Meta Messenger Privacy Policy — Hostess Webs
Last updated: July 2026
Applies to: messaging the Hostess Webs Facebook / Meta Page via Messenger
Public site: https://hostesswebs.pl
This policy explains what personal data we process when you contact Hostess Webs through Messenger, why we use it, and how you can exercise your rights.
Related documents on hostesswebs.pl:
- Terms of Service (Meta / Service)
- Data deletion (Messenger)
- Oferta and Regulamin (Polish commercial terms)
1. Who is responsible
Iluro Digital operates the Hostess Webs Messenger onboarding automation and related technical systems, and is the data controller for personal data processed through that Messenger channel.
Hostess Webs is the customer-facing service brand for professional portfolio websites for hostesses and event professionals (hostesswebs.pl).
Privacy contact: kontakt@hostesswebs.pl
(You may also write to kontakt@ilurodigital.com.)
2. What this service does
When you message our Page, an automated assistant and/or a human operator may:
- greet you and offer options (e.g. start a portfolio site, or ask for support);
- send a personalized link to our intake form (Tally);
- after you submit the form, send service messages about your preview, payments, domain choices, and go-live status;
- escalate the conversation to a human when you ask for help or when automation cannot continue.
If Messenger delivery fails, we may contact you by email when you provided an email address in the form.
Commercial scope, pricing, and delivery steps for paid work are described in the Oferta and Regulamin (and in checkout at the time of purchase).
3. Data we receive from Meta
Through the Meta Messenger Platform we may receive:
| Data | Purpose |
|---|---|
| Page-Scoped ID (PSID) | Identify your conversation with our Page only (not your global Facebook ID) |
| Display name (if Meta provides it) | Personalize replies |
| Message text / attachments you send | Understand your request and support you |
| Postbacks / button taps | Process choices (e.g. continue, renew a payment link) |
| Timestamps and delivery metadata | Operate the conversation reliably |
We do not receive your Facebook password, and we do not get full access to your Facebook profile beyond what Meta exposes for Page messaging.
4. Data we collect outside Messenger (linked to your chat)
If you open the intake form from Messenger and submit it, we process data needed to build and deliver your portfolio site, which may include:
- name, email, phone;
- location / work cities, languages, bio, experience, education;
- social profile links you provide;
- photos and optional short videos for your portfolio;
- domain preferences;
- a reference code (
ref) that links your Messenger conversation to your form submission.
Payments (deposit, final payment, hosting subscription) are processed by Stripe. We receive payment status and related metadata; full card numbers are handled by Stripe, not stored on our systems.
Published portfolio sites and this marketing site may be hosted via Cloudflare (and related infrastructure) under our control or instructions.
On hostesswebs.pl we may also process anonymous / aggregated analytics (page views, approximate region, campaign parameters, button clicks) after you accept analytics cookies/consent where required. That website analytics is separate from Messenger content and is described in the consent banner on the site.
5. How we use Messenger-related data
We use PSID and related data to:
- reply to your messages and run the onboarding chat;
- send a personalized form link with a reference code;
- connect your Messenger thread to your form submission and order;
- send transactional updates (preview URL, payment reminders, domain options, site live notices);
- hand the conversation to a human support agent when needed;
- prevent abuse (rate limits, duplicate handling) and keep the service reliable.
We do not sell Messenger data. We do not use Messenger content to build advertising audiences unrelated to fulfilling your Hostess Webs request, beyond Meta’s own platform rules for Page messaging.
6. Where data is stored and who helps us
| Provider / system | Role |
|---|---|
| Meta | Messenger Platform / Graph API (send & receive messages) |
| Supabase | Lead / channel records (e.g. PSID ↔ reference code), operational metadata, site analytics events |
| n8n + ops infrastructure | Webhooks, automation, notifications |
| Tally | Intake form and temporary file uploads |
| Resend (or similar email provider) | Email when needed |
| Stripe | Payments |
| Cloudflare / hosting | Marketing site, preview and live portfolio sites |
| Domain registrar partners | Domain registration / DNS when included in your order |
| Internal ops alerts (e.g. Telegram) | Team alerts only — not a public customer channel |
Data is processed in the EU / EEA where our primary systems are configured for that purpose, and by providers that may process data under their own terms and appropriate safeguards.
7. Legal basis (GDPR)
Depending on the step, we rely on:
- Steps prior to a contract — you messaged us and asked for a site / support;
- Contract performance — delivering preview, payment links, domain and go-live updates you requested;
- Legitimate interests — secure operations, fraud/abuse prevention, human handoff quality — balanced against your rights;
- Consent — where required (e.g. certain messaging contexts, or website analytics cookies), your choice to start/continue Messenger contact or accept analytics on the website.
8. Retention
We keep Messenger identifiers and linked lead data only as long as needed to:
- complete onboarding and support;
- maintain your customer relationship (e.g. active site / billing);
- meet legal, tax, or dispute obligations.
When no longer required, we delete or anonymize the data. You may request earlier deletion (see below), subject to legal holds.
After cooperation ends, materials related to your site may be retained for a limited period as described in the Regulamin (typically around 30 days unless law requires longer), then removed where disposable.
9. Your choices and rights
Under GDPR you may request access, correction, deletion, restriction, portability, or object to certain processing, and lodge a complaint with a supervisory authority (in Poland: PUODO).
How: email kontakt@hostesswebs.pl (subject: “Privacy / Messenger”).
We respond within the timeframes required by applicable law.
You can also stop messaging the Page. Meta provides additional controls in Facebook / Messenger settings for Page conversations.
10. Children
This service is not directed at children under 16 (or the higher minimum age required in your country). We do not knowingly collect Messenger data from children. If you believe a child contacted us, email us and we will delete the data.
11. Security
We use HTTPS, access-controlled systems, and least-privilege credentials for automation. No method of transmission or storage is 100% secure; we take reasonable technical and organizational measures appropriate to the risk.
12. Changes
We may update this policy when the Messenger service or legal requirements change. The Last updated date above shows the latest revision. Material changes will be reflected on this page. Where required by law, we will provide additional notice.
13. Contact
Hostess Webs / Iluro Digital
Email: kontakt@hostesswebs.pl
Website: https://hostesswebs.pl
Messenger: Hostess Webs Facebook Page