Privacy policy
The short version
- What we collect: your Facebook name, the messages you send to a business's Facebook Page, and the inquiry details you share, such as dates, number of guests and event type.
- Why: so the business can answer you faster, keep track of your inquiry, and get an alert when you're waiting on a reply.
- Who sees it: the business you messaged and its staff, plus the service providers we use to run Owner Relay (Meta, our AI provider Anthropic, our database and hosting providers, and Telegram for staff alerts).
- How long: 12 months after your last message, then it's deleted. You can ask us to delete it sooner at any time.
- What we don't do: sell your data, use it for advertising, or use your messages to train AI models.
1. Who we are and what this policy covers
Owner Relay ("we", "us") is a service that helps resorts, event venues and other businesses answer and keep track of inquiries sent to their Facebook Page through Messenger. We call those businesses our "business customers."
This policy covers three groups of people:
- Guests: anyone who sends a message to a Facebook Page that uses Owner Relay.
- Business customers and their staff who use Owner Relay.
- Visitors to ownerrelay.com, including people who join our waitlist.
When you message a business, that business decides how your inquiry is handled. Under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), the business is the personal information controller for your messages and Owner Relay is a personal information processor acting on its instructions. For our own business customers' account details and our website, Owner Relay is the controller.
2. What we collect
If you message a business that uses Owner Relay
- Your name as it appears on Facebook, and the page-scoped ID that Meta assigns to you for that Page. This ID only works for that one Page.
- The messages you send to the Page and the replies sent back to you, whether written by staff or by Owner Relay.
- Inquiry details you choose to share in the conversation, such as your preferred dates, number of guests, type of event, and any phone number or email address you type in.
- Times and status: when you first messaged, when someone first replied, whether the conversation was passed to staff, and whether the inquiry ended as booked or not booked.
We do not collect your Facebook password, your friends list, your location, payment card details, or anything outside your conversation with that Page.
If you are a business customer
- Your name, business name, email address and phone number.
- Your Facebook Page ID and the access token Meta issues when you connect your Page to Owner Relay.
- The Telegram chat details we use to send alerts to your staff.
- The "approved facts" you give us: rates, capacity, amenities, packages and policies that Owner Relay is allowed to tell guests.
- Billing records, such as invoices and payment confirmations. Card payments are handled by our payment processor, Stripe. We never see or store full card numbers or bank passwords.
If you visit ownerrelay.com or join the waitlist
- Whatever you enter in the waitlist form: usually your name, business name, contact details and a short message.
- Basic server logs kept by our hosting provider (IP address, browser type, pages requested, time), used for security and troubleshooting.
3. How we use it
- To answer common questions using only the facts the business has approved.
- To pull your dates, number of guests and event type out of the conversation so staff don't have to ask twice.
- To alert the business's staff about a new inquiry and remind them if it hasn't been answered.
- To pass the conversation to a staff member when it needs a person, such as confirming availability or a special price.
- To send the business owner a weekly report: number of inquiries, how many went unanswered, typical reply time, and how many were booked.
- To keep the service running: fixing errors, preventing duplicate messages, and stopping abuse.
- To invoice business customers and keep the records tax law requires.
We use information we receive from Meta only to provide Owner Relay to the business you messaged. We do not sell personal data, use it to advertise to you, share it with data brokers, or contact guests for our own marketing. Owner Relay only sends automated replies within the 24-hour window Meta allows after your last message.
4. Automated replies
Some replies you receive may be written automatically by an AI model (Claude, made by Anthropic). The AI is limited to the facts the business has approved. It is not allowed to confirm availability, agree to a price that differs from the business's published rates, or make exceptions to the business's policies. Those questions are always handed to a staff member.
If you ask to speak with a person, the conversation is passed to the business's staff. No decision that legally affects you, such as accepting or refusing a booking, is made by the AI alone.
5. Legal basis for processing
Under Section 12 of the Data Privacy Act, we process personal information because:
- you contacted the business and asked for information, and processing your message is needed to respond to that request before any booking is made;
- the business has a legitimate interest in answering and tracking the inquiries it receives;
- for business customers, it is needed to perform our agreement with you; and
- some records, such as invoices, must be kept to comply with tax law.
We do not collect sensitive personal information as defined by the Act. Please don't send health, government ID or financial account details through Messenger. If you do, we handle it under this policy and delete it on the same schedule.
6. Who sees your information
| Who | What they see | Why |
|---|---|---|
| The business you messaged and its staff | Your conversation and inquiry details | To reply to you and handle your booking |
| Meta Platforms | Messages sent through Messenger | Meta delivers every Messenger message and has its own privacy policy |
| Anthropic (AI provider) | The message being answered, recent conversation context, and the business's approved facts | To read the inquiry and draft a reply. Under its commercial terms, Anthropic does not train its models on this data. |
| Supabase (database) | Stored conversations, inquiries and account records | To store data securely |
| Our application hosting provider | Data passing through our servers | To run the Owner Relay software |
| Stripe (payments) | Business customers' billing name, email and payment details | To take subscription payments. Guest messages are never sent to Stripe. |
| Telegram | Staff alerts, which include your name and a short preview of your message | To notify the business's staff |
| Government or law enforcement | Only what a valid legal request requires | To comply with the law |
Each service provider may use your information only to provide its service to us. If Owner Relay is ever sold or merged, this policy continues to apply to the information transferred.
7. Transfers outside the Philippines
Owner Relay is based in the United States, and our service providers store and process data in the United States and other countries. When your information leaves the Philippines, we remain responsible for protecting it under the Data Privacy Act, and we only use providers that are bound by written data protection and security commitments.
8. How long we keep it
| Information | How long |
|---|---|
| Guest messages and inquiry records | 12 months after the last message in the conversation, then deleted |
| Raw message events received from Meta | 30 days |
| All guest data for a business that cancels | Deleted within 30 days of cancellation, unless the business asks for a copy first |
| Business customer account details | While the account is open, and deleted within 30 days after it closes |
| Invoices and payment records | As long as tax and accounting law requires |
| Waitlist sign-ups | Until you become a customer or ask to be removed, and no longer than 12 months |
| Database backups | Deleted data can remain in encrypted backups for up to 30 days before it is overwritten |
Telegram alerts are stored in the business's own Telegram chats. The business controls those messages, and we cannot delete them for you. Messages also remain in the Page's inbox on Facebook, which the business and Meta control.
9. Security
- Data is encrypted in transit (HTTPS) and stored with a database provider that encrypts it at rest.
- Every message we receive from Meta is checked against Meta's signature, so we reject anything that didn't come from Meta.
- Only people who need access to run the service can see stored data, and each business can only see its own inquiries.
If a security breach puts your personal information at real risk, we will notify the National Privacy Commission and the affected people within 72 hours of finding out, as Philippine rules require.
10. Your rights
Under the Data Privacy Act you have the right to:
- be told how your personal information is used (this page);
- get a copy of the information we hold about you;
- correct information that is wrong or incomplete;
- object to processing, or ask us to block or delete your information;
- receive your information in a common electronic format;
- be compensated for damage caused by misuse of your information; and
- file a complaint with the National Privacy Commission.
To use any of these rights, email hello@ownerrelay.com or message the business directly. We may ask you to confirm who you are before we act, and we reply within 15 days. Using these rights is free.
11. How to delete your data
You can ask us to delete everything Owner Relay holds about you at any time.
- Email hello@ownerrelay.com with the subject line "Delete my data."
- Include your name as it appears on Facebook, the name of the business Page you messaged, and roughly when you messaged it. This lets us find your conversation.
- We confirm we received your request within 5 business days, and we delete your messages and inquiry records within 30 days. We email you when it's done.
This removes your data from Owner Relay. It doesn't delete the conversation from the business's Facebook Page inbox or from your own Messenger, because those are held by Meta. You can delete the conversation on your side in Messenger at any time.
Business customers can disconnect Owner Relay from their Page in Meta Business Suite settings and email us to close the account. We then delete the business's data on the schedule in section 8.
12. Children
Owner Relay is a tool for businesses and is not aimed at children. If someone under 18 messages a business that uses it, their information is handled the same way. A parent or guardian can ask us to delete it using the steps above.
13. This website
ownerrelay.com does not use advertising or analytics cookies and does not load third-party tracking scripts. If you pick a region in the pricing section, your browser remembers that choice in its local storage; it never leaves your device. If that ever changes, we will update this section first.
14. Changes to this policy
If we change this policy, we will post the new version here and update the effective date at the top. If a change materially affects how we use personal information, we will email business customers at least 14 days before it takes effect.
15. Contact us
Owner Relay
Topsham, Maine, United States
hello@ownerrelay.com
Data Protection Officer: Chev Juntura, reachable at the same email address.