Legal
Privacy Policy
Draft — pending legal review. This document is not yet final and may change before it takes effect.
On this page
This Privacy Policy explains how [TODO: legal entity name] (“whatsappx.si”, “we”, “us”) handles personal data when you visit whatsappx.si or use the whatsappx.si web app.
Who is responsible for your data?
[TODO: legal entity name, registered address and contact email for privacy questions.]
What data do we collect?
- Account data: your name, email address and password. Passwords are stored only as bcrypt hashes. If you sign in with Google, we receive your name and email address from Google.
- Workspace data: workspace names, team members, roles and invitations.
- Messaging data: WhatsApp conversations, contacts and media that flow through numbers you connect, so they can be shown in your shared inbox.
- Content you create: automations, message templates and knowledge base articles.
- Technical data: information needed to keep the service secure, such as session data and request logs. [TODO: confirm logging and retention.]
How do we use data?
We use data to provide the service you asked for: showing and sending messages, managing your team, running automations you configured and securing your account. If you enable the AI assistant, questions and relevant knowledge base content are processed by Google Gemini to generate answers. [TODO: confirm processors and legal bases.]
How do we protect data?
- Session and password-reset tokens are stored only as hashes; reset links are single-use and expire after 1 hour.
- Meta channel credentials are encrypted at rest.
- Access is role-based, and each workspace’s data is kept separate.
- All traffic uses HTTPS.
Who do we share data with?
[TODO: list sub-processors, e.g. hosting provider, email provider, Google (sign-in and Gemini), and Meta for numbers connected through the WhatsApp Business Platform.]
How long do we keep data?
[TODO: retention periods and deletion process.]
What are your rights?
[TODO: rights under applicable law (for example GDPR, CCPA/CPRA and India’s Digital Personal Data Protection Act, 2023) and how to exercise them.]
Contact
[TODO: privacy contact email.]
WhatsApp is a trademark of Meta Platforms, Inc. whatsappx.si is independent and is not affiliated with or endorsed by WhatsApp or Meta.