Privacy Policy

AdWiz ("we", "us") is an internal marketing and customer-service platform operated by Beard and Bones Ltd. It includes Noah, our customer-service assistant, which handles the messages customers send us by email, Facebook Messenger, Instagram and our website chat. This policy explains how we handle data when you interact with our application or contact us through those channels.

Data we collect

AdWiz connects to third-party advertising and e-commerce platforms (Google Ads, Facebook Ads, Amazon Ads, Shopify) on behalf of authorised administrators. We store campaign performance metrics, order data, and subscriber information solely for the purpose of providing marketing analytics and email services.

For customer service, we also connect our own Gmail mailbox, our Facebook Page and our Instagram account. We store the messages, comments and attachments customers send us there, the sender's name, email address or social profile identifier, and the replies we send, together with the order details needed to answer them.

How we use data

Data is used exclusively to display analytics dashboards, send marketing emails, optimise advertising campaigns, and answer customer enquiries. We do not sell, share, or disclose data to third parties beyond the platform integrations and service providers required to operate the service.

Facebook and Instagram data

We access Facebook and Instagram data through Meta's Page and Instagram permissions, granted by one of our administrators for our own Page and Instagram account only. We use this data solely to:

• display, reply to and manage the direct messages customers send to our Page and Instagram account;
• read, reply to, hide or remove comments on our own posts and adverts;
• publish and schedule posts on our own Page and Instagram account;
• match an enquiry to the customer's order so we can help them.

We do not use this data to build advertising profiles, we do not sell it, and we do not share it except with the service providers described below. Page access tokens are encrypted before they are stored.

Google user data (Gmail)

AdWiz's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We access Gmail data only after explicit consent through Google's OAuth 2.0 sign-in, and only for our own customer-service mailbox. We use Gmail data solely to:

• display, send and manage customer-service emails in our helpdesk;
• read email content, attachments and metadata to create and manage support tickets;
• provide AI-assisted features such as drafted replies, ticket classification and order lookups.

We do not use Google user data for advertising or marketing, we do not sell it, and we do not use it for any purpose other than providing and improving our customer service. We share it only as needed to provide the service (our hosting provider and the AI providers described below), under confidentiality and data protection obligations. OAuth tokens and stored Google user data are encrypted at rest (AES-256-GCM) and in transit (TLS). Access can be revoked at any time in the Google Account settings; on revocation we remove the associated Google user data within one business day.

AI-processed data

Noah uses AI model providers to classify customer enquiries, draft replies for our team to review, and carry out customer-service actions such as order lookups, changes and refunds. Only the message content and customer context needed for the task are sent, under the providers' data processing terms. Depending on the settings our team chooses, a reply is either reviewed by a member of our team before it is sent or sent automatically, and our team oversees the replies and actions Noah takes.

Data storage

All data is stored on a secured, privately hosted server within the EU (OVH, France). Access is restricted to authenticated administrators only.

Your rights and data deletion

You can ask us for a copy of the personal data we hold about you, or ask us to correct or delete it, including the messages and comments you sent us on Facebook, Instagram or by email. Email us at the address below; we respond within 30 days. You can also complain to your local data protection authority.

Contact

For any privacy-related queries, contact us at help@beardandbones.com.