Privacy Policy

This Privacy Policy explains how FOM collects, uses, stores, and protects information when people access the FOM web portal, mobile app, and related support or onboarding flows.

FOM operates as a business software platform for shop owners and invited staff. In most cases, the shop owner controls the customer and operational data entered into the workspace, while FOM acts as the hosted service provider that stores and processes that data to deliver the service.

We collect information in several categories.

• Account details: name, email address, phone number, locale, password credentials or linked authentication identities, consent history, and account status.
• Shop workspace data: shop profile details, invited staff memberships, permissions, customer records, order records, delivery assignments, notes, and message templates.
• Billing and subscription data: trial status, subscription state, invoices, billing notes, and support-related payment records or references.
• Technical and device data: device identifiers, push notification tokens, browser details, app version, IP address, timestamps, session records, and security events.
• Support and communication data: contact-form submissions, onboarding notes, support requests, and operational audit history tied to account activity.

Some information is received from connected products or platform features that the shop chooses to use.

• Messenger integrations: page details, conversation metadata, customer-facing profile labels, message content selected by the user for processing, and delivery or read events received from Meta.
• Facebook Page comments: when a shop turns on Live comment orders, comments on the connected Page's posts and Live videos (the commenter's name, Facebook ID and comment text) are read to build order drafts. FOM sends the commenter one private reply in Messenger and posts one public reply under the comment as the Page. This stops when the Page is disconnected.
• Notifications: push delivery tokens, notification preferences, receipt state, and in-app notification history.
• Uploads and exports: invoice files, attachments, imported order data, and exported reports generated by user action or scheduled platform workflows.

We use information to operate, secure, and improve the platform.

• Service delivery: authenticating users, loading shop workspaces, managing orders, customers, deliveries, reports, exports, and Messenger workflows.
• Communications: sending service notices, billing reminders, support responses, operational alerts, and notifications chosen by the user or shop settings.
• Security and abuse prevention: monitoring sign-in activity, protecting sessions, detecting suspicious behavior, investigating incidents, and maintaining audit trails.
• Product operations: troubleshooting issues, measuring feature usage, onboarding new shops, and improving the stability or usefulness of the service.

We do not sell customer or shop data. We may share information only in the limited situations needed to run or protect the service.

• Infrastructure and hosting providers: to store, secure, and deliver the platform.
• Communications and integration providers: to send email, push notifications, or Messenger-related messages and files.
• Support and compliance review: when needed to investigate incidents, process deletion-related reviews, resolve disputes, or protect the safety and rights of users and the platform.
• Legal obligations: when disclosure is required or permitted by law, regulation, court order, or lawful enforcement request.

We retain account and shop records while the workspace is active and for additional periods when required for billing, security, legal compliance, fraud prevention, operational continuity, or support history.

When a shop user schedules self-service account deletion, the old account enters a grace period. If the deadline passes, sign-in access is removed, login identifiers are detached, and any later account created with the same contact details does not automatically reconnect to the previous workspace.

Some records may still be retained after account closure where required or permitted by law, security obligations, platform integrity, financial recordkeeping, or protected business operations.

We apply technical and organizational controls designed to protect platform data, including encryption in transit, access restrictions, session controls, permission-based workspace access, audit logging, and environment-based service credentials.

No system can guarantee absolute security. Users are also responsible for keeping account credentials secure, using trusted devices, and limiting workspace access to authorized staff only.

Depending on your role and local law, you may have the ability to access, correct, export, or request deletion of certain account or workspace information.

• Shop owners can manage profile details, export operational records, update shop settings, and review account deletion options from the platform.
• Users can control some notification preferences and may contact support regarding access, billing, or data-handling requests.
• Where a request cannot be fully honored because of legal, security, billing, or operational obligations, we may retain the minimum information necessary for those purposes.

We may update this Privacy Policy as the platform, integrations, or legal requirements evolve. Material updates will be reflected by a new effective version or date.

Questions about privacy, access, account deletion, or data handling should be directed to support using the contact details below.