Privacy Policy
Effective date: May 10, 2026
Overview
This Privacy Policy explains how pointO (“pointO”, “we”, “us”, or “our”) collects, uses, shares, and protects information when you use our website, dashboard, AI agent, point-of-sale, kitchen display, and related products and services (collectively, the “Services”). pointO is owned and operated by Closetech AI Inc.
This policy applies both to businesses that sign up for pointO (“business users”) and to the end customers who interact with a business’s pointO AI agent through chat, social media, Google Business Profile, phone, or in-store ordering (“end customers”). Sections below note where a practice applies specifically to one group.
By using the Services, you agree to the practices described in this policy. If you do not agree, please do not use the Services.
Information We Collect
Account and business information
- Name, email address, phone number, and authentication identifiers
- Business profile data (business name, address, hours, menu, contact details)
- Team member roles, permissions, and preferences
- Billing and payment details, processed by Stripe (see “Payments and point-of-sale integrations” below) - we do not store full card numbers ourselves
Social and review platform integrations
When a business connects platforms such as Facebook, Instagram, WhatsApp, Messenger, or Google Business Profile (including through our messaging partner Zernio for Meta channels), we may collect and process:
- Platform account identifiers and page/location IDs
- Page or location names and profile metadata
- Access tokens required to call the platform’s API on the business’s behalf
- Message, comment, and review content and metadata needed to provide the Service
- Conversation context used to generate and manage AI responses
Order, reservation, and end-customer data
When an end customer places an order, makes a reservation, or asks a question through a business’s AI agent, we process the content of that conversation, order details (items, modifiers, totals), contact information provided for pickup/delivery or reservation confirmation, and, for in-person orders, transaction data from connected point-of-sale devices and kitchen display systems.
Usage, device, and log data
- Log data (IP address, browser type, device identifiers)
- Usage events (features used, pages viewed, settings updated)
- Performance and diagnostic data used to improve reliability
Content you provide
Business users may provide content such as brand voice guidelines, prompts, reply templates, and internal notes. We process this content to personalize AI replies and automate workflows for that business.
How pointO Uses AI
In short: pointO is an AI-powered product. AI drafts or sends replies to customer messages, reviews, and orders on a business’s behalf, and AI may summarize or surface information inside the dashboard. This section explains where and how that happens.
pointO’s AI agent uses large language models (currently provided by OpenAI) to read incoming customer messages, reviews, and order requests, and to draft or send replies, take orders, answer questions about a business’s menu or hours, and recommend items. What the AI is allowed to do automatically - versus what requires a human’s approval first - is configured by the business (for example, a business can require human approval before any reply is sent, or before any review reply is posted).
Content processed by the AI can include: the customer message or review being responded to, relevant business content (menu, hours, policies, brand voice instructions), and recent conversation history needed to keep a reply coherent. We do not use business or end-customer conversation content to train third-party foundation models, and we do not use it for advertising.
AI-generated replies can be inaccurate or inappropriate to the specific situation. Businesses remain responsible for reviewing how their AI agent is configured and for the content it sends when operating in a fully automated mode. See also the AI disclaimer in our Terms of Service.
How We Use Information
- Provide, operate, and maintain the Services, including the AI agent, POS, and kitchen display system
- Connect to social, review, and payment platforms on a business’s behalf
- Generate, send, and manage AI responses to messages, reviews, and orders
- Process and fulfill orders, reservations, and payments
- Personalize settings, menus, and automated workflows
- Improve performance, reliability, and the quality of AI responses
- Detect and prevent fraud, abuse, and security incidents
- Comply with legal obligations and enforce our terms
- Communicate service updates, billing notices, and support responses
Legal Bases for Processing
Where applicable law requires a legal basis for processing personal information, we rely on one or more of the following: your consent, performance of a contract with you (or the business you interact with), our legitimate interests (such as securing the Services and improving reliability), or compliance with a legal obligation.
Platform-Specific Data Use
Facebook, Instagram, and Messenger
When a business connects Facebook, Instagram, or Messenger (directly or through Zernio), we request only the permissions necessary to provide the Service - for example, to read page messages or manage comments. We may store the page name and page ID, an access token (stored securely and rotated as needed), and message or comment metadata and content needed for AI replies. We do not sell this data or use it for advertising unrelated to the Service. A business can disconnect these integrations at any time, which revokes our access and stops further processing.
Google Business Profile
When a business connects Google Business Profile, we may collect location names, reviews, and related metadata required to manage responses. Access tokens are stored securely and used only to call the Google Business Profile API for that business’s account.
Payments and point-of-sale integrations
Subscription billing is processed by Stripe; we do not store full payment card numbers on our own servers. Where a business connects a point-of-sale provider such as Square or Clover, we exchange order, menu, and transaction data with that provider’s API to keep orders and menus in sync. Each of these providers processes data under its own privacy policy in addition to this one.
Data Retention
We retain data for as long as an account is active or as needed to provide the Services, comply with our legal obligations, resolve disputes, and enforce our agreements. You can request deletion of your data by contacting us; certain records (such as transaction records) may need to be retained longer where required by law.
Data Storage and Security
We use industry-standard security practices, including encryption in transit (HTTPS), restricted access controls, and secure storage of access tokens and credentials. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
International Transfers
Your information may be processed in countries other than the one where you or your business are located. Where required, we take steps to ensure appropriate safeguards are in place for cross-border transfers.
Your Rights and Choices
- Disconnect a social, review, or point-of-sale integration at any time
- Update or delete your account or business information
- Request access to, export of, or deletion of your personal information, subject to applicable law
- Object to or restrict certain processing, where applicable law provides that right
Children's Privacy
The Services are not directed to children under 13, and we do not knowingly collect personal information from children.
Changes to This Policy
We may update this policy from time to time. We will post changes on this page and update the effective date above. Material changes will be communicated through the Services or by email where appropriate.
Contact Us
If you have questions about this Privacy Policy or your data, contact us at privacy@pointoai.com.