Effective date: 06/16/26

Glovely provides customer messaging, CRM, and clienteling tools for businesses.
This Privacy Policy explains what information we collect, how we use it, how we
share it, and how users may request deletion of their data.

This policy applies to Glovely websites, dashboards, messaging channels,
integrations, and related services operated by [Legal business name]
(Glovely, we, us, or our).

1. Information We Collect

We collect information needed to provide customer messaging, CRM, and
clienteling services to businesses.

Account and Business User Information

When a business or team member uses Glovely, we may collect:

• name;

• email address;

• password or authentication information;

• role, permissions, and team membership;

• organization or business name;

• account settings and feature configuration;

• login, session, security, and audit information.

Customer and Contact Information

When a business uses Glovely to communicate with customers, we may process
customer information entered by the business or received through connected
channels, including:

• customer name;

• email address;

• phone number;

• social messaging identifiers;

• profile images or avatar URLs;

• conversation history;

• message content and attachments;

• contact notes;

• labels, preferences, language, tier, and CRM attributes;

• purchase projects, clienteling notes, and follow-up information;

• marketing subscription or consent status when the business enables related
  features.

Meta Channel Information

If a business connects Facebook Messenger, Instagram Messaging, or WhatsApp
Business, we may collect and process information needed to operate those
channels, including:

• Facebook Page identifiers;

• Instagram professional account identifiers;

• WhatsApp Business Account identifiers;

• WhatsApp phone numbers and phone number identifiers;

• channel names and inbox configuration;

• message text, attachments, timestamps, reactions, read/seen status, delivery
  status, and webhook events;

• access tokens, API credentials, webhook verification tokens, and provider
  configuration required to connect and operate the channel.

Technical and Usage Information

We may automatically collect technical information such as:

• IP address;

• browser and device information;

• server logs;

• API request metadata;

• webhook delivery metadata;

• error, diagnostic, and performance logs;

• security events and fraud-prevention signals.

2. How We Use Information

We use the information we collect to:

• create and manage Glovely accounts;

• authenticate users and protect accounts;

• provide shared inboxes for Facebook Messenger, Instagram Messaging, WhatsApp
  Business, email, SMS, and other supported channels;

• receive, display, route, assign, and respond to customer conversations;

• send authorized replies and approved message templates;

• synchronize message delivery, read, seen, and webhook status;

• maintain customer contact records and CRM/clienteling context;

• support retail workflows such as preferences, purchase projects, follow-ups,
  and in-person consent capture;

• connect and maintain third-party integrations selected by the business;

• troubleshoot, debug, secure, and improve the service;

• enforce terms, prevent abuse, and comply with legal obligations.

We do not sell personal information collected through Glovely. We do not use
customer conversation data from Meta channels for unrelated advertising purposes.

3. How We Share Information

We share information only as needed to provide, secure, and support the service.

We may share information:

• with the business account that uses Glovely and its authorized users;

• with Meta, Facebook, Instagram, WhatsApp, and other connected channel
  providers when required to send messages, receive webhooks, configure
  subscriptions, validate accounts, or operate a connected channel;

• with infrastructure, hosting, database, email, logging, monitoring, storage,
  security, and support providers that help us run Glovely;

• with third-party integrations enabled by the business;

• when required by law, legal process, security investigation, or to protect the
  rights, safety, and security of users, customers, businesses, Glovely, or
  others.

4. Meta Platform Data

When a business connects a Meta channel, Glovely uses Meta Platform data only to
provide the connected messaging and customer service functionality requested by
that business.

For example:

• Facebook Messenger data is used to show and respond to Messenger
  conversations.

• Instagram Messaging data is used to show and respond to Instagram direct
  messages.

• WhatsApp Business data is used to show and respond to WhatsApp messages and to
  send approved templates when applicable.

We use Meta Platform data only for the purposes described in this policy and in
accordance with applicable Meta Platform terms.

5. Data Retention

We keep personal information for as long as needed to provide Glovely to the
business account, comply with legal obligations, resolve disputes, prevent abuse,
maintain security, and support business records.

Businesses may delete contacts, conversations, inboxes, and integrations through
Glovely where supported. Some information may remain for a limited period in
backups, logs, audit records, or security systems where necessary for legitimate
business, legal, or security reasons.

6. Data Deletion Requests

Users may request deletion of their personal data by contacting us at:

[privacy contact email, for example privacy@yourdomain.com]

Please include enough information for us to identify the relevant data, such as:

• your name;

• email address;

• phone number;

• business or organization you contacted;

• Facebook Page, Instagram account, or WhatsApp number involved;

• conversation reference, if available.

We may need to verify your request before deleting data. After verification, we
will delete or anonymize personal information unless we need to retain it for
legal, security, fraud-prevention, contractual, or legitimate business reasons.

If you communicated with a business that uses Glovely, you may also contact that
business directly to request deletion of conversation or contact data in that
business workspace.

7. Security

We use administrative, technical, and organizational safeguards designed to
protect personal information. These safeguards may include access controls,
authentication, audit logs, encryption where configured, secure infrastructure,
and monitoring.

No system is completely secure, and we cannot guarantee that information will
never be accessed, disclosed, altered, or destroyed without authorization.

8. International Processing

Glovely and its service providers may process information in countries other
than the country where you are located. Where required, we use appropriate
safeguards for international data transfers.

9. Children

Glovely is intended for business use and is not directed to children. We do not
knowingly collect personal information from children. If you believe a child has
provided personal information to us, contact us so we can review and delete it
where appropriate.

10. Your Rights

Depending on your location, you may have rights to access, correct, delete,
restrict, object to, or receive a copy of your personal information.

To exercise privacy rights, contact us at: contact@glovely.solutions

We will respond according to applicable law.

11. Changes To This Policy

We may update this Privacy Policy from time to time. If we make material
changes, we will update the effective date above and may provide additional
notice where required.

12. Contact Us

For privacy questions or data deletion requests, contact:

[Legal business name] [Privacy contact email] [Postal address, if applicable] [Website URL]