Privacy Policy

Last updated: 28 August 2026

1. What we collect

• Account data — your name, email, phone and company when you register.
• Business data — the records, contacts, documents and messages you store in the panel. This data is yours; we act only as its processor.
• Technical data — logs (IP, browser, timestamps) needed to keep the service secure and reliable.

2. How we use it

• To provide the service: storing your records, delivering your messages, running your automations.
• To secure the service: authentication, rate limiting, abuse prevention.
• We do not sell your data or use your business data for advertising.

3. Third parties we rely on

• Meta (WhatsApp Business Platform) — when you connect WhatsApp, message content and phone numbers are shared with Meta to deliver messages, under Meta's own terms.
• Email delivery — emails are sent through the SMTP server you configure; its provider processes those emails.
• AI features — when you use the AI assistant or website agents, the relevant text is processed by our AI model provider solely to generate the response.

4. Storage & security

Data is stored on secured servers. Passwords are hashed; sensitive tokens (such as your WhatsApp access token and SMTP password) are stored encrypted. Access inside your organisation is controlled by the roles and permissions you configure.

5. Retention & deletion

Your data is kept while your account is active. Old notifications and email logs are purged automatically after 90 days. When you delete your account, your business data is deleted from live systems within 30 days.

6. Your rights

You can access, correct, export or delete your data from the panel, or write to us for help. If you are in a jurisdiction with specific data-protection rights (e.g. GDPR), we honour access, rectification, erasure and portability requests.

7. Contact

Privacy questions: support@xetacrm.pro.