Privacy Policy

Odin ("Odin", "we", "us") provides a workspace application that lets an organization's sales team read and reply to messages sent to their own Facebook Pages. Each workspace is operated by the organization that connects the Page (the "Workspace Owner"). For messages sent by customers, the Workspace Owner is the data controller and Odin acts as the processor.

Contact: privacy@odinsuite.wtf

• Workspace member data: name, email address, role (Admin, Supervisor, Agent), and hashed password.
• Facebook Page data: Page ID, Page name, and the Page access token issued when an admin connects the Page.
• Messenger conversation data: messages sent to and from the connected Page, attachments, timestamps, and delivery/read status.
• Customer profile data supplied by Meta for the connected Page: page-scoped user ID, name, and profile picture, where permitted.
• Workspace-generated data: assignment and ownership history, internal notes, tags, priority flags, reminders, and first-response metrics.
• Technical logs: IP address, browser user agent, and timestamps of sign-in and webhook events, kept for security and troubleshooting.

• Deliver inbound Messenger messages to the workspace queue and send agent replies back through the Meta Send API.
• Assign conversation ownership and prevent two agents from replying at the same time.
• Show customer context (profile, tags, notes, history) to authorized workspace members.
• Produce first-response and workload reporting for supervisors and admins.
• Maintain security, prevent abuse, and diagnose faults.

We do not sell data. We do not use Messenger conversation content for advertising, and we do not use it to train machine-learning models.

Where GDPR applies, processing is based on the Workspace Owner's legitimate interest in operating a business inbox, on performance of a contract with the Workspace Owner, and on compliance with legal obligations. Customers may object or request erasure through the Workspace Owner or through the contact address above.

• Meta Platforms: messages and delivery events are exchanged with the Messenger Platform to send and receive replies.
• Infrastructure providers: hosting, database, and storage vendors that process data on our instructions under contract.
• Legal: where required by law, regulation, or valid legal process.

Conversation data is retained for as long as the Workspace Owner keeps the Page connected, or until deletion is requested. When a Page is disconnected, its tokens are revoked immediately and associated conversation data is deleted within 30 days. Backups are purged within a further 30 days. Security logs are kept for up to 12 months.

• Invite-only access with no public signup, and a forced password change on first login.
• Encryption in transit (TLS) and at rest.
• Signature verification on every inbound Meta webhook.
• Realtime updates delivered on private channels scoped to a single workspace.
• Role-based access so members only see the Pages their workspace has connected.

You may request access to, correction of, export of, or deletion of your data. Workspace members should contact their admin; anyone else can write to privacy@odinsuite.wtf. See our User Data Deletion page for the deletion procedure.

Odin is a workplace tool and is not directed to children under 13 (or the minimum age in your jurisdiction). We do not knowingly collect their data.

We may update this policy. Material changes will be announced to Workspace Owners, and the "last updated" date above will change.