Privacy Policy

Who we are

WhatSyncs provides a platform that connects authorized business WhatsApp accounts to customers' CRMs and applications. This policy covers the marketing website at www.whatsyncs.com and the WhatSyncs platform. [Insert legal entity name, registered address and jurisdiction before launch.]

Information we collect

On this website

• Contact form submissions — the name, email address, company, reason and message you send us, plus an optional number of WhatsApp connections. We use this only to reply to you.
• Analytics — if you consent, aggregate usage data such as pages viewed and calls to action clicked. We do not send personal data in analytics events.
• Technical data — server logs including IP address, used to operate the site, apply rate limits and investigate abuse.

In the WhatSyncs platform

• Account data — the details you provide when creating a workspace.
• Connection data — information about the WhatsApp accounts you link, including phone number and session status.
• Conversation data — messages, message metadata and media synchronized from the accounts you connect, processed so that it can be delivered to the systems you nominate.

Roles

For conversation data synchronized from your connected WhatsApp accounts, you are the controller and WhatSyncs acts as a processor on your instructions. For your account and billing data, and for data collected through this website, WhatSyncs is the controller. [Confirm this characterisation with counsel for your jurisdiction.]

How we use information

• To provide the platform: synchronizing, deduplicating, storing and delivering events.
• To operate, secure and improve the service.
• To respond to enquiries you send us.
• To meet legal and accounting obligations.

We do not sell personal data, and we do not use your conversation data to advertise to you or anyone else.

Sharing

We share data with service providers that host and operate the platform, and with the endpoints you configure — by registering a webhook you are instructing us to send events to that destination. We may disclose data where required by law. [Insert a sub-processor list before launch.]

Retention

Conversation data and media are retained while your workspace is active so the platform can serve them. Contact form submissions are retained for as long as needed to handle your enquiry and to keep a record of the correspondence. [Insert specific retention periods before launch.]

Security

Traffic is encrypted in transit, API access is authenticated with workspace-scoped keys, webhook payloads can be signed, and media is served through authenticated endpoints. Our security page describes the controls in more detail, including which certifications we do not hold.

Your rights

Depending on where you are, you may have rights to access, correct, delete, restrict or port your personal data, and to object to certain processing. Where WhatSyncs is a processor, requests about conversation data should be directed to the customer who controls it, and we will assist them.

Cookies

This site uses necessary cookies to operate and, with your consent, analytics cookies. See the cookie policy for detail. Declining analytics does not affect site functionality.

Children

WhatSyncs is a business product and is not directed at children.

Changes

We will update this page when our practices change and revise the date at the top. Material changes affecting customers will be communicated directly.

Contact

Privacy questions: [email protected]. Security matters: [email protected].