MeOlogy helps a business reply to its own customers on Facebook and Instagram,
and answers the business's telephone. A business connects its accounts to us,
and we process the messages and comments its customers send it and the calls
they make to it.
Who this covers
Two groups. The business that connects its accounts to us,
and the customers who message, comment on, or telephone that
business. If you messaged or called a salon and landed here, you are in the
second group.
What we collect
- The content of messages and comments sent to a connected business account,
including any images, video or voice notes attached.
- The sender's public display name and the account identifier the platform
gives us. For a direct message, we may look the display name up from the
platform ourselves if it did not arrive with the message. We do not
receive email addresses or phone numbers from Meta.
- A phone number you give the business's assistant to make a booking. We
keep our copy encrypted and remove it, with the message you typed it in,
once you have been quiet for the retention period below. We pass it to
the business's booking system, which keeps its own copy under the
business's own terms.
- When you telephone a connected business, the number you call from and what
is said on the call while it lasts. We keep no recording of the call.
- Replies the business sends, and drafts we prepare for the business to approve.
- Notes the business keeps about a customer, in the business's own words
("prefers a particular technician"), kept for as long as the business
keeps that customer's record.
- For the connected business: its account names, identifiers, and access tokens.
- Counts of messages processed, for billing.
What we do with it
We read an incoming message, work out what it is asking, and prepare a reply
for the business to review. Nothing is sent to a customer without the business
having approved it or having set that action to send automatically.
When you telephone a connected business, an automated assistant answers and
says so. It can tell you the business's opening hours and, where the business
has given us a number for it, put you through to a person there.
We do not sell personal information. We do not use it for advertising, and we
do not use message content or calls to train our own models.
Where it is stored, and who else sees it
Our servers are in the European Union. If you are in Australia,
this means your information is disclosed to an overseas recipient. We remain
accountable for it under the Australian Privacy Principles.
To draft a reply and to read a photo, message text and photos are sent to
language model providers in the United States, which process what we send and
return a result.
What you say on a call is processed by a language model provider in
the United States, which answers you on the call, so your voice leaves Australia.
That provider may keep what was said for up to 30
days to check for misuse. Nothing else keeps it. The recording notice you hear
at the start of a call refers to that log; we make no recording of our own.
Access tokens are encrypted before they are stored. They are never written
to logs.
Our support staff can see account and contact details and any feedback a
business sends us, including a screenshot it attaches; they never see other
message content.
If a public authority asks us for personal information, we check that the
request is one the law requires or authorises us to answer before we answer it.
We disclose only what the request names. We keep a record of the request, our
answer and the reason.
How long we keep it
Message, comment and draft content is deleted after
90 days. The number you called a business from is kept
for 90 days as well. Records we need for billing are kept
longer, without the message content.
Your rights
You can ask for a copy of what we hold about you, ask us to correct it, or
ask us to delete it. See deleting your data.
If you are unhappy with how we handled a request, you can complain to the
Office of the Australian Information Commissioner at
oaic.gov.au.