Social

Privacy Policy

Last updated 7 October 2026

This policy explains what Innowi Social collects from a restaurant that uses it, why, who sees it, and how to have it removed. It is written for restaurant owners and the people who manage their social media. It is not legal advice.

1. Who we are and how to contact us

Innowi Social is operated by Innowi, Inc., 3240 Scott Blvd, Santa Clara, CA 95054. For anything about your data, write to marketing@myinnowi.com.

Innowi is the data controller for your Innowi Social account. For the data we receive from Meta and Google on your restaurant's behalf, Innowi acts as a technology provider and service provider to the restaurant that connected those accounts.

2. What we collect

2a. Account data you give us

  • Your name, email address and phone number, as held in your Innowi POS account.
  • Your sign-in through Innowi, including the device identifier used to remember a trusted device for two-factor authentication.
  • Anything you type into the app: captions you edit, notes, settings, photos you upload.

2b. Data from Meta (Facebook Pages and Instagram)

When you connect a Facebook Page or Instagram business account, we receive through the Facebook Pages API and the Instagram API:

  • The Page and Instagram account identifiers and names, and the identifier of the Facebook user who made the connection.
  • Access tokens that let us publish and read on your behalf.
  • The content we publish for you and its identifiers on those platforms.
  • Comments on that content and engagement metrics such as likes, comments, shares, reach and saves.
  • Page and account insights for the content we published.

2c. Data from Google Business Profile

  • Your listing's details: name, address, phone, website, hours, categories, menu and ordering links.
  • Reviews of your listing and any replies you send through the app.
  • Performance metrics for the listing: views, searches, calls, direction requests, bookings and orders.

2d. Data from your Innowi POS account

  • Menu items, descriptions, categories, prices and dish photos.
  • Location details, opening hours and time zone.
  • Sales summaries, best-selling items and busy and quiet periods, used only to decide what is worth posting and when.

2e. Technical data

  • Server logs: the time, address and outcome of requests, including your IP address.
  • Device and browser type.
  • Error reports.

3. How we use each category

  • Account data signs you in, keeps your settings, and lets us contact you about the service.
  • Meta data is used to publish the posts and reels you approve to your Page and Instagram account, and to show you how they performed. Tokens are used only to act on your restaurant's behalf.
  • Google data is used to publish to your listing, to show you reviews and performance, and to tell you when something on the listing changed.
  • Innowi POS data is the raw material: captions, post ideas and short videos are generated with AI models from your own menu and photos, never from invented dishes or prices.
  • Technical data keeps the service running, secure and debuggable.

Where review is enabled in your settings, nothing is published until you approve it. Where you have turned on automatic publishing, posts go out on the schedule you set and you remain able to edit or remove them.

4. Legal basis

  • Contract: providing the service to your restaurant.
  • Consent: connecting a Facebook, Instagram or Google account. You can withdraw it at any time by disconnecting the account.
  • Legitimate interest: keeping the service secure, preventing abuse and improving it.

5. Who we share data with

  • Meta Platforms, to publish to your Page and Instagram account and to read the insights for that content.
  • Google, to publish to your Business Profile and to read its reviews and performance.
  • AI model providers (currently Google Gemini and OpenAI), who receive menu text and dish photos so they can write captions and generate images and short videos. They never receive your access tokens, your customers' data or your sales figures beyond what a caption needs.
  • Amazon Web Services, which hosts the service and stores its data and files in the United States.

We do not sell personal data. We do not use data obtained from Meta's platforms for advertising, for building profiles, or for any purpose other than providing the service to the restaurant that connected the account, consistent with Meta's Platform Terms and Developer Policies.

6. Access tokens

Access tokens for Facebook, Instagram and Google are stored encrypted. They are used only to act on your restaurant's behalf for the features you use. They are revoked and deleted when you disconnect the account in the app, when you remove Innowi from your Facebook or Google settings, or when you delete your account.

7. How long we keep data

  • Access tokens: deleted immediately when you disconnect.
  • Published content and its insights: kept for [12 months] after you disconnect, then deleted.
  • Server logs: 30 days.
  • Account data: for as long as your account exists, then deleted, except what the law requires us to keep, such as invoices.

8. Your rights

You can ask to see the data we hold about you, to correct it, or to delete it. You can disconnect Facebook, Instagram or Google at any time from Settings in the app, or from Facebook's Settings → Business Integrations page, which also tells us to delete the Meta data we hold for that connection. To request deletion of everything, follow the data deletion instructions. Depending on where you are, you may also have the right to object to processing, to data portability, and to complain to a data protection authority.

9. Security

Data travels over encrypted connections. Tokens and POS credentials are stored encrypted. Access to production systems is limited to Innowi staff who need it, protected by multi-factor authentication, and logged. Restaurants can only reach their own data; that is enforced on the server for every request.

10. Children

Innowi Social is a business service for restaurants. It is not directed at, and must not be used by, anyone under 18.

11. International transfers

The service runs on Amazon Web Services in the United States, and data is processed and stored there. If you use the service from outside the United States, your data is transferred there.

12. Changes to this policy

We will post changes on this page and update the date at the top. Material changes will be announced in the app. This version is effective 7 October 2026.