Poleso Privacy Policy

1. Data we collect

Account data. Your name, email address, and authentication credentials.

Store data. Products, orders, delivery details, and settings you create while using Poleso.

Data from Meta platforms. If you connect Instagram, Facebook, or WhatsApp Business, we receive and store on your behalf: direct messages and attachments, comments on your posts, sender profile information (name, username, profile picture), and message metadata. This data comes through official Meta APIs and webhooks and is used solely to display and manage your customer conversations inside Poleso.

Technical data. Server logs (IP address, request time) kept for security and troubleshooting.

2. How we use data

We use data exclusively to provide Poleso features: a unified inbox, sending your replies, linking conversations to orders, and notifications you configure. We do not sell personal data and do not use it for advertising. Data from Meta platforms is used in accordance with the Meta Platform Terms (developers.facebook.com/terms).

We also keep a record of how each order went: the channel it arrived from, whether the buyer completed the checkout themselves, the amount, the product categories, and how the delivery ended together with its date. We use this to run and improve the service, including our work on assessing delivery risk so that sellers can be offered better terms later. This record holds order and delivery metadata only — the contents of your conversations are never analysed for it.

3. Storage and processors

Data is stored on servers in the European Union. Processors: Hetzner (hosting), Neon (PostgreSQL, EU region), Cloudflare (DNS, media storage), Resend (transactional email). Communication data is exchanged with Meta Platforms through their official APIs.

4. Retention

We keep data while your account is active. After account deletion or a deletion request, personal data is removed within 30 days, unless a longer retention is required by law.

5. Data deletion

You can have your data deleted in either of two ways. Both remove the same data; the second one is the automated route Meta uses.

— email info@checkant.com from your account email; or

— remove the Poleso app in your Facebook/Instagram settings: Meta sends us an automated deletion request. Check its status on the data deletion status page.

If your store is connected through WhatsApp Business only, please use the email route above. The automated request Meta sends identifies you by your Facebook or Instagram account, and a WhatsApp-only connection has neither.

6. Security

Access tokens and credentials are stored securely, transmitted only over HTTPS, and never shared with third parties.

7. Your rights

You may request access, correction, export, or deletion of your personal data at any time via info@checkant.com. In the EU/EEA you may also lodge a complaint with your local supervisory authority.