1. Information We Collect

1.1 Information You Provide

• Account Information: Business name, email address, phone number, and login credentials
• Business Information: Store name, address, business hours, and payment details
• Product Information: Product names, descriptions, prices, images, and availability
• WhatsApp Business Details: WhatsApp Business Account ID, Phone Number ID, and access tokens

1.2 Information Collected Automatically

• WhatsApp Messages: Customer messages, orders, and interactions via WhatsApp Business API
• Usage Data: IP address, browser type, pages visited, and timestamps
• Device Information: Device type, operating system, and unique device identifiers
• Cookies and Tracking: Session cookies for authentication and functionality

1.3 Third-Party Data

• Meta/Facebook Data: Information received via WhatsApp Business API and Embedded Signup
• Product Catalog Data: Catalog information synced with Meta Commerce Manager

2. How We Use Your Information

2.1 Service Delivery

• Provide and maintain the WhatsOrder platform
• Process and manage customer orders via WhatsApp
• Synchronize product catalogs with WhatsApp Business API
• Send order confirmations and notifications
• Enable communication between you and your customers

2.2 WhatsApp Business API Integration

• Automatic Catalog Management: Create and manage product catalogs on your behalf
• Product Synchronization: Sync products from our platform to your WhatsApp catalog
• Message Processing: Receive, process, and store customer messages and orders
• Webhook Management: Configure webhooks to receive real-time updates

2.3 Platform Improvement

• Analyze usage patterns to improve our services
• Monitor system performance and reliability
• Develop new features and functionality
• Provide customer support and technical assistance

3. Data Sharing and Disclosure

3.1 Third-Party Services

We share your information with the following third parties:

• Meta Platforms (Facebook/WhatsApp): For WhatsApp Business API functionality, catalog management, and message delivery
• Cloud Hosting Providers: For secure data storage and platform hosting
• Payment Processors: For billing and subscription management (if applicable)

3.2 Legal Requirements

We may disclose your information if required by law or in response to:

• Court orders, subpoenas, or legal processes
• Government or regulatory requests
• Protection of our rights, property, or safety
• Prevention of fraud or security threats

4. WhatsApp Business API Permissions

4.1 Permissions We Request

When you connect your WhatsApp Business Account via Embedded Signup, we request the following permissions:

• whatsapp_business_management: Manage your WhatsApp Business Account settings
• whatsapp_business_messaging: Send and receive messages on your behalf
• catalog_management: Create and manage product catalogs automatically
• business_management: Access your business information

5. Data Security

We implement industry-standard security measures to protect your information:

• Encryption: SSL/TLS encryption for data transmission
• Access Control: Multi-tenant architecture with strict tenant isolation
• Authentication: Secure session-based authentication
• Database Security: Encrypted storage of sensitive data (access tokens, credentials)
• Regular Audits: Periodic security assessments and updates
• HTTPS Only: All communications over secure HTTPS protocol

6. Data Retention

We retain your information for as long as necessary to provide our services:

• Account Data: Retained while your account is active
• Order History: Retained for accounting and legal compliance (typically 7 years)
• Messages: Retained for operational purposes and customer support
• Deleted Accounts: Data permanently deleted within 90 days of account deletion

7. Your Rights (GDPR & Data Protection)

If you are located in the European Economic Area (EEA), you have the following rights:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Limit how we process your data
• Portability: Receive your data in a machine-readable format
• Objection: Object to processing of your data
• Withdraw Consent: Revoke previously granted permissions

To exercise these rights, contact us at: [email protected]

8. WhatsApp Data Policy

Our use of WhatsApp Business API is governed by:

• Meta's Terms of Service: WhatsApp Business Terms
• WhatsApp Business Policy: Business Policy
• Meta Platform Terms: Developer Terms

9. Cookies and Tracking Technologies

We use cookies for authentication, preferences, and analytics. You can control cookies through your browser settings.

9.1 reCAPTCHA Enterprise

This site is protected by Google reCAPTCHA Enterprise to prevent spam and abuse. Use of reCAPTCHA is subject to the Google Privacy Policy and Terms of Service.

10. Children's Privacy

WhatsOrder is not intended for users under 18 years of age. We do not knowingly collect information from children.

11. International Data Transfers

Your information may be transferred internationally. We ensure adequate safeguards including EU Standard Contractual Clauses and Meta's Data Transfer Framework.

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically. Changes will be posted on this page with an updated "Last Updated" date. Continued use of our services after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices:

Email: [email protected]
Website: https://app.whatsorder.ch

14. Consent

By using WhatsOrder and connecting your WhatsApp Business Account, you consent to:

• Collection and processing of your data as described in this policy
• Granting permissions via Facebook Embedded Signup
• Automatic creation and management of product catalogs
• Synchronization of products and orders with WhatsApp Business API