Privacy Policy

This policy covers two things that are easy to confuse, so they are separated here.

• Your account data. The details of you as an Owwel customer: your name, email, business and subscription. Owwel decides how this is handled, so Owwel is the controller of it, and this policy governs it.
• The data you enter. Your customers, your staff, your sales. Owwel only holds this to run the software for you, on your instructions. You are the controller and Owwel is the processor. That relationship is set out in the Data Processing Policy.

• Account details: your name, email address, and the businesses and branches you own or are invited to.
• Subscription details: your plan, its status and dates. Card details are handled by the payment provider and are never stored in Owwel.
• Sign-in records: when you signed in, from what device, and whether it succeeded. Kept so a stolen password alone cannot open your books.
• Support correspondence: what you write to us and our replies.
• Technical records: error reports raised automatically when something breaks, with the context needed to reproduce it.

Each category exists because something you use needs it.

• To provide the service you subscribed to, which is the performance of our contract with you.
• To keep the account secure, which is our legitimate interest and yours.
• To take payment and keep the records of it the law requires us to keep.
• To answer you when you get in touch.
• To find and fix faults in the software.

Owwel does not sell personal data, does not share it with advertisers, and does not use your business records to train models.

Only the suppliers needed to run the service, each handling only what their job requires:

• The hosting and database platform that stores the data and runs the application.
• The email provider that sends sign-in codes, password resets and service notices.
• The SMS provider that delivers marketing campaigns you choose to send.
• The error monitoring service that receives fault reports.
• The payment provider that processes your subscription payment.

We may also disclose data where the law requires it. Where that happens and we are permitted to tell you, we will.

Owwel runs on managed cloud infrastructure, which may store and process data in a country other than your own. Wherever it sits, it is encrypted in transit and at rest, and the access controls described in the Security Center apply equally.

• Your business records are kept for as long as your account exists. A lapsed subscription makes an account read-only rather than deleting anything.
• Sign-in and audit records are kept so there is a usable history of who did what.
• Payment records are kept for the period the law requires.
• When you ask for deletion, live data is deleted. Encrypted backups age out on their normal cycle rather than being individually rewritten.

Over the personal data Owwel holds about you, you can ask to:

• See a copy of it.
• Correct it where it is wrong. Most of it you can correct yourself in the app.
• Delete it, subject to records we must keep by law.
• Receive it in a portable form. Most data exports to CSV or PDF from the app already.
• Object to a particular use of it, or ask that it be restricted.

Write to info@owwel.com and we will respond. If we cannot do what you have asked, we will explain why rather than ignore the request.

Owwel sets only the cookies it needs to keep you signed in and to remember a confirmed device. What each one does is listed in the Cookie Policy.

Owwel is business software and is not intended for children. We do not knowingly collect data from anyone under 18. If you believe a child's data has been entered into Owwel, tell us and it will be removed.

The date at the top shows when the current wording took effect. Material changes will be notified rather than made quietly.