Back to Owl AI

Privacy Policy

Effective date: July 18, 2026

This Privacy Policy explains how Owl AI collects, uses, stores, and protects information when you use our business operating system or the Owl AI ChatGPT plugin. It also covers how we handle business, customer, appointment, staff, communication, and connected-platform data that you choose to make available to Owl AI.

1. Information we collect

When you register for Owl AI, we collect your email address, profile information, and the business details you provide. As you use the platform, we may store tasks; customer contact details such as names, email addresses, and phone numbers; appointment and service information; staff profiles, availability, and role information; connected-provider status and identifiers; review and social-schedule records; outbound communication history; and security/audit events needed to operate, secure, and troubleshoot the service.

2. Facebook Pages and Instagram data

If you connect a Facebook Page or Instagram professional account, Owl AI receives information from the Meta Graph API on your behalf. This may include:

  • Page or account name, profile picture, and metadata
  • Public posts, comments, messages, and reviews you authorize us to access
  • Insights and analytics data you choose to sync

We only use this data to provide the services you request inside Owl AI, such as publishing content, responding to comments, or displaying analytics. We do not sell this data or use it for advertising targeting.

2b. Google user data

If a business owner chooses "Connect with Google" inside Owl AI, Owl AI requests only the Google permissions below. Each is used solely to provide the feature the owner turns on inside their own business workspace.

  • Basic identity (openid, email, profile) — to show which Google account is connected to the business and to label the connection. We store the email address only.
  • Google Business Profile (business.manage) — to read the owner's business locations and profile details, read customer reviews, and—only when the owner clicks to approve—publish review replies and Google Posts for that location.
  • Gmail read-only (gmail.readonly) — to find booking and lead-request emails sent to the business (for example website contact forms) and turn them into lead records in the owner's workspace. We do not read or store unrelated personal mail content.
  • Gmail send (gmail.send) — to send appointment confirmations, reminders, and owner-approved replies from the business's own Gmail address to its customers.
  • Google Ads (adwords) — requested separately, only when the owner connects Google Ads, to read the owner's own ad account, campaign, and performance data and to make campaign changes the owner explicitly approves.

Google tokens are encrypted at rest and stored per business; data is visible only to members of that business. We do not sell Google user data, do not use it for advertising, do not use it to train generalized AI or machine-learning models, and do not let humans read it except with the owner's consent for support, for security purposes, or as required by law.

Limited Use disclosure: Owl AI's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can revoke access at any time at myaccount.google.com/connections, disconnect inside Owl AI, or request deletion on our data deletion page.

3. Access token security

Encrypted at rest

Meta access tokens are exchanged server-side, never exposed to the browser, and encrypted using AES-256-GCM before being stored in our database. The encryption key is kept separate from the database and is only accessible to server-side functions.

4. How to revoke access or request deletion

You can disconnect a Facebook Page or Instagram account at any time from Owl AI Settings. This revokes Owl AI's access to that connection and removes the stored token from our systems.

To request deletion of all Meta-related data or your entire Owl AI account, email us using the address below. We will confirm receipt and process verified deletion requests within 30 days.

Request deletion

owlnexa@gmail.com

5. Contact us

For privacy questions, data requests, or to exercise your rights, contact us at owlnexa@gmail.com.