MesejMesej

Privacy Policy

Last updated: May 4, 2026

Welcome to Mesej ("we", "us", "our"). This Privacy Policy explains how we collect, use, and protect your information when you use our platform, which enables businesses to manage WhatsApp Business API conversations.

1. Information We Collect

  • Account information: name, email, phone number, and business name provided at sign-up.
  • WhatsApp Business data: phone numbers, message templates, conversations, media, and customer metadata processed through Meta's WhatsApp Business API.
  • Usage data: log-in events, IP address, browser type, pages visited, and platform interactions.
  • Billing data: subscription and payment information (processed by a trusted payment provider — we do not store card details on our servers).

2. How We Use Your Information

  • Operate and deliver the service to you and your customers.
  • Send messages and notifications via WhatsApp on your behalf.
  • Improve performance, monitor errors, and prevent abuse.
  • Comply with legal obligations and Meta's WhatsApp Business policies.
  • Contact you about updates and support.

3. Data Sharing

We never sell your data. We share limited information with:

  • Meta Platforms (WhatsApp): to enable message sending and receiving via the API.
  • Infrastructure providers: hosting, databases, and error-monitoring vendors under confidentiality agreements.
  • Payment processor: to handle subscriptions and invoices.
  • Legal authorities: when required by law or to protect our rights.

4. Cookies

We use essential cookies for authentication and preferences (such as language and dark mode), plus analytics cookies to understand platform usage. You can manage cookies via your browser settings.

5. Data Retention

We retain account and conversation data for as long as you use the service. After account closure, we delete personal data within 90 days, except where we are required to retain it for legal or accounting purposes.

6. Security

We use encryption in transit (TLS/HTTPS) and at rest, strict access controls, and regular security reviews. However, no method of transmission over the Internet is 100% secure.

7. Your Rights

Under data-protection laws (e.g. GDPR, CCPA), you have the right to:

  • Access or obtain a copy of your personal data.
  • Correct inaccurate data.
  • Request deletion of your data ("right to be forgotten").
  • Object to or restrict processing.
  • Withdraw consent at any time.

To exercise these rights, contact us at the email below.

8. Children's Privacy

Our service is not directed to children under 13 (or 16 in some jurisdictions). We do not knowingly collect data from minors.

9. International Processing

Your data may be processed on servers located outside your country. We rely on lawful transfer mechanisms (such as Standard Contractual Clauses) where required.

10. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes by email or in-app notice.

11. Contact Us

For privacy-related questions, contact us at: privacy@mesej.app