Privacy policy

Working draft

This policy is a working draft prepared for the website. It should be reviewed by qualified legal counsel and adapted to the operating entity, hosting locations and contractual commitments before production use.

Information we collect

• Account details such as name, email address, password hash and two-factor authentication state.
• Workspace details such as company name, timezone, memberships, roles and invitations.
• WhatsApp data needed to provide the service, including contacts, conversations, messages, templates, attachments and delivery events.
• Operational data such as audit records, usage events and support communications.

How we use information

• Provide and secure the workspace, including company isolation and access control.
• Deliver messaging, campaign, automation, reporting and AI features requested by the workspace.
• Investigate failures, prevent abuse and improve reliability.
• Communicate about the account, invitations, security and support.

WhatsApp and Meta data

The workspace connects to the WhatsApp Business Cloud API. Your business remains responsible for its Meta and WhatsApp Business configuration, template content, recipient consent and compliance with Meta policies and applicable law.

Sharing and processors

We use service providers for hosting, storage, email delivery, AI processing and operational monitoring. The final policy should list the actual processors, their locations and the relevant contractual safeguards.

Retention

Message history and campaign import files are retained according to configurable retention periods. Account and workspace records are retained while the workspace is active and for a reasonable period afterwards for legal, security and backup purposes.

Security

The application uses company-scoped access checks, role-based permissions, password hashing, two-factor authentication support and webhook verification. No system is completely secure, and the final policy should describe incident response and breach notification commitments.

Your rights

Depending on your jurisdiction, you may have rights to access, correct, export or delete personal data. Contact the workspace owner first for data inside a company workspace, or email us using the contact page for account-level requests.

Contact

Privacy questions can be sent to the contact email listed on the contact page. Legal entity details and a dedicated privacy contact should be added before launch.