VCORE CRM · FACEBOOK AND MESSENGER

Privacy Policy

Last revised on 13 October 2026

This policy explains how VCore CRM processes data when connecting Facebook Pages and handling Messenger messages through the VCore StockiMocki Catalog app. It applies to this CRM integration.

1. Who is responsible for your data

The personal data controller is sole proprietor Tetiana Mykhailivna Shuplat (ФОП Шуплат Тетяна Михайлівна), the operator of VCore CRM for StockiMocki customer support.

For privacy, correction or deletion requests, email shophelp.support@gmail.com.

2. What data we process

Identifiers for the connected Page, the sender within that Page, conversations and messages.
Profile names and photos when Meta provides them for the conversation.
Message text and any photos, documents or other supported attachments shared in the conversation.
Message timestamps, delivery and read events, and menu button interactions.
Contact details you provide, customer service notes, and verified links between a conversation, a customer and their orders.
Technical records of events, errors and authorized staff actions needed to operate and protect the integration.

3. Why we use the data

We use the data to respond to inquiries, service orders, give customers access to their own accounts after verification, preserve conversation context and prevent duplicate actions or access to someone else’s information.

We process data to fulfil orders and take related steps at your request, meet legal obligations, and protect the system and the rights of the people involved in providing or receiving support. Where a specific action requires consent, we ask for it separately. We do not sell Messenger data.

A matching name alone cannot verify a customer’s identity. We provide a personal order link only after verifying that the conversation belongs to the order owner.

4. Access and service providers

Authorized staff have access according to their assigned permissions. We use Meta, Netlify for application hosting, PostgreSQL hosted by Neon, and private Cloudflare R2 storage for attachments and copies of profile photos. We use KeyCRM for customer support and order management. Whether KeyCRM receives messages depends on the Page connection and routing configuration.

These services may process data outside Ukraine, including in the United States and Europe. Processing may also take place outside the European Union. Meta’s own services are subject to Meta’s Privacy Policy.

5. How we protect the data

VCore restricts access to conversations, customer records and files according to staff permissions. We encrypt stored message content and integration secrets and keep attachments and copies of profile photos in private storage. Access to files requires a permission check or a temporary link. No security measure can eliminate every risk.

6. Retention and disconnecting a Page

VCore keeps copies of conversations and attachments to operate the connected Page and respond to inquiries. A Page connection alone does not justify keeping data that is no longer needed for these purposes.

Permanently disconnecting a Page and clearing its data is a separate procedure that the connection owner can request. Pausing a channel, expiring access or a temporary connection failure does not permanently disconnect the Page or delete its history. The Disable switch does not automatically clear data.

A customer can request deletion of their own data regardless of whether the Page is connected. The person responsible verifies whose data is involved and what the request covers, then communicates the result. See our data deletion instructions for the request process.

Orders and accounting records have their own purposes and grounds for retention. We review separately whether particular records are needed to meet legal obligations or resolve an outstanding order, return or dispute. This exception does not automatically apply to the whole conversation.

When handling a deletion request, we also check technical logs, queues, caches and backups. Our response should explain what we cleared and which data we retained with justification. Closing a conversation does not confirm deletion. Deleting data from VCore does not set Meta’s retention periods.

7. Your requests and rights

You can ask to access, clarify, correct or delete your data. You can object to processing or withdraw consent when processing is based on consent. To protect other people’s data, we may need to verify that the request concerns you. Withdrawing consent does not stop processing that has another lawful basis.

If you believe your rights have been violated, you may also contact the Ukrainian Parliament Commissioner for Human Rights or a court.

8. Policy updates

The current version is available on this page. We update the revision date when the content changes. For questions about changes, use the contact address above.