TOZA (the "Service") is a family of business software products owned by Buural Soft LLC ("we"): SMS delivery, phone verification, a Messenger commerce bot, product and inventory records, point of sale and order management, staff and customer records. Each product runs on its own but shares one sign-in and one organization record. This Privacy Policy explains how we collect, use, and protect your personal information.

1. Information we collect

Account information: name, phone number, email address, and login credentials. Sign-in is based on the phone number.
Facebook information (only if you use the chat product and connect a Page): the public profile (name, profile picture); the connected Facebook Page and permission to manage it; messages received from end users in that Page's Messenger chat, sender names, and other information needed to process orders.
Business data: your organization's products, services, inventory, orders, customers, staff, and payment records.
Technical information: device, browser, IP address, cookies, and usage logs.

2. How we use information

To provide the Service, receive and process orders, and communicate with customers.
To read and reply to the connected Page's Messenger messages in order to receive and process orders.
To verify accounts (one-time SMS codes), ensure security, and prevent fraud.
To improve the Service, provide support, and handle billing.

3. Use of Facebook data

We use Facebook/Meta platform data only to manage orders and customer messages for your organization's connected Page, within the scope you authorize. We do not sell or rent this data for advertising purposes, and we comply with the Meta Platform terms and policies.

4. AI processing

The chat bot and the TOZA assistant run on AI providers used by TOZA (OpenAI, Anthropic). When they are used, conversation text, voice input, the product list and the business data needed to answer are sent to those providers. Usage is charged to the organization's wallet. An organization can turn AI off in the "Wallet" section — the bot then answers only from the merchant's own pre-written answers.

5. Sharing information

We do not sell your personal information to third parties. We may share it only in the following cases:

With trusted service providers that help operate the Service (hosting, file storage, payment systems, SMS gateway, AI) — only to the extent necessary.
When required by law or a competent authority.

6. Data retention

We retain information for as long as necessary to provide the Service and to meet our legal obligations. Temporary conversation state (cart, verification codes) is deleted automatically within hours.

7. Security

We take reasonable technical and organizational measures to protect your information from unauthorized access and loss. Passwords and one-time codes are stored in a form that cannot be read back.

8. Your rights and data deletion

You have the right to access, correct, or request deletion of your information. To delete your data completely, email bsoft0108@gmail.com with the subject "data deletion request" and include your registered phone number. We will delete your personal information within 30 days of receiving the request and confirm by email.

You can disconnect the Facebook connection yourself at any time: "Organization → Settings → Facebook → Disconnect". Disconnecting removes the Page token from our servers.

The full procedure — what is deleted and what is kept — is on the Delete your data page.

9. Cookies

We use cookies to keep you signed in and to store your preferences. You can limit cookies through your browser settings; note that sign-in will not work if cookies are blocked. Merchants' public pages may use third-party (Meta) cookies — see section 10.

10. Merchant public pages and the Meta Pixel

Merchants' public pages on TOZA (booking pages at time.toza.mn/… and event ticket pages at event.toza.mn/e/…) may use the Meta Pixel when the merchant has set it up. The Pixel belongs to the merchant's own Meta business account, and the information it collects is used by Meta and by that merchant.

What is collected: actions such as opening the page, making a booking or registration, and completing a payment; the service or event name; the order amount; and information about your browser, device and IP address. TOZA itself does not pass your name or phone number to the Pixel. Depending on the merchant's Meta settings (for example "automatic advanced matching"), information you enter on the page may be sent to Meta in hashed form.
Purpose: Third parties, including Meta, may use cookies, web beacons and other storage technologies to collect or receive information from this page and elsewhere on the internet, and use that information to measure ad results and target ads.
Responsibility: The merchant decides whether to use the Pixel and is responsible for how the collected information is used. Information Meta receives is governed by Meta's Privacy Policy. TOZA does not use this information for its own advertising.
Opting out: You can opt out of ad targeting through Facebook Ad Preferences, aboutads.info/choices and youronlinechoices.eu, or block third-party cookies in your browser. This does not affect your ability to book.

11. Changes to this policy

We may update this policy when necessary. Changes will be posted on this page and the "last updated" date will change.

12. Contact us

For questions or requests, contact bsoft0108@gmail.com or call 8098-7766. Data controller: Buural Soft LLC.