Effective Date: April 5, 2026
Venzallo ("we", "us", or "our"), based in Zagreb, Croatia, provides an automated booking assistant for Instagram. This Privacy Policy describes our practices regarding "Platform Data" (as defined by Meta) and personal information collected via our service.
Venzallo d.o.o.
OIB:
Registration:
Address:
Director:
Contact: privacy@venzallo.com
In accordance with Meta Platform Terms, we provide a clear mechanism for users to request data deletion. You can request the removal of your data at any time:
Once requested, we will delete your conversation history and user identifiers within 7 business days. You can check the status of your deletion request at any time by emailing us at privacy@venzallo.com.
We only collect the minimum data necessary to provide the booking service:
| Data Type | What We Store | Purpose | Retention |
|---|---|---|---|
| Instagram Scoped User ID (PSID) | A Meta-assigned identifier unique to your interaction with the business | Link your conversation to your bookings | Until deletion request or account removal |
| Instagram Username | Your public @handle | Display your name in the salon's booking dashboard | Updated on each interaction; removed on deletion |
| Message Content | Text of messages exchanged with the booking assistant | Provide context-aware responses and process booking requests | Automatically deleted after 90 days |
| Appointment Details | Service type, date, time, and assigned staff member | Create and manage your bookings | Retained for operational needs; removed on deletion request |
| Client Record | Name (derived from Instagram handle), contact data (if provided) | Salon client management | Retained for operational needs; removed on deletion request |
We do not collect: passwords, payment information, location data, photos, or any Instagram content beyond direct messages with the booking assistant.
Our app requests the following Meta permissions, each used strictly for the stated purpose:
| Permission | Purpose |
|---|---|
instagram_basic | Read the business's Instagram profile information (username, profile picture) to display in the Venzallo dashboard. |
instagram_manage_messages | Receive and respond to Instagram DMs via our AI booking assistant to check availability and manage appointments. |
pages_messaging | Send booking responses back to customers via the Page's Instagram messaging API. |
pages_show_list | List the user's Facebook Pages during signup to identify the one connected to their Instagram Business account. |
pages_manage_metadata | Subscribe to Instagram webhook events to receive real-time DM notifications. |
pages_read_engagement | Required by Meta's API to list Facebook Pages during signup and discover the connected Instagram Business account. |
Venzallo uses an AI-powered assistant (based on OpenAI's language model) to process your Instagram messages and manage bookings. Specifically:
We do not sell your personal data. We share data only with sub-processors required for the service:
| Sub-processor | Purpose | Location |
|---|---|---|
| Meta Platforms | Instagram messaging infrastructure | EU/US |
| OpenAI | Natural language processing for booking assistant (training opt-out enabled) | US |
| Microsoft Azure | Backend application hosting | Switzerland (EEA) |
| Hetzner | Database and web hosting | Germany (EEA) |
We process data under Article 6(1)(b) (Performance of a Contract) and Article 6(1)(f) (Legitimate Interest) to maintain service security and response accuracy.
Under the GDPR, you have the right to access, rectify, or erase your data. To exercise these rights, contact privacy@venzallo.com. You also have the right to lodge a complaint with the Croatian Personal Data Protection Agency (AZOP).
You may request a copy of all data we hold about you. Email privacy@venzallo.com with the subject "Data Export Request" and include your Instagram handle. We will respond within 30 days with a JSON file containing all stored data associated with your account.
Venzallo complies with the Meta Platform Terms and Developer Policies. We use Platform Data (data obtained from Meta APIs) solely to provide the booking assistant service to the authorizing business.
We do not sell Platform Data.
We do not: (a) sell Platform Data, (b) use it for advertising or marketing of third parties, (c) transfer it to any ad network, data broker, or other advertising-related service, (d) use it to build or augment user profiles, (e) use it to train AI/ML models outside of providing this service.