Privacy notice

At WaMan ("WaMan", "we", "our") we handle your personal data transparently and in accordance with applicable law. This notice explains what data we process when you use the platform and the Meta Tech Provider flow, for what purposes, how we use, disclose and manage it, and how you can exercise your rights.

Data controller

WaMan acts as the data controller for the personal data we receive in the context of the platform. You can contact us at any time at hola@waman.mx to resolve questions or exercise your rights.

Purpose of processing

We process your personal data for the following purposes:

• To provide and administer the WaMan platform, including setting up official WhatsApp channels through the Meta Tech Provider flow.
• To provide support, address requests and follow up on our customers' accounts.
• To comply with applicable legal, accounting and tax obligations.
• To prevent fraud and ensure the security, integrity and availability of the platform.
• To comply with Meta's applicable terms and policies when the Tech Provider flow is used to connect the WhatsApp Cloud API.

What data we process

We only process the data necessary to operate the platform, which may include:

• Account data: name, email address and access credentials of administrators.
• Organization data: company name, tax information and the WhatsApp numbers connected to the platform.
• Technical identifiers for the Meta integration (Phone Number ID, WhatsApp Business Account ID) and encrypted access tokens, kept only on the server.
• Usage and technical log data needed for operation, diagnostics and security of the service.

Processing in the Meta Tech Provider flow

When you connect the official WhatsApp Cloud API through the Tech Provider flow, the one-time authorization code is sent to our API, which exchanges it with Meta and stores the returned access token encrypted. Credentials are never exposed in the dashboard.

Meta uses the privacy policy we publish to understand how we use, disclose and manage user data. We do not sell personal data and do not share it with third parties for direct marketing without your consent.

Who we share information with

We do not sell your personal data. We may share information only in the following cases:

• With service providers that support our operations (hosting, infrastructure, support and analytics), under contract and confidentiality.
• With Meta, only as needed to operate the WhatsApp Cloud API integration you choose to enable.
• With authorities, when required by a legal obligation or a valid order.

For any international transfer, we ensure adequate safeguards or a valid legal basis exist.

Security and management

We implement reasonable technical, administrative and organizational measures to protect your data: encryption in transit and at rest, role-based access control, and periodic review of our practices. We keep your data only for as long as necessary to fulfill the purposes of this notice or as required by law.

Data retention

We keep your personal data as long as needed for the purposes described, for the performance of the relationship with the platform, or to comply with legal obligations. When it is no longer needed, we delete or anonymize it securely.

Your rights

Subject to applicable law, you have the right to request access, rectification, cancellation or opposition regarding the processing of your personal data. To exercise them, contact us with your request and proof of identity:

• Access: know what data we process and why.
• Rectification: correct inaccurate or incomplete data.
• Cancellation: request deletion of your data when no longer needed.
• Opposition: object to processing for specific purposes.

Changes to this notice

We may update this privacy notice to reflect changes in our practices or in regulation. We will publish the current version at this same URL and indicate the date of the last update.

Contact

For any question, comment or request about how we process your personal data, write to hola@waman.mx or use the contact channel available in the platform.