1. The data we process
Your account: name, e-mail address, password (kept only as a fingerprint), language and your space's name.
Your use: the WhatsApp numbers you connect, the message log (recipient, text, status, times), your API keys (fingerprint only), your webhooks and your payments (plan, amount, status, reference).
The people you write to: their phone number and the content of the messages you send. You are the controller of that data; we act on your behalf.
2. Why we use it
To provide the service: send your messages, show their status, bill your subscription, alert you of a disconnection or a due date, and protect the service against abuse.
We do not sell your data or your recipients', and we do not use it for advertising.
3. Who else has access
To run, the service relies on providers: hosting, e-mail delivery (Amazon SES) and payment (Tranzak). They only process data for this service.
WhatsApp receives the messages you send, as with any WhatsApp message. We may also disclose data if the law requires it.
4. For how long
We keep your data as long as your account exists, then as long as our legal obligations (accounting in particular) require. The message log serves your follow-up and the settling of disputes.
When your account is deleted, your numbers are disconnected and your personal data is erased, except what the law requires us to keep.
5. Security
API keys are stored as fingerprints, webhook secrets are encrypted, traffic goes over HTTPS and each space is isolated from the others. The administration is protected by a password and an authenticator code.
No system is infallible: if a data breach concerned you, we would tell you.
7. Your rights
You can access your data, correct it, ask for its deletion or object to a processing by writing to us. If you use sendzapp to write to your own customers, it is up to you to answer your recipients' requests; we help you do so.