Privacy Policy

Shoo is a comment management service for businesses running social media ads. It hides spam and scam comments under ad posts and helps businesses reply to genuine customers. This policy explains what we collect, why, and what your choices are. Questions go to privacy@meetshoo.com.

Two kinds of people interact with Shoo: businesses that create accounts, and people who comment on those businesses' ads. This policy covers both.

• Account details: your name, email address, and password (stored as a secure hash), or your Google profile name and email if you sign in with Google.
• Social media data you connect: once you link your Facebook Page or Instagram account, we receive comments on your posts and ads, your replies, and related metadata through Meta's official APIs.
• Business data you connect: if you link tools such as your store, helpdesk, or email platform, we access the customer records needed to provide the service, on your instructions and on your behalf.
• Payment details: handled by Stripe. We never see or store full card numbers.
• Usage data: log and device information needed to run and secure the service, and cookies used to keep you signed in.

When someone comments on a connected business's ad, we process the comment text, the public username, and platform identifiers so we can classify the comment and, where appropriate, draft a reply.

If a commenter chooses to share information with a business in a direct message conversation, for example an email address or order number to get help with a purchase, we use that volunteered information to look up their existing record in that business's own systems. We never infer or guess a commenter's identity, and we handle platform data in line with Meta's Platform Terms.

• To operate the service: classifying comments, hiding spam, drafting replies, and routing conversations to humans.
• To secure accounts, prevent abuse, and provide support.
• To send service emails such as confirmations and receipts.

We do not sell personal information. We do not use the data of a business's customers for advertising or to build profiles for any purpose other than providing the service to that business.

We use a small set of service providers to run Shoo: Supabase (database and authentication), Vercel (hosting), Stripe (payments), Loops (email), and AI model providers that process comment text to classify it and draft replies. Each processes data only to provide their service to us. We also exchange data with Meta's APIs as required to operate on connected accounts. We may disclose information if required by law.

We keep data for as long as your account is active. If you close your account, or email us a deletion request, we delete your account data and the data we hold on your behalf within 30 days, except where the law requires us to keep it longer.

Commenters can request deletion of data Shoo holds about them by emailing privacy@meetshoo.com with the relevant username and business. We respond within 30 days.

Data is encrypted in transit and at rest. Access to production systems is limited and logged. No system is perfectly secure, but we treat the customer data connected to Shoo as production-grade sensitive data, because it is.

Shoo is a business tool and is not directed at children under 16. We do not knowingly collect data from them.

If we make material changes, we will update this page and notify account holders by email. The date at the top always reflects the current version.

privacy@meetshoo.com