Privacy policy

Account data: your name, phone number, email, business name, and the permissions you assign to each of your staff.

Business data: everything you enter — customers, invoices, stock, shipments, journal entries. This is yours; we store and process it on your behalf.

Technical data: sign-in times, device type, IP address, and the activity log inside the system. We need these for security and for fixing problems.

Health records, for clinics, pharmacies and labs: if your business runs a clinic, pharmacy or laboratory on the system, it records its patients' details — visits, diagnoses, prescriptions, test results, allergies and attached files. The business collects this data about its own patients; we store and process it on the business's behalf and never use it for anything else.

Photos and files: product photos, receipts and attachments you choose to upload. The camera is used only when you tap to scan a barcode or take a photo.

Location, for delivery companies (OWL Delivery): when a driver marks a parcel delivered, the app records where they were standing, so the office can see where each delivery happened; and when you tap “my location” on an address, that point is saved with it. The location is read only at those taps, while the app is open — never in the background.

To run the system: without customer data there is no invoice, and without an activity log you cannot tell who cancelled one.

To help you when you contact support.

To protect your account — unusual sign-ins are caught in the log.

To bill your subscription.

We do not sell your data, rent it, or use it for advertising. Not once, and not to anyone.

Your staff — each person sees only what their permissions allow.

Our team — in two cases: when you ask for support and grant access, or during a security incident that requires us to act. Every access from our side is logged.

Each company is isolated at the database level, not at the screen level. Even a bug in the application cannot let one company reach another company's rows.

Data is encrypted in transit (HTTPS) and at rest.

Infrastructure runs on established providers — Supabase for the database, Cloudflare for delivery. We do not keep customer data on machines in our offices.

Passwords are never stored as text. They are stored as a one-way hash, which means we cannot read them either.

We use external services only to operate: database hosting, site delivery, and email sending.

If you connect a delivery company or a payment provider yourself, the data that operation needs is passed to them — and only that.

Only if you connect them. You can connect your business to Claude (by Anthropic) or ChatGPT (by OpenAI) and ask about your work in plain words. You connect from your OWL account, with your consent, for one business, with your own permissions — nothing more.

What reaches the assistant: only what is asked for in that conversation — today's sales, the customers who owe you, or a patient's file if you ask about one at your clinic. We send nothing on our own, and we do not read or keep your conversations. What reaches the assistant is governed by the policy of the company that runs it (Anthropic or OpenAI).

Changes need your yes: the assistant changes nothing directly. It proposes, shows exactly what will change, and nothing happens until you agree. Most changes can be undone.

Medical records: the assistant shows and summarizes what the clinic wrote, for the clinic's own staff, and never suggests a diagnosis, treatment or medicine. In ChatGPT, medical records are read-only.

What we keep: a log of each tool the assistant used, when, and whether it worked, and every proposal with its before and after values — so you can review and undo it. It is part of your business's records, like the activity log. Pictures you send in the chat to add to a product or a file are stored in your business like any upload. The connection token is stored only as a one-way hash.

Disconnecting is yours: in OWL → Settings → AI you see what is connected and disconnect it with one tap, and the business owner can switch off connections or changes for the whole business. A connection unused for 90 days stops by itself.

For as long as your account is active.

If you end your subscription, your data stays long enough for you to export it or come back.

The activity log is not deletable — not by you and not by us. That is deliberate: a log that can be edited is worthless as evidence, for you as much as against us.

Export your data at any time in a format other software can open.

Correct anything that is wrong.

Delete your account, or your whole business — the steps are on the delete-account page: owlplatform.net/en/delete-account

Ask us about anything on this page and get a straight answer.

OWL ERP and OWL Delivery, for Android and iPhone, open the same systems as their websites, with the same account. The apps keep nothing on the device beyond your signed-in session, and that session is excluded from device backups.

OWL ERP asks for one device permission: the camera, and only when you tap to scan a barcode or photograph a product.

OWL Delivery asks for two: the camera, to scan a parcel's QR label or photograph an order message, and location, only at the two moments described above — marking a delivery, or pinning an address — and only while the app is open. It never tracks a driver in the background.

Neither app reads your contacts, messages or files, and neither contains advertising or tracking code.

Accounts in the apps are created by the business, not in the app: the owner's account is opened with us, and the owner adds staff — and, in OWL Delivery, its drivers and merchants — from inside the system.

The service is for businesses, not for individuals under 18. We do not knowingly collect data from children.

If something material changes here, we will tell you — we will not quietly edit the page.