1. Who we are
Onshop is operated by Onshop, located at Ulaanbaatar, Mongolia. This policy explains how we process data when customers use our chatbot-supported commerce service through Messenger or related web pages.
2. Data we may process
Depending on how the service is configured, we may process the following information:
- Messages customers send to a participating seller's Page or chatbot.
- Messenger-scoped identifiers needed to respond to the conversation.
- Product search terms, selected products, seller/store choices, and order-support context.
- Contact details a customer voluntarily provides, such as name, phone number, delivery notes, or email address.
- Technical data such as timestamps, request logs, error logs, browser type, and IP address where needed for security and service operation.
3. How we use data
- To respond to customer-initiated messages.
- To search connected seller product data and return relevant product or store information.
- To support order, reservation, pickup, delivery, or customer-support workflows requested by the customer.
- To maintain security, prevent misuse, troubleshoot bugs, and improve service reliability.
- To comply with legal obligations and platform requirements that apply to our service.
4. Meta platform data
When the service uses Meta Platform APIs, we process Meta platform data only for the purposes described in this policy and only as needed to provide the requested chatbot experience. We do not sell Meta platform data.
5. Sharing
We may share relevant conversation or order-support information with the seller or store the customer is contacting. We may also use service providers for hosting, storage, security, analytics, and customer support. Service providers must process data only as instructed and protect it appropriately.
6. Retention
We keep personal data only as long as needed for the service, support, security, legal, or recordkeeping purposes described in this policy. Replace this sentence with your real retention schedule before review if your product has a specific retention period.
7. Deletion and access requests
Users can request deletion of their data by following the instructions on our Data Deletion page or by contacting us at privacy@onshop.site. We will verify and respond to requests according to applicable law and platform requirements.
8. Security
We use administrative, technical, and organizational safeguards designed to protect personal data. No online service can guarantee absolute security.
9. Children
The service is not intended for children under the age required by applicable law to use online commerce or messaging services without parental consent.
10. Updates
We may update this policy when our service, legal obligations, or platform requirements change. If the change is material, we will update the effective date and provide notice where required.
11. Contact
Privacy contact: privacy@onshop.site
Support contact: support@onshop.site