Privacy policy

What we collect when you order or message us, what we do with it, who else sees it, and how to have it deleted. Short, because there is not much to say.

Who we are

So Mochi is a small family business in Amman, Jordan, making mochi ice cream and gelato and selling them to businesses and to homes. This policy explains what we collect when you deal with us, why, and what you can ask us to do about it.

Questions go to zaid@so-mochi.com.

What we collect

When you order or ask about our products — on the website, by phone, on WhatsApp, or by message on Facebook or Instagram — we collect what we need to serve you: your name, the name of your business if you have one, your phone number, the area or address to deliver to, what you ordered, and the messages you send us.

When you message our Facebook Page or Instagram account, Meta sends us your message, your Meta page-scoped ID, and — where your settings allow it — your display name. We do not receive your Facebook password, your friends list, your posts, or anything beyond the conversation with us.

We do not collect payment details. A home order is paid by CliQ bank transfer, which you make from your own banking app — we never see your bank login, your card or your account password; we see only that the transfer arrived.

What we use it for

To take your order, confirm it, deliver it, and invoice it. To answer your questions. To follow up if you asked us to. To remember which flavours a shop prefers so we can serve it better next time.

We keep a record of conversations so that when you write again, whoever answers knows what was said before — including if that is our automated assistant.

Our automated assistant

Some replies on Facebook, Instagram and WhatsApp are written by an automated assistant that runs on a language model made by OpenAI. When it answers you, the text of the conversation is sent to OpenAI to generate the reply. OpenAI does not use data sent through its API to train its models. The assistant only knows our prices, our flavours and our published answers; it cannot see your Meta profile beyond your name and it cannot take payment.

It will always hand the conversation to a person when you ask for one, when you are negotiating, or when it does not know the answer. You can ask for a person at any time.

Who else sees it

Meta Platforms, which operates Facebook, Instagram and WhatsApp, carries the messages you send us and is subject to its own privacy policy.

Our database runs on a server we rent from Hetzner in Germany, and our website is hosted by Vercel. Both act only on our instructions.

OpenAI, as described above, generates automated replies.

Microsoft Clarity records how visitors use this website — pages seen, taps and scrolling — so that we can see where the shop is hard to use. What you type into a form is masked and never recorded. Microsoft is subject to its own privacy policy.

We do not sell your information, and we do not share it with anyone else. We do not use it for advertising to you.

How long we keep it

Orders and invoices are kept as business records. Conversations are kept for as long as you are a customer or an enquirer, so that we can serve you with context. You can ask us to delete them at any time — see below.

Your rights

You can ask us what we hold about you, ask us to correct it, or ask us to delete it. Deleting your conversation history and contact details is described on our data deletion page. We answer within seven days.

If you delete a message on Messenger or Instagram, Meta tells us and we delete our copy too.

Changes

This policy was last updated on 21 September 2026. If it changes materially we will say so here.