Data Protection & Privacy

Privacy Policy

Last Updated: January 1, 2026 • Compliant with GDPR, CCPA & Meta Business Standards

Our Privacy Commitment

JustWeTalk values your data privacy above all. We never monetize, sell, or rent your customer data or conversation contents to third parties. All data processed through the WhatsApp Cloud API is treated with bank-grade encryption standards.

1. Overview & Data Roles

Under global data protection regulations including the EU General Data Protection Regulation ("GDPR") and California Consumer Privacy Act ("CCPA"):

You (The Customer): Act as the Data Controller for the personal information of your end customers (phone numbers, names, chat histories).
JustWeTalk: Acts as the Data Processor, handling message dispatches, chatbot execution, and webhook routing solely on your instructions.
Meta Platforms, Inc.: Provides the underlying global infrastructure for WhatsApp messaging as an independent processor.

2. Information We Collect

When you interact with our platform via app.justwetalk.com, we collect:

Account Credentials: Full name, business email address, company name, and encrypted passwords.
Meta WhatsApp Credentials: Phone Number ID, WhatsApp Business Account (WABA) ID, and secure system access tokens.
Message Metadata: Delivery timestamps, read receipts, delivery statuses, and error codes for campaign analytics.
Billing Information: Payment card details processed securely through certified PCI-DSS Level 1 payment gateways (Stripe/Razorpay).

3. How WhatsApp Messages Are Handled

Messages transmitted via the official Meta WhatsApp Cloud API are encrypted in transit using TLS 1.3. Once delivered, message logs in our dashboard are retained only for the duration specified in your account retention preferences (default 90 days), after which logs are automatically purged.

4. Sub-processors & Infrastructure Partners

We collaborate with reputable enterprise infrastructure providers:

Meta Platforms, Inc.: WhatsApp Cloud API servers and message delivery network.
Amazon Web Services (AWS): Cloud compute, serverless dispatcher functions, and encrypted object storage.
Supabase / PostgreSQL: Encrypted multi-tenant database clusters with automatic daily backups.

5. Your Data Protection Rights

Regardless of your geographic location, JustWeTalk grants you full control over your personal data:

Right to Access: Export all contact and conversation records in CSV/JSON format at any time.
Right to Rectification: Update inaccurate business or team profile data directly within the dashboard.
Right to Erasure ("Right to be Forgotten"): Request immediate, complete deletion of your account and all associated customer data.

6. Contact our Data Protection Officer

To exercise your privacy rights or discuss enterprise Data Processing Agreements (DPA), contact our designated Data Protection Officer at privacy@justwetalk.com.