Privacy Policy

Last updated: November 6, 2026.

1. Introduction

OliveBox is a scheduling and business management platform operated by Mobi Mouse d.o.o., Stojana Protića 39, 11000 Belgrade, Serbia, PIB: 104122416. OliveBox includes OliveBox AI Chat Asistent, which enables businesses to connect Facebook Pages and use an AI assistant to respond to customer messages.

This policy explains our processing of personal data and applies to business customers and, where applicable, people who communicate with connected Pages, even if they do not have an OliveBox account.

2. Controllers and Processors

Mobi Mouse d.o.o. operates OliveBox and acts as an independent controller for its own account administration, contracts, security and legal obligations. For a customer's connected Page and client communications, the business operating the Page generally determines the purposes of processing and Mobi Mouse acts as its processor. Roles depend on the particular processing activity.

Meta and other providers may independently determine purposes for their own services. Applicable Serbian data protection law and, where applicable, the GDPR govern the relevant processing.

3. Data We Collect

Business account data may include the business name and address, contact person's name, email and phone number, and appointment and related business records. Businesses may also enter their clients' names, contact details and appointment records. They are responsible for informing clients and identifying an applicable legal basis for their processing.

Facebook Messenger conversation data

For a connected Page, we process the Page identifier, a Page-scoped user identifier (PSID), text messages, message and conversation identifiers, timestamps and technical information needed to operate the integration. A display name may be obtained from Meta when available and permitted. Messages may contain information a person chooses to provide, such as contact details or appointment inquiries. This does not give OliveBox access to all Facebook profile information or private Facebook data.

Business authorization data

Connecting a Page involves its identifier, Page access token and related authorization information. This is separate from customer conversation data and is used to operate the connection.

4. Purpose and Legal Basis for Processing

We process data to manage accounts, provide and support the service, administer subscriptions and billing, protect the service and comply with legal obligations. Depending on the activity, the applicable legal basis may be performance of a contract, a legal obligation or a legitimate interest. A business controller determines the basis for its own customer communications.

Messenger data supports receiving and responding to customer-initiated messages, AI assistance, answers about a business and its services, prices and opening hours, appointment inquiries, necessary conversation context and history for authorized business users, security and troubleshooting. We do not sell Meta Platform Data or use it for unauthorized advertising or unrelated profiling.

5. Artificial Intelligence and Automated Message Processing

Incoming messages may be processed by an AI system. Relevant messages, conversation context and business information may be transmitted to an external AI service provider when needed to generate a response. Responses can be generated automatically without direct human involvement and may be inaccurate. Authorized business representatives can review conversation history and respond.

Please avoid sending unnecessary sensitive personal information in a conversation. AI providers' processing, retention and any model-training use depend on the provider and its contractual and technical settings.

6. Data Sharing and Service Providers

Information may be exchanged with Meta to operate Messenger, and with service providers that support OliveBox, such as cloud hosting, SMS and, where used, external AI processing and other technical services. Providers process information to supply their services under the applicable arrangements; this is different from selling it for unrelated commercial purposes. We may also disclose information to authorities when legally required.

Meta separately processes information under its Privacy Policy. OliveBox AI Chat Asistent integrates with Meta's official services but is an independent product of Mobi Mouse d.o.o.; it is not operated or endorsed by Meta.

7. Storage, International Transfers and Security

OliveBox application data has been hosted on Amazon Web Services (AWS) in Ireland. This does not mean that all Messenger content, provider requests, logs or backups are stored or processed there. Meta and other providers may process information in other countries, including outside the European Economic Area. Where applicable law requires it, transfers are subject to appropriate legal safeguards.

We use technical and organizational measures appropriate to the service, including access controls for business accounts and conversations. Page access credentials are used to operate the integration and should be protected from unauthorized access. No method of transmission or storage can be guaranteed completely secure.

8. Retention and Deletion

Business account records, Messenger conversations and their metadata, technical and security logs, Page credentials, backups and legally required records can have different retention needs. We retain information only for the relevant purpose and applicable legal obligations. Accounting records may be subject to statutory retention requirements.

Meta Platform Data must be deleted when no longer needed for a permitted purpose, following an applicable user, business or Meta request, or when otherwise required under applicable Meta terms or law, subject to applicable exceptions. Backups and service providers must also be considered when handling deletion. See our Facebook Messenger Data Deletion Instructions.

9. Your Rights

Depending on applicable law, you may request access, correction, deletion, restriction or portability of your personal data, object to processing, or complain to the Serbian Commissioner for Information of Public Importance and Personal Data Protection or another competent authority. These rights may also apply to someone who contacted a business via Messenger without an OliveBox account.

Contact support@olivebox.net. Reasonable identity verification may be needed; never send a Facebook password or access token. Where the business is the controller, we may direct your request to it or assist it in responding.

10. Data of Minors

OliveBox business accounts are intended for adults, but a minor may contact a business through its Page. If you have concerns about a minor's personal data, contact us or the business operating the Page so the request can be considered under applicable law.

11. Cookies and Changes to This Policy

Our website and applications use essential cookies and technical logs needed for their operation. The demo form may load Google reCAPTCHA to help prevent abuse; Google may process technical information and use cookies in accordance with its Privacy Policy and Terms of Service.

We may update this policy; the latest version is available at olivebox.net/en/privacy. Where appropriate, we will notify users of significant changes.

12. Contact

Mobi Mouse d.o.o.
Stojana Protića 39
11000 Belgrade, Serbia
PIB: 104122416
Email: support@olivebox.net
Website: olivebox.net