics we received from that account and the alerts we worked out from those statistics, and the IDs Meta gave the posts we published there and Meta’s error messages about them (our record that a post was made stays). For a request made in your Facebook settings, we also delete the results of your Meta ad campaigns: their daily results and their total spend, impressions and clicks (from then on, the campaign shows that its results were deleted after your request and is left out of your total ad spend, until new results from Meta cover it again), and the copies of those results in your growth proposals, spending alerts, weekly summaries and saved video requests. We also delete our decision records about your Meta ad campaigns, those about your other campaigns that counted your Meta ad spend (a pause at a spending limit, or a launch refused because of your Meta ad account’s spend), and our records of what your growth suggestions achieved that hold Meta ad results. The campaigns themselves (their names, budgets and adverts) stay in your account, and no Meta ad spend is kept. So, if one of your Meta ad campaigns had run, then for the rest of that month we ask Meta how much your Meta ad account has spent this month before a campaign on another ad platform is launched or started, and every hour while one is running; we use that amount only to check your ad spending limits and do not store it. If Meta cannot tell us, for example because Meta is no longer connected, the campaign is not launched or started, and a running one is paused, because your ad spending limits could not count your Meta ad spend; you can start it again once Meta can tell us. We give you a confirmation code; you can check the status of the request at https://ownerspal.app/data-deletion/status. Deleting your OwnersPal account deletes all of this at once.
After you delete your account: we keep a record that the deletion happened — your former account ID and a one-way code made from your email address, not the address itself — for 3 years, and then delete it. Entries about your account in our staff action log, which cannot be edited or deleted so that it stays a reliable security record, are kept with that log and have no end date. Copies of your information in our database backups are kept apart, are not used for anything else, and are gone within 7 days as those backups expire. Mentions of your account in our hosting and error-tracking logs are deleted as those logs expire, within 90 days. The deletion report shows you these dates.
9. HOW DO WE KEEP YOUR INFORMATION SAFE?
In Short: We aim to protect your personal information through a system ofWe have implemented appropriate and reasonable technical and
10. DO WE COLLECT INFORMATION FROM MINORS?
In Short: We do not knowingly collect data from or market toWe do not knowingly collect, solicit data from, or market to children under 18 years of ageprivacy@ownerspal.app
11. WHAT ARE YOUR PRIVACY RIGHTS?
In Short:In some regions (like
We will consider and act upon any request in accordance with applicable data protection laws.
If you are located in the EEA or UK and you believe we are unlawfully processing your personal information, you also have the right to complain to your Member State data protection authority or UK data protection authority.
If you are located in Switzerland, you may contact the Federal Data Protection and Information Commissioner.
Withdrawing your consent: If we are relying on your consent to process your personal information,
However, please note that this will not affect the lawfulness of the processing before its withdrawal nor,
Opting out of marketing and promotional communications: You can unsubscribe from our marketing and promotional communications at any time by
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Information sharing to subcontractors in support services, such as customer service, is permitted. All other use case categories exclude text messaging originator opt-in data and consent; this information will not be shared with third parties.
Account Information
If you would at any time like to review or change the information in your account or terminate your account, you can:Log in to your account settings and update your user account.
Contact us using the contact information provided.
Upon your request to terminate your account, we will deactivate or delete your account and information from our active databases. However, we may retain some information in our files to prevent fraud, troubleshoot problems, assist with any investigations, enforce our legal terms and/or comply with applicable legal requirements. When you delete your account yourself in your account settings, we then show you a deletion report: what we deleted, where it was stored, and what we keep, why and until when. You can download it as a spreadsheet, and we email the same summary to the email address on your account. If the deletion cannot finish right away, we keep a record of your request, finish the deletion afterwards and email you the report when it is done; that report covers what was deleted when the deletion finished. We create the report from the deletion itself and do not keep a copy of it. While a deletion is being finished, we keep a note that you asked (your account ID, when you asked, and the language you used); it is deleted together with your account.
Downloading a copy of your data. You can download a copy of your data yourself from your account settings. We prepare it in the background as a ZIP file (several ZIP files, each complete on its own, if your data is large) holding the records linked to your account as JSON and CSV (spreadsheet) files, and the files stored for your account, such as your photos and videos. We email a download link to the email address on your account and also show it in your account settings. The link stops working 24 hours after the export is ready, and we delete the export files from our servers within the following 24 hours. Anyone who has the link can download the export, so please do not forward it. The export leaves out sign-in and connection keys (we do not hold your password or card details: our sign-in provider and Stripe do), our staff’s internal notes, the AI instructions (prompts) and model scores we use to make your content, network details such as IP addresses, and details about your customers that OwnersPal does not show you. You can ask for one export every 24 hours. For anything the export does not include, use our privacy request form.
Downloading a copy of your data. You can download a copy of your data yourself from your account settings. We prepare it in the background as a ZIP file (several ZIP files, each complete on its own, if your data is large) holding the records linked to your account as JSON and CSV (spreadsheet) files, and the files stored for your account, such as your photos and videos. We email a download link to the email address on your account and also show it in your account settings. The link stops working 24 hours after the export is ready, and we delete the export files from our servers within the following 24 hours. Anyone who has the link can download the export, so please do not forward it. The export leaves out sign-in and connection keys (we do not hold your password or card details: our sign-in provider and Stripe do), our staff’s internal notes, the AI instructions (prompts) and model scores we use to make your content, network details such as IP addresses, and details about your customers that OwnersPal does not show you. You can ask for one export every 24 hours. For anything the export does not include, use our privacy request form.
Cookies and similar technologies: Most Web browsers are set to accept cookies by default. If you prefer, you can usually choose to set your browser to remove cookies and to reject cookies. If you choose to remove cookies or reject cookies, this could affect certain features or services of our Services.
If you have questions or comments about your privacy rights, you may email us at privacy@ownerspal.app .
12. CONTROLS FOR DO-NOT-TRACK FEATURES
Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track (California law requires us to let you know how we respond to web browser DNT signals. Because there currently is not an industry or legal standard for
13. DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?
In Short: If you are a resident ofCategories of Personal Information We Collect
The table below shows the categories of personal information we have collected in the past twelve (12) months. The table includes illustrative examples of each category and does not reflect the personal information we collect from you. For a comprehensive inventory of all personal information we process, please refer to the section| Category | Examples | Collected |
|---|---|---|
A. Identifiers | Contact details, such as real name, alias, postal address, telephone or mobile contact number, unique personal identifier, online identifier, Internet Protocol address, email address, and account name |
B. Personal information as defined in the California Customer Records statute | Name, contact information, education, employment, employment history, and financial information |
Gender, age, date of birth, race and ethnicity, national origin, marital status, and other demographic data | ||
Transaction information, purchase history, financial details, and payment information | ||
Fingerprints and voiceprints | ||
Browsing history, search history, online | ||
Device location | ||
Images and audio, video or call recordings created in connection with our business activities | ||
Business contact details in order to provide you our Services at a business level or job title, work history, and professional qualifications if you apply for a job with us | ||
Student records and directory information | ||
Inferences drawn from any of the collected personal information listed above to create a profile or summary about, for example, an individual’s preferences and characteristics | ||
The answers above reflect what we collect on purpose. The exceptions are on the phone assistant: a caller to a business's phone assistant can mention health details, such as an allergy, or read out a card, bank or government ID number (category L, sensitive personal information). On a call the assistant answers, the service providers that handle it (Twilio, ElevenLabs and Google's Gemini, reached through ElevenLabs) receive what the caller says before anything is removed; any other call is carried by Twilio alone. We automatically remove such numbers and medical terms that we detect from call transcripts and summaries; detection can miss some, and medical terms are detected in English only. A message or booking the caller leaves reaches the business as the caller gave it, with only the card numbers we detect removed, so that the business can act on it. We use such details only to handle the call and to give the business its call history and the caller's message or booking. The phone assistant does not record call audio (category H) and creates no voiceprints (category E).
We may also collect other personal information outside of these categories through instances where you interact with us in person, online, or by phone or mail in the context of:
- Receiving help through our customer support channels;
- Participation in customer surveys or contests; and
- Facilitation in the delivery of our Services and to respond to your inquiries.
- Category A -
As long as the user has an account with us
- Category B -
As long as the user has an account with us
- Category
D - As long as the user has an account with us
- Category
F - As long as the user has an account with us
- Category
G - As long as the user has an account with us
- Category
I - As long as the user has an account with us
- Category
K - As long as the user has an account with us
Sources of Personal Information
Learn more about the sources of personal information we collect inHow We Use and Share Personal Information
Will your information be shared with anyone else?
We may disclose your personal information with our service providers pursuant to a written contract between us and each service provider. Learn more about how we disclose personal information to in the section,
We may use your personal information for our own business purposes, such as for undertaking internal research for technological development and demonstration. This is not considered to be
- Category A. Identifiers
- Category B. Personal information as defined in the California Customer Records law
- Category
D . Commercial information
- Category
F . Internet or other electronic network activity information
- Category
G . Geolocation data
- Category
I . Professional or employment-related information
The categories of third parties to whom we disclosed personal information for a business or commercial purpose can be found under
Your Rights
You have rights under certain US state data protection laws. However, these rights are not absolute, and in certain cases, we may decline your request as permitted by law. These rights include:- Right to know whether or not we are processing your personal data
- Right to access your personal data
- Right to correct inaccuracies in your personal data
- Right to request the deletion of your personal data
- Right to obtain a copy of the personal data you previously shared with us
- Right to non-discrimination for exercising your rights
- Right to opt out of the processing of your personal data if it is used for targeted advertising
(or sharing as defined under California’s privacy law) , the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects ( "profiling" )
Depending upon the state where you live, you may also have the following rights:
- Right to access the categories of personal data being processed (as permitted by applicable law, including the privacy law in Minnesota)
- Right to obtain a list of the categories of third parties to which we have disclosed personal data (as permitted by applicable law, including the privacy law in
California, Delaware, and Maryland )
- Right to obtain a list of specific third parties to which we have disclosed personal data (as permitted by applicable law, including the privacy law in
Minnesota and Oregon )
- Right to obtain a list of third parties to which we have sold personal data (as permitted by applicable law, including the privacy law in Connecticut)
- Right to review, understand, question, and depending on where you live, correct how personal data has been profiled (as permitted by applicable law, including the privacy law in
Connecticut and Minnesota )
- Right to limit use and disclosure of sensitive personal data (as permitted by applicable law, including the privacy law in California)
- Right to opt out of the collection of sensitive data and personal data collected through the operation of a voice or facial recognition feature (as permitted by applicable law, including the privacy law in Florida)
How to Exercise Your Rights
To exercise these rights, you can contact usUnder certain US state data protection laws, you can designate an
Request Verification
Upon receiving your request, we will need to verify your identity to determine you are the same person about whom we have the information in our system. We will only use personal information provided in your request to verify your identity or authority to make the request. However, if we cannot verify your identity from the information already maintained by us, we may request that you provide additional information for the purposes of verifying your identity and for security or fraud-prevention purposes.If you submit the request through an privacy@ownerspal.app California
California Civil Code Section 1798.83, also known as the
Appeals
Under certain US state data protection laws, if we decline to take action regarding your request, you may appeal our decision by emailing us atCalifornia
California Civil Code Section 1798.83, also known as the 14. GOOGLE API SERVICES USER DATA POLICY
YouTube API Services. OwnersPal uses YouTube API Services when a business connects a YouTube channel (see “YouTube” in section 1). Your use of YouTube is subject to the YouTube Terms of Service, and Google’s handling of your information is described in the Google Privacy Policy. You can remove OwnersPal’s access to your Google account, including YouTube and Google Business Profile, at any time on Google’s security settings page at https://security.google.com/settings/security/permissions.
15. DO WE MAKE UPDATES TO THIS NOTICE?
In Short: Yes, we will update this notice as necessary to stay compliant with relevant laws.We may update this Privacy Notice from time to time. The updated version will be indicated by an updated