Privacy Policy

DigitalRow Technologies, trading as EOM (DigitalRow, EOM, we, us, or our), respects your privacy and processes personal information in accordance with applicable Zimbabwean data-protection law.

We generally act as the data controller when we decide how and why to process information about website visitors, people who contact us, demonstration applicants, account contacts, and our own commercial relationships. When an EOM business customer uses the platform to process information about its customers, agents, riders, or other people, that business customer generally determines the purposes of the processing and DigitalRow acts on its instructions as a processor or service provider.

This Policy should be read with our Terms & Conditions. An EOM customer's own privacy notice may also apply to information processed through that customer's account.

Depending on how you interact with us, you may provide:

• your name, business or company email address, country, telephone number, and WhatsApp number;
• company name, business size and type, physical address, selected EOM features, expected customer volume, demonstration preferences, and additional notes;
• account details, authorised-user information, support requests, correspondence, and feedback; and
• commercial, billing, transaction, and contract information where it is relevant to a customer relationship.

Please provide only information that is accurate and that you are authorised to share.

When a business enables relevant EOM features, the platform may process customer contact details, WhatsApp conversations, catalogue and product information, orders, fulfilment status, delivery activity, agent or rider information, site information, and operational or service analytics.

The EOM business customer generally determines what platform information is submitted, why it is processed, how long it is needed, and who may access it. Questions about that processing should first be directed to the relevant business. We assist our customers with lawful requests as required by our agreements and applicable law.

EOM integrates with Meta's Messaging APIs and related products, including the WhatsApp Business Platform and, where enabled by a Customer, Messenger or Instagram messaging. These integrations may allow a Customer to send, receive, route, automate, and manage business communications through EOM.

Depending on the integration and Customer configuration, we may process:

• Meta business, account, Page, WhatsApp Business Account, phone-number, application, and other platform identifiers;
• business profile information and integration configuration needed to connect and maintain the authorised service;
• message content, attachments, sender and recipient identifiers, timestamps, delivery or read status, conversation metadata, and webhook events; and
• API activity, authentication events, diagnostic information, error records, and security logs.

We use this information to provide messaging and workflow services, authenticate and maintain authorised connections, route communications, support AI or human-agent assistance, troubleshoot integrations, prevent misuse, and comply with applicable Meta platform terms and policies. We do not use Meta-sourced information for purposes that are incompatible with the service requested by the Customer.

The website, platform, and supporting systems may generate technical information needed to deliver and protect the service. This can include device and browser information, Internet Protocol address, network request information, timestamps, diagnostic records, authentication activity, security events, and service logs.

Our website currently requests the Urbanist font from Google Fonts. That request may provide Google with technical information such as an IP address and browser details. Google handles that information under its own privacy terms.

We use Google Analytics 4 to understand how visitors find and use this website, which pages and product features they explore, and whether demonstration or contact journeys are completed. This service may use first-party analytics cookies and receive information such as device and browser characteristics, approximate location derived from an IP address, page visits, timestamps, traffic-source information, and interactions with website controls.

We configure Google Analytics for analytics purposes only. Advertising storage, advertising user data, advertising personalisation, Google Signals, and advertising-personalisation signals are disabled. We do not send Google the contents of website forms or the names, email addresses, telephone or WhatsApp numbers, company names, physical addresses, or free-text messages and notes entered into those forms.

Google processes analytics information as a service provider under its own terms and privacy documentation. You can restrict or delete analytics cookies using your browser controls.

We may receive personal information from:

• you directly, including through forms, messages, and support;
• your employer, organisation, or another authorised representative;
• an EOM business customer that uses EOM to communicate with or serve you;
• Meta Platforms, Inc., WhatsApp, Messenger, Instagram, or another integration that the Customer has authorised; and
• devices, browsers, and systems that generate operational and security records when EOM is used.

We process information where reasonably necessary to:

• provide, configure, maintain, support, and improve EOM;
• respond to enquiries and arrange or personalise demonstrations;
• process communications, orders, and workflows on a Customer's instructions;
• authenticate users, administer accounts, prevent abuse, investigate incidents, and protect people, information, and services;
• diagnose errors, measure operational performance, and develop useful features;
• manage proposals, subscriptions, support, billing, and other business relationships; and
• exercise legal rights and meet regulatory, tax, accounting, and other legal obligations.

Depending on the circumstances and applicable law, we rely on consent, steps requested before entering a contract, performance of a contract, compliance with a legal obligation, or legitimate interests such as operating, securing, and improving EOM and managing business relationships.

Where processing is based on consent, you may withdraw that consent. Withdrawal does not affect processing that was lawful before it was withdrawn and may not prevent processing based on another lawful ground.

We may disclose information, only as appropriate, to:

• DigitalRow personnel and contractors who need it for authorised work and are subject to suitable responsibilities;
• infrastructure, communications, security, support, and other service providers that process information for us;
• Meta Platforms, Inc., WhatsApp, Messenger, Instagram, and integrations selected or authorised by the Customer, where needed to provide the relevant API or messaging functionality;
• professional advisers, auditors, insurers, and financial providers;
• regulators, courts, law enforcement, or other recipients where disclosure is required or permitted by law; and
• a prospective or completed buyer, investor, successor, or transaction adviser in a lawful corporate transaction, subject to appropriate safeguards.

DigitalRow does not sell personal information. We require service providers to use information only for authorised purposes and to protect it appropriately.

Some integrations, providers, or support activities may process information outside Zimbabwe, including through Meta infrastructure or data centres. Where international processing occurs, we use contractual, organisational, technical, and other safeguards appropriate to the information and obtain regulatory authorisation where applicable law requires it.

A particular Customer's configuration may affect where its information is processed. Customers may contact us for information relevant to their deployment.

We retain personal information only as long as reasonably necessary for the purpose for which it was collected, Customer instructions, account administration, security, dispute resolution, enforcement of agreements, and legal, tax, accounting, or regulatory obligations.

Retention periods vary according to the type and sensitivity of the information, the service configuration, the risk of harm, and the applicable legal requirements. Information is deleted, anonymised, or securely isolated when it is no longer required, subject to lawful backup and record-keeping cycles.

We use proportionate technical and organisational measures intended to protect information against accidental or unlawful loss, misuse, alteration, disclosure, or access. Measures are selected according to risk and may include controlled access, secure transmission, logging, monitoring, backups, vulnerability management, and incident-response procedures.

No Internet service or storage system can be guaranteed completely secure. You should protect your devices and credentials and tell us promptly about suspected misuse. More information appears in our Security Policy.

Subject to applicable law and relevant exceptions, you may have the right to ask whether we process your information; request access, correction, or deletion; object to or restrict certain processing; withdraw consent; and complain to the relevant Zimbabwean data protection authority.

Submit a request through our Contact Us page. We may ask for information needed to verify identity and authority. If a request concerns data controlled by an EOM business customer, we may direct the request to that customer or assist it in responding.

You may request access to, correction of, or deletion of personal information received through a Meta integration by emailing hello@eomplatform.io with the subject Meta Data Deletion Request, or by using our Contact Us page. Include enough information to identify the relevant account, business, or interaction, but do not send passwords, access tokens, or unnecessary message content.

We may need to verify your identity and authority before acting. If an EOM Customer controls the relevant information, we may direct the request to that Customer or assist it with the response. Following a valid request, we will delete or de-identify the relevant information and require applicable service providers to do the same, unless retention is required or permitted by law, security needs, dispute resolution, or limited backup cycles. We will confirm the outcome or explain any applicable exception.

When a Meta integration is disconnected or its authorisation is withdrawn, EOM stops collecting new information through that connection and deletes or de-identifies Meta-sourced information that is no longer necessary, subject to the exceptions described above.

EOM is a business service and is not directed to children under 18. We do not knowingly invite children to create EOM accounts or submit personal information directly to us. If you believe a child has done so, contact us so that we can investigate and take appropriate action.

EOM may use automated systems to assist product discovery, customer conversations, support, ordering, and operational workflows. The EOM business customer selects and configures these features and remains responsible for meaningful review and for decisions that affect its customers.

Contact the relevant business for questions about how it uses automated features in a particular interaction. Contact DigitalRow for questions about our own use of automated processing.

EOM and its website may contain links to or interoperate with external services. Their privacy notices, security practices, and terms apply to their processing. We encourage you to review those materials before providing information or enabling an integration.

Meta and its products process information under their own terms and notices, including the Meta Privacy Policy and the WhatsApp Privacy Policy. Those notices govern Meta's own processing; this Policy governs DigitalRow's processing through EOM.

We may revise this Policy to reflect changes to EOM, our practices, or the law. The updated version will show a new last-updated date, and we will provide additional notice where a change is material or the law requires it.

Use the Contact Us page or email hello@eomplatform.io for privacy questions or requests. Please describe the request clearly and identify the EOM business customer involved, if applicable.

Our contact address is DigitalRow Technologies, 1 Dungarvan Close, Eastlea, Harare, Zimbabwe.