Privacy Policy

Scope. This policy applies to all Innoway Solutions websites and services: the VIA ERP website and application, and the Odoo Apps catalogue published by Innoway Solutions. It is also the policy referenced by the cookie consent banner shown on each of those sites.

1. Data Collection

Innoway Solutions collects personal data you provide during registration, use of our services, or when contacting us: name, email, phone, company name, and usage data.

2. Use of Data

Your data is used to:

• Deliver and improve our VIA ERP services
• Send you transactional communications about your account (trial status, expiry or renewal reminders, invoices, security alerts) — these are necessary to provide the service and are not subject to separate marketing consent
• Send you marketing or win-back communications (for example after a cancellation), only with your consent where required, with the ability to unsubscribe at any time
• Ensure platform security

3. Hosting & Security

Your data is hosted on DigitalOcean's secure cloud servers (Frankfurt, Germany). We use SSL/TLS encryption, each user can turn on two-factor authentication, and we back up every day.

4. Data Sharing

We do not sell or share your personal data with third parties, except as required by law, with your explicit consent, or when you yourself enable a third-party integration (sections 8 and 9) — in which case only the data that integration needs is exchanged with the provider concerned.

5. Data Retention

Your data is retained for the duration of your subscription and for 90 days after cancellation or after your free trial expires, before permanent deletion. We send a reminder email before this permanent deletion. Billing data is retained in accordance with Tunisian legal obligations.

6. Your Rights

In accordance with Tunisian law and GDPR, you have the right to access, rectify, delete, and port your data. Contact us at info@innoway-solutions.com.

7. Cookies

We use essential cookies for platform operation and analytics cookies (with your consent) to improve our services.

8. Third-Party Email Integrations (Microsoft & Google)

VIA ERP offers optional integrations that let you connect your Microsoft (Outlook / Microsoft 365) or Google (Gmail) account in order to send emails directly from the platform.

• Minimal scope: when you connect an account, we request only the permissions required to send emails on your behalf. We do not read, store, or sync the contents of your inbox.
• Access tokens: the OAuth tokens issued by Microsoft and Google are stored encrypted and used solely to perform the actions you initiate.
• Google compliance: VIA ERP's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.
• Microsoft compliance: access to data via Microsoft Graph is governed by your consent and limited to the permissions granted. No data is shared with third parties.
• Revocation: you can revoke this access at any time from within VIA ERP, or from the security settings of your Microsoft or Google account.

9. Meta Integrations (Facebook, Instagram and WhatsApp)

VIA ERP offers optional integrations with the platforms of Meta Platforms, Inc., operated through Innoway Solutions' Meta app "VIA ERP Connect": Facebook Lead Ads (lead-form ads on Facebook and Instagram) and WhatsApp Business. These integrations are active only when an administrator of a VIA ERP customer business connects that business's own accounts through Facebook Login for Business.

Data we receive from Meta:

• Connecting account and assets: the ID and name of the Facebook user who makes the connection, the list of Facebook Pages and business accounts they administer and choose to connect, and the access tokens Meta issues for those assets.
• Forms and leads (Lead Ads): the list of lead forms of the connected Pages and their questions; for each lead, the answers entered in the form (for example name, email, phone, company, city, custom answers), the submission time, the consent disclaimers accepted, and the IDs and names of the originating campaign, ad set, ad and form.
• WhatsApp Business: the connected business WhatsApp number and its WhatsApp Business account; the messages exchanged with that number (text, media, delivery and read statuses), the phone number and WhatsApp profile name of people who message the business, and message-template statuses.

Use: this data is used solely to provide the customer business with the features it has enabled: creating or updating its leads and contacts in its VIA ERP CRM, attributing each lead to the campaign that generated it, assigning it to a salesperson, and displaying and replying to WhatsApp conversations from VIA ERP. We do not sell or rent this data, do not use it for advertising, profiling or model training, and do not share it with other customers or with data brokers.

Roles: for lead and WhatsApp contact data, the VIA ERP customer business is the data controller; Innoway Solutions acts as a processor, only on its instructions. If you filled in an ad form or messaged a business on WhatsApp, that business is your first point of contact for exercising your rights — you may also write to us directly.

Security and retention: Meta access tokens are stored encrypted and are never exposed in the browser; data is hosted in the European Union (section 3) and isolated per customer business. When a business disconnects the integration, the access tokens are deleted and VIA ERP immediately stops collecting; leads and conversations already imported remain in that business's CRM and follow the retention period in section 5, unless deleted earlier by the business or at your request.

Revocation and deletion: you can remove access at any time from VIA ERP (disconnect the integration) or from Facebook (Settings & privacy → Settings → Business integrations → remove "VIA ERP Connect"). To request deletion of your data, follow our data deletion instructions.

Our use of data received from Meta complies with the Meta Platform Terms and Developer Policies, and with the WhatsApp Business Policy.

10. Data Deletion

You may request deletion of your personal data at any time, including data received through Facebook, Instagram or WhatsApp. The procedure is described on our Data Deletion Instructions page.

11. Contact

For any questions regarding this policy, please contact: info@innoway-solutions.com