Legal

Privacy Policy

Effective August 24, 2026

U-Ctrl Marketing ("U-Ctrl", "we", "us") provides marketing, social-media management, and unified-inbox tools for restaurants and local businesses. This policy explains how information is handled when businesses and their customers interact with the service.

Information we process

• Account, business, restaurant, menu, branch, campaign, and team-member information.
• Connected social-account identifiers, OAuth tokens, Page and professional-account identifiers, and webhook events.
• Messages, comments, replies, message timestamps, and attachments sent to or from a connected business account.
• Profile fields supplied by Meta for messaging, such as name, username, profile photo, verification status, and account-follow relationship.
• Email addresses or phone numbers only when a customer explicitly types them or chooses a Meta contact-sharing quick reply.
• Usage, device, diagnostic, security, and audit information needed to operate and protect the service.

Why we use information

We use information to authenticate users, connect authorized social accounts, display and respond to customer conversations, generate owner-reviewable reply suggestions, operate requested automations, provide support, prevent abuse, and meet legal obligations. We do not infer customer email addresses or phone numbers from public profile data.

How information is shared

A business using U-Ctrl can access conversations and customer details associated with its own connected accounts. We may use infrastructure, hosting, security, and AI service providers to operate the service under appropriate contractual safeguards. Information is also exchanged with Meta when an authorized user connects Facebook or Instagram and when U-Ctrl receives or sends messages on that business's behalf. We do not sell personal information.

Retention and deletion

We retain information while it is needed to provide the service, maintain security and audit records, resolve disputes, or comply with law. Valid deletion requests are fulfilled by deleting or de-identifying covered information unless continued retention is legally required. See our Data Deletion Instructions.

Security and choices

We use administrative and technical safeguards designed to protect information. No system is completely secure. Authorized users can disconnect Meta from U-Ctrl's integration settings, which stops new access through that connection. Meta users can also manage app access in their Facebook or Instagram settings.

Children

U-Ctrl is a business service and is not directed to children under 13.

Changes and contact

We may update this policy as the service changes and will publish the effective date here. Questions or privacy requests can be sent to hello@uctrl.org.