Privacy Policy

What we collect

Account details you give us at signup: name, company, phone, email, a hashed password, and your plan. Records you enter into your workspace: customers, contacts, properties, invoices, notes, routes and the rest. Technical data: server logs with IP addresses and timestamps, kept for 30 days.

When you connect a third-party service we store the tokens needed to use it on your behalf (a Stripe account id, a QuickBooks refresh token, a Google refresh token, a Facebook Page token, a Twilio number) and nothing else about that account.

Why we use it

To run the service you signed up for: sending the texts, emails and invoices you ask for, planning routes, syncing with the systems you connected, and showing you your data. To bill you. To tell you about the service, like a trial ending or a change that affects you. To keep the service safe.

Who sees it

Your workspace's data is visible only to the logins you create, to the people you send things to, and to the platform operator for support when you ask for it. Every such view is marked inside the app. Our infrastructure providers (Railway, and the integrations you connect) process data on our behalf under their own agreements. We do not sell personal data and we do not share it for advertising.

3. Text-message consent records

Unqio is the registered sender of text messages delivered on behalf of the businesses that use it, and owns the consent experience for those messages: the opt-in page, the invitation and confirmation texts, and the STOP, START and HELP keywords. For each phone number that opts in we keep the number, the name and email given, the business chosen, the exact disclosure agreed to, the source (web form, signup form, START reply, or a business recording consent given to it directly), the time, and for web forms the network address and browser. We keep a log of every change to that record. This is the evidence carriers and the law require that a person agreed to be texted, and it is used for nothing else.

Replying STOP to any message records an opt-out at once; replying START records an opt-in; replying HELP returns how to reach the business. We do not sell or share your SMS opt-in data or personal information with third parties for marketing purposes. We do not sell phone numbers or consent records and we do not share them beyond the business the person chose and the messaging carrier that delivers the texts. Questions go to support@unqio.app.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent are excluded from all other sharing described in this policy and will not be shared with any third parties, except the messaging providers and carriers that deliver the messages.

Your customers' data

You are the controller of the records you keep about your customers; we process them for you. If one of your customers asks about their data, we will point them to you and help you answer.

Retention and deletion

Workspace data stays while the workspace is active and for 90 days after cancellation, then it is deleted from live systems; backups roll off within a further 30 days. You can ask for earlier deletion at any time.

Facebook and Instagram

If you connect a Facebook Page (and the Instagram business account linked to it) to Unqio's social scheduler, we receive and store your Facebook user access token, the Page's id, name and Page access token, and the linked Instagram account's id and username. We use them only to publish the posts you schedule in Unqio to your own Page and Instagram account, to show you whether each post went out, and, if you turn it on, to read your own recent Instagram posts so they can be reposted to your Google Business Profile. We do not read your followers' information, send messages, or use this data for advertising, and we do not sell or share it.

To delete this data, use any of these:

1. In Unqio, go to Settings, then Social, and click Disconnect. The stored tokens and the Page and Instagram details are deleted immediately.
2. On Facebook, go to Settings & privacy, then Settings, then Business integrations, and remove Unqio. That revokes our access on Meta's side.
3. Email support@unqio.app. We delete anything else related to your Facebook or Instagram connection within 30 days and confirm when it is done.

Security

Passwords are hashed (scrypt), sessions are signed, integration tokens are stored encrypted at rest by our database provider, and every workspace lives in its own database schema. Payment card numbers never touch our servers; Stripe handles them.

Your rights and contact

You can see, correct, export or delete your account data by asking. Write to support@unqio.app and we will answer within 30 days.