Privacy Policy

Last updated: October 5, 2026

This policy explains what WaviPro collects when you connect your WhatsApp Business Account, why we collect it, and what you can do about it.

Who we are

WaviPro is a product of Brand Motion, operated by Jorge Homero Sánchez G, an individual conducting business activity in Nezahualcóyotl, Estado de México, Mexico. In this policy, “WaviPro”, “we” and “us” refer to Homero Sánchez, operating under the Brand Motion and WaviPro names.

You can contact us about anything in this policy at [email protected].

Our role

When a business (“you”) uses WaviPro, we process the data of your customers on your behalf and under your instructions, to provide the service. For the account data of the business itself, we act as the party responsible for that data.

What we collect

  • Account data: the email address and password hash of each user, and the business name of the workspace.
  • WhatsApp Business Account data: the account identifier, phone number identifiers, display names and quality ratings that Meta returns when you connect your account.
  • Access credentials: the business access token Meta issues for your account, always encrypted before it is stored.
  • Message data: the content, direction, timestamps and delivery status of the messages sent and received on the connected number, together with the phone number and WhatsApp profile name of the person writing to you.
  • Message template data: the names, content and approval status of the message templates you create through WaviPro.
  • Activity records: an audit log of security-relevant actions, such as connecting an account or creating a template.

How we use it

We use this data to run the service you asked for: connecting your WhatsApp Business Account, receiving and displaying incoming messages, sending messages and replies on your behalf, and managing your message templates.

We do not sell your data, we do not use it for advertising, and we do not use the content of conversations to train models.

Platform Data from Meta

Data we obtain through the WhatsApp Business Platform is used only to provide the features you enabled, under the permissions you granted. We request only the two permissions the product needs: whatsapp_business_messaging and whatsapp_business_management.

You can revoke our access at any time from your Meta Business settings. When access is revoked, we stop processing and delete the associated credentials.

Who we share it with

We share data only with the providers needed to operate the service, each under confidentiality and data protection commitments:

  • Meta Platforms, Inc., to send and receive messages and manage your WhatsApp Business Account through its APIs.
  • Supabase, for database hosting and user authentication.
  • Hostinger, for the servers that run the application.

We may also disclose data when required by law or by a competent authority.

How we protect it

  • All data is encrypted in transit using TLS.
  • Access tokens are encrypted at rest with AES-256.
  • Each business is isolated at the database level, so one customer cannot read another customer’s data.
  • Administrative access requires two-factor authentication.
  • Security-relevant application logs are reviewed at least weekly.

How long we keep it

Account and configuration data is kept while your workspace is active. The content of your messages is deleted automatically after 90 days, and everything is deleted with your workspace.

When you delete your workspace, we delete your data within 30 days, except where we are required by law to keep a record.

Your rights

Whether you are a business user or a person who has exchanged messages with one of our customers, you may ask us to:

  • tell you what personal data we hold about you and how we use it;
  • correct data that is inaccurate;
  • delete your personal data;
  • give you a copy of your data;
  • stop processing your data, or withdraw your consent where processing is based on it.

These rights are recognized under various U.S. state privacy laws. We apply them to all users regardless of where they live. We do not sell personal information or share it for advertising, and we will not treat you differently for exercising any of these rights.

Instructions to delete your data are on our data deletion page

Changes to this policy

If we change this policy, we will update the date at the top of this page and, for material changes, notify you by email before the change takes effect.