Privacy Policy

Last Updated: August 5, 2026 | Effective Date: August 5, 2026

1. Introduction

Appelox Enterprise ("we," "our," or "us") operates this WhatsApp Business messaging platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you interact with our services through WhatsApp or when we process data on behalf of our business clients.

By using our WhatsApp Business services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our policies and practices, please do not use our services.

2. Information We Collect

We collect information necessary to provide WhatsApp Business API services. This includes:

2.1 Information You Provide Directly

• Contact Information: Name, phone number, and country code when you opt in to receive messages from our clients.
• Message Content: Messages you send to us or our clients via WhatsApp, including text, media, and documents.
• Business Account Data: Company name, business registration details, and authorized representative information for clients using our platform.

2.2 Information Received from Meta/WhatsApp

• WhatsApp User ID: Your WhatsApp phone number and associated metadata.
• Delivery Status: Message delivery, read receipts, and failure notifications provided by Meta's WhatsApp Cloud API.
• Profile Information: Public WhatsApp profile name and profile picture (if available and permitted by Meta's API).

2.3 Automatically Collected Information

• Device Information: Device type, operating system, and browser type (when interacting with our web dashboard).
• Log Data: IP address, timestamps, and API request logs for security and debugging purposes.
• Usage Data: Interaction patterns with messages (e.g., click-through rates on links within messages).

3. How We Use Your Information

We use the collected information for the following purposes:

• Message Delivery: To send transactional, utility, and marketing messages via WhatsApp Business API on behalf of our clients.
• Service Improvement: To analyze delivery rates, optimize message timing, and improve platform reliability.
• Compliance: To comply with Meta's Platform Policies, WhatsApp Business Terms, and legal obligations.
• Security: To detect fraud, prevent abuse, and protect the integrity of our services.
• Customer Support: To respond to inquiries and resolve technical issues.
• Analytics: To generate aggregated, non-identifiable reports on messaging performance.

4. Legal Basis for Processing (GDPR/EEA Users)

Under the General Data Protection Regulation (GDPR), we process personal data based on the following legal grounds:

• Consent: For marketing communications, we rely on your explicit opt-in consent.
• Contractual Necessity: For transactional messages (order confirmations, shipping updates), processing is necessary to fulfill our contract with you.
• Legitimate Interests: For fraud prevention, security, and service optimization.
• Legal Obligation: When required to comply with applicable laws or regulatory requests.

5. How We Share Your Information

We do not sell your personal data. We may share information only in the following circumstances:

5.1 With Meta Platforms, Inc.

We share necessary data with Meta Platforms, Inc. and its affiliates to facilitate WhatsApp message delivery. This sharing is governed by:

• WhatsApp Business Terms of Service
• Meta for Developers Terms
• Meta Data Policy

Meta processes this data in accordance with their Privacy Policy and Data Processing Terms.

5.2 With Business Clients

When you message a business through our platform, we share your WhatsApp number and message content with that business client so they can respond to you.

5.3 Service Providers

We engage third-party vendors for:

• Cloud hosting and data storage (e.g., AWS, Google Cloud)
• Database management and backup services
• Analytics and monitoring tools

All service providers are bound by strict data processing agreements and are prohibited from using your data for any purpose other than providing services to us.

5.4 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., court orders, subpoenas).

6. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy:

• Message Logs: Retained for 90 days for delivery verification and dispute resolution, then automatically deleted.
• Contact Lists: Retained until you opt out or request deletion, or until our client terminates their account.
• Account Data: Retained for 7 years after account closure for tax and legal compliance purposes.

After the retention period expires, data is securely deleted or anonymized in accordance with our data destruction policies.

7. Your Data Protection Rights

Depending on your location, you may have the following rights:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data.
• Right to Restrict Processing: Request limitation on how we use your data.
• Right to Data Portability: Receive your data in a structured, machine-readable format.
• Right to Object: Object to processing based on legitimate interests or direct marketing.
• Right to Withdraw Consent: Withdraw opt-in consent for marketing messages at any time.

8. Opt-Out and Unsubscribe

You may stop receiving WhatsApp messages from our clients at any time by:

• Replying "STOP" to any message you receive.
• Replying "UNSUBSCRIBE" to any message you receive.
• Contacting us directly at privacy@yourcompany.com.

Once you opt out, we will update our records within 24 hours and you will no longer receive marketing messages. Transactional messages (e.g., order confirmations) may still be sent if required to fulfill a contract.

9. Data Security

We implement industry-standard security measures to protect your data:

• Encryption: All data in transit is protected using TLS 1.3. Data at rest is encrypted using AES-256.
• Access Controls: Role-based access controls (RBAC) limit data access to authorized personnel only.
• Audit Logs: All data access and modifications are logged and monitored.
• Regular Assessments: We conduct quarterly security audits and penetration testing.
• Incident Response: We have a documented breach notification procedure compliant with GDPR (72-hour notification) and other applicable laws.

10. International Data Transfers

Our servers are located in [Your Server Location, e.g., India/Singapore/US]. If you are located outside this region, your data may be transferred to and processed in this location.

For transfers from the European Economic Area (EEA), United Kingdom, or Switzerland, we rely on:

• Meta's Standard Contractual Clauses (SCCs) for WhatsApp Business API data flows.
• Adequacy decisions by the European Commission where applicable.

11. Children's Privacy

Our services are not intended for individuals under the age of 16 (or the minimum age of digital consent in your jurisdiction). We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately and we will delete such information.

12. Cookies and Tracking Technologies

Our web dashboard uses cookies and similar technologies for:

• Authentication and session management
• Analytics (Google Analytics, Meta Pixel)
• Preference storage

You can manage cookie preferences through your browser settings. For more details, see our Cookie Policy.

13. Third-Party Links

Messages sent through our platform may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any website you visit.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will notify you of material changes by:

• Posting the updated policy on this page with a revised "Last Updated" date.
• Sending a notice via WhatsApp or email for significant changes.

Your continued use of our services after such changes constitutes acceptance of the updated policy.

15. Compliance with Meta Policies

As a Meta Business Partner using the WhatsApp Business API, we adhere to:

• WhatsApp Business Messaging Policy
• Meta Platform Policy
• Meta Terms of Service
• WhatsApp Commerce Policy

We only send messages to users who have provided explicit opt-in consent, and we honor all user-initiated opt-out requests immediately.