Privacy Policy

We collect the following types of information:

• Account Information: Name, email address, password (hashed), and role when you register for a Synafex account.
• Business Information: Business name, WhatsApp Business phone number ID, and WhatsApp Business API access token provided during onboarding.
• Contact Data: Phone numbers, names, email addresses, tags, and categories of contacts that businesses add or receive through WhatsApp conversations.
• Conversation Data: Messages sent and received through WhatsApp Business API, including text content, timestamps, delivery/read status, and media references.
• Campaign Data: Campaign names, audience selections, message templates, scheduling, and delivery analytics (sent, delivered, read counts).
• Flow/Automation Data: Chatbot workflow configurations, node settings, and automation rules created by businesses.
• Usage Data: Browser type, IP address, device information, pages visited, and actions taken within the dashboard for security and analytics purposes.

We use collected information for the following purposes:

• To operate and provide the Synafex platform and its features (live chat, campaigns, chatbot flows, contact management)
• To send and receive WhatsApp messages on behalf of businesses via the WhatsApp Business API
• To authenticate users and secure their accounts
• To deliver campaign analytics and dashboard insights
• To improve AI chatbot responses and automation quality
• To provide customer support
• To detect fraud, prevent abuse, and maintain platform security
• To comply with legal obligations and Meta Platform Terms

Synafex does not sell personal information to third parties.

Synafex uses the Meta Platform (WhatsApp Business API) to provide its messaging services. In connection with this:

• We receive and process data from Meta including WhatsApp message content, phone numbers, message status updates, and user profile information as permitted by the WhatsApp Business API.
• Platform Data (as defined by Meta) is used solely to provide Synafex's services to our business customers — specifically to send/receive messages, manage contacts, run campaigns, and power chatbot automations.
• We do not use Platform Data for purposes unrelated to Synafex's core functionality.
• We do not share Platform Data with third parties except as required to provide our services (e.g., cloud hosting infrastructure).
• All Platform Data handling complies with Meta's Platform Terms and Developer Policies.

We may share information with:

• Meta/WhatsApp: Message data is transmitted through the WhatsApp Business API as required to send and receive messages.
• Cloud Infrastructure Providers: Our databases and servers are hosted on trusted cloud providers (e.g., Render, Vercel) that process data on our behalf under strict data processing agreements.
• Legal Requirements: We may disclose information if required by law, regulation, legal process, or governmental request.

We do not sell, rent, or trade personal data to advertisers, data brokers, or any unrelated third parties.

We implement the following security measures to protect your data:

• All data in transit is encrypted using HTTPS/TLS
• Database access is restricted and protected with authentication credentials
• User passwords are hashed using industry-standard algorithms (bcrypt)
• API access is secured with JWT-based authentication and role-based access control
• WhatsApp Business API credentials (access tokens) are stored securely and never exposed to end users
• Regular security monitoring and logging for unauthorized access attempts

We retain data as follows:

• Account Data: Retained for as long as your account is active. Deleted upon account closure request.
• Conversation Data: Retained for the duration of the business account's active period to provide chat history and analytics.
• Campaign Data: Retained to provide historical analytics and reporting.
• Platform Data from Meta: Retained only as long as necessary to provide our services, and deleted when no longer needed or upon user/business request.

When data is no longer needed, it is securely deleted or anonymized.

Users and businesses have the right to request deletion of their data:

• Business owners can delete individual contacts, conversations, campaigns, and flows from the Synafex dashboard at any time.
• Account deletion requests can be submitted by contacting us at the email address below. Upon request, we will delete all associated data within 30 days.
• When a business disconnects its WhatsApp Business account from Synafex, all associated Platform Data will be deleted.
• Meta may request deletion of Platform Data at any time, and we will comply promptly.

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate personal data.
• Deletion: Request deletion of your personal data (see Data Deletion section above).
• Data Portability: Request export of your data in a machine-readable format.
• Objection: Object to certain types of data processing.

To exercise any of these rights, please contact us using the information in the Contact section below.

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us:

• Email: privacy@synafex.com
• Platform: Synafex Dashboard > Support