Data protection
Your data belongs to you
Not to Owwel. You can read it, export it, and take it elsewhere whenever you want. This page says exactly what is held, why, and who can reach it.
You can export it
CSV and PDF, any time, without asking.
We do not sell it
No advertisers, no data brokers, no training.
We do not delete it
A lapsed account goes read-only, not empty.
What Owwel stores
Only what the software needs to do its job. There is no profiling, no advertising and no data collected for resale.
- Your business records: sales, purchases, stock, expenses, invoices, customers, staff and the reports built from them.
- Your account: name, email, the business and branches you own, and which team members you have invited.
- Files you upload yourself, such as receipts and documents, in the encrypted vault.
- Operational records needed to keep the account safe: sign-ins, failed sign-ins, devices you have confirmed, and the audit trail of changes.
Why it stores it
Every category above exists because a feature you use needs it, and for no other reason.
- Business records exist so the software can produce your books, your stock position and your reports.
- Account details exist so you can sign in and so the right people reach the right branches.
- Sign-in and device records exist so a stolen password alone cannot open your books.
- The audit trail exists so you can see who changed a figure, which is the whole point of having one.
- Owwel does not sell your data, does not share it with advertisers, and does not use your business records to train anything.
Who can access it
Inside your business, you decide. Outside it, nobody else's account can reach your rows at all.
- You, as owner, see everything in the branches you own.
- Team members see only what their role grants, feature by feature, in the branches they are on.
- Another Owwel customer cannot reach your data. Separation is enforced by the database itself rather than by the app remembering to filter.
- Cost prices and profit are a separate permission, so someone can use a page without seeing your margins.
How Owwel staff are restricted
This is the question most software avoids answering, so here it is plainly.
- Owwel staff do not browse customer books. There is no internal screen for reading a customer's sales.
- A small number of people hold the platform administration access needed to operate and repair the service. That access exists to keep the system running, not to look at your trading.
- Support does not require handing over your password. Nobody at Owwel can read it: only a one-way hash is stored.
- Where a fault genuinely requires looking at affected records, it is done to fix that fault and nothing else.
How backups work
Backups are automatic, encrypted, and exist so a bad day does not become a lost year.
- The database is backed up on an automatic schedule by the managed platform Owwel runs on.
- Backups are encrypted at rest, like the live database.
- A backup is a copy of the whole system, so restoring one is a recovery action taken by us, not a self-service undo button.
- For your own copy, use the exports below. That copy is yours, offline, and does not depend on Owwel at all.
How exports work
You can take your data out at any time, without asking and without notice.
- Product, stock, customer and transaction lists export to CSV, which opens in Excel or Sheets.
- Statements, reports and movement histories export to PDF.
- Exports are available for as long as you can sign in, including while an account is read-only.
- If you need a full copy of everything at once rather than screen by screen, ask at info@owwel.com and we will put one together.
How deletion works
A lapsed subscription does not destroy your books. This is a deliberate choice and it will not change quietly.
- An unpaid or cancelled account becomes read-only. You keep every record and can still export.
- Owwel does not purge inactive accounts to reclaim space.
- You can ask for your account and its data to be deleted, and it will be. That is irreversible, so we confirm it with you first and recommend exporting beforehand.
- Deletion removes data from the live system. Encrypted backups age out on their normal retention cycle rather than being individually rewritten.
- Records we are legally required to keep, such as proof of a payment made to us, are kept for that purpose alone.
The binding versions
This page is written to be understood. Where you need the wording that actually governs the agreement, read the Privacy Policy and the Data Processing Policy. The controls behind all of it are set out in the Security Center.