TOZA (the "Service") is a family of business software products owned by Buural Soft LLC ("we"): SMS delivery, phone verification, a Messenger commerce bot, product and inventory records, point of sale and order management, staff and customer records. Each product runs on its own but shares one sign-in and one organization record. This Privacy Policy explains how we collect, use, and protect your personal information.
1. Information we collect
- Account information: name, phone number, email address, and login credentials. Sign-in is based on the phone number.
- Facebook information (only if you use the chat product and connect a Page): the public profile (name, profile picture); the connected Facebook Page and permission to manage it; messages received from end users in that Page's Messenger chat, sender names, and other information needed to process orders.
- Business data: your organization's products, services, inventory, orders, customers, staff, and payment records.
- Technical information: device, browser, IP address, cookies, and usage logs.
2. How we use information
- To provide the Service, receive and process orders, and communicate with customers.
- To read and reply to the connected Page's Messenger messages in order to receive and process orders.
- To verify accounts (one-time SMS codes), ensure security, and prevent fraud.
- To improve the Service, provide support, and handle billing.
3. Use of Facebook data
We use Facebook/Meta platform data only to manage orders and customer messages for your organization's connected Page, within the scope you authorize. We do not sell or rent this data for advertising purposes, and we comply with the Meta Platform terms and policies.
4. AI processing
The chat bot may run on the merchant's own AI service key (for example OpenAI). In that case conversation text and the product list are sent to that service. If the merchant has not provided a key, no AI call is made at all — the bot answers only from the merchant's own pre-written answers.
5. Sharing information
We do not sell your personal information to third parties. We may share it only in the following cases:
- With trusted service providers that help operate the Service (hosting, file storage, payment systems, SMS gateway, AI) — only to the extent necessary.
- When required by law or a competent authority.
6. Data retention
We retain information for as long as necessary to provide the Service and to meet our legal obligations. Temporary conversation state (cart, verification codes) is deleted automatically within hours.
7. Security
We take reasonable technical and organizational measures to protect your information from unauthorized access and loss. Passwords and one-time codes are stored in a form that cannot be read back.
8. Your rights and data deletion
You have the right to access, correct, or request deletion of your information. To delete your data completely, email bsoft0108@gmail.com with the subject "data deletion request" and include your registered phone number. We will delete your personal information within 30 days of receiving the request and confirm by email.
You can disconnect the Facebook connection yourself at any time: "Organization → Settings → Facebook → Disconnect". Disconnecting removes the Page token from our servers.
The full procedure — what is deleted and what is kept — is on the Delete your data page.
9. Cookies
We use cookies to keep you signed in and to store your preferences. You can limit cookies through your browser settings; note that sign-in will not work if cookies are blocked.
10. Changes to this policy
We may update this policy when necessary. Changes will be posted on this page and the "last updated" date will change.
11. Contact us
For questions or requests, contact bsoft0108@gmail.com or call 8098-7766. Data controller: Buural Soft LLC.