1. Information we collect
- Account and workspace details such as names, business email addresses, roles and team membership.
- Registration details submitted through our website, including company, phone number, business goals and selected channels.
- Customer conversations, Page or account identifiers, message metadata and permitted profile details received from authorized WhatsApp, Facebook Messenger and Instagram connections.
- CRM records such as contacts, leads, notes, assignments, automation events and audit history.
- Security and diagnostic information such as timestamps, IP-derived abuse signals, request logs and integration errors.
2. How we use information
We use information to provide the shared inbox and CRM, route leads, run requested automations, synchronize authorized channels, secure tenant data, provide support and comply with legal obligations. We do not sell personal information or use connected-channel content for independent advertising.
3. Meta platform data
A workspace owner chooses which Meta assets to authorize. Wappo.io requests only the permissions needed to list eligible Pages, receive messages, send authorized replies and maintain webhook subscriptions. Access tokens are encrypted at rest. Customers remain responsible for their Pages, messaging consent and compliance with Meta Platform Terms.
4. Sharing and processors
Information may be available to authorized members of the customer workspace and to infrastructure or support providers acting under confidentiality and security obligations. We may disclose information when legally required or necessary to protect users, the service or the public.
5. Retention and deletion
Workspace information is retained while an account is active and for a limited period afterward for recovery, security and legal requirements. Channel access can be revoked by disconnecting the account in Wappo.io or Meta. See our data deletion instructions to request deletion.
6. Security
We use tenant-scoped access controls, encrypted credentials, signed sessions, audit logs, HTTPS, private database networking and controlled backups. No system can guarantee absolute security, so customers must protect their credentials and promptly report suspected misuse.
7. Your choices and rights
Depending on applicable law, you may request access, correction, export, restriction or deletion of personal information. Workspace administrators should first handle requests involving their own customer records; we support verified requests where required.
8. Contact
For privacy questions or verified requests, contact Dalile Portal LLC at dalile.uae@gmail.com.