Effective Date: April 5, 2026
Venzallo ("we", "us", or "our"), based in Zagreb, Croatia, provides an automated booking assistant for Instagram. This Privacy Policy describes our practices regarding "Platform Data" (as defined by Meta) and personal information collected via our service.
Venzallo
Address: Zagreb, Croatia
Contact: privacy@venzallo.com
In accordance with Meta Platform Terms, we provide a clear mechanism for users to request data deletion. You can request the removal of your data at any time:
Once requested, we will delete your conversation history and user identifiers within 7 business days. You can check the status of your deletion request at any time by emailing us at privacy@venzallo.com.
We only collect the minimum data necessary to provide the booking service:
| Data Type | What We Store | Purpose | Retention |
|---|---|---|---|
| Instagram Scoped User ID (PSID) | A Meta-assigned identifier unique to your interaction with the business | Link your conversation to your bookings | Until deletion request or account removal |
| Instagram Username | Your public @handle | Display your name in the salon's booking dashboard | Updated on each interaction; removed on deletion |
| Message Content | Text of messages exchanged with the booking assistant | Provide context-aware responses and process booking requests | Automatically deleted after 90 days |
| Appointment Details | Service type, date, time, and assigned staff member | Create and manage your bookings | Retained for operational needs; removed on deletion request |
| Client Record | Name (derived from Instagram handle), contact data (if provided) | Salon client management | Retained for operational needs; removed on deletion request |
We do not collect: passwords, payment information, location data, photos, or any Instagram content beyond direct messages with the booking assistant.
Our app requests the following Meta permissions, each used strictly for the stated purpose:
| Permission | Purpose |
|---|---|
instagram_basic | Read the business's Instagram profile information (username, profile picture) to display in the Venzallo dashboard. |
instagram_manage_messages | Receive and respond to Instagram DMs via our AI booking assistant to check availability and manage appointments. |
pages_messaging | Send booking responses back to customers via the Page's Instagram messaging API. |
pages_show_list | List the user's Facebook Pages during signup to identify the one connected to their Instagram Business account. |
pages_manage_metadata | Subscribe to Instagram webhook events to receive real-time DM notifications. |
pages_read_engagement | Read page metadata required to configure the Instagram messaging integration. |
business_management | Access business-level APIs to manage Instagram messaging webhook subscriptions. |
Venzallo uses an AI-powered assistant (based on OpenAI's language model) to process your Instagram messages and manage bookings. Specifically:
We do not sell your personal data. We share data only with sub-processors required for the service:
| Sub-processor | Purpose | Location |
|---|---|---|
| Meta Platforms | Instagram messaging infrastructure | EU/US |
| OpenAI | Natural language processing for booking assistant (training opt-out enabled) | US |
| Microsoft Azure | Backend application hosting | Switzerland (EEA) |
| Hetzner | Database and web hosting | Germany (EEA) |
We process data under Article 6(1)(b) (Performance of a Contract) and Article 6(1)(f) (Legitimate Interest) to maintain service security and response accuracy.
Under the GDPR, you have the right to access, rectify, or erase your data. To exercise these rights, contact privacy@venzallo.com. You also have the right to lodge a complaint with the Croatian Personal Data Protection Agency (AZOP).
Venzallo complies with the Meta Developer Data Use Policy. We do not use Platform Data to inform credit eligibility, offer surveillance tools, or provide data to any ad network or data broker.