1. Who is responsible
WisChat is a business messaging service operated by NouxSoft. This policy covers the web platform at v2.wis.chat, used by subscribing companies and their agents to serve their customers over WhatsApp, Messenger and Instagram.
Each subscribing company is the controller of its own customers' conversations; WisChat acts as processor.
2. The web platform
To provide the service, the platform processes:
- Account data: name, email address and hashed password of the subscribing company's users.
- Conversation data: messages, contacts and files from the connected WhatsApp lines, to show history and distribute cases among agents.
- Billing data: what is needed to issue the licence invoice, where applicable.
We use providers for specific functions — email delivery, payment gateways and electronic invoicing — each with access only to what its function strictly requires.
3. Meta Platform Data
WisChat is a Tech Provider for Meta's APIs. When a company connects its WhatsApp Business Account, its Facebook Page or its Instagram professional account, WisChat receives from Meta the Platform Data listed below, and processes it solely to provide the customer care service that company contracted.
| Platform Data | What it is used for | Retention |
|---|---|---|
| Content of inbound and outbound messages (text, media, location) | Display and handle the conversation from the panel and the case history | While the business account is active |
| The person's identifier on their channel (WhatsApp number, Messenger PSID, Instagram IGSID) and their profile name | Identify the conversation, assign it to an agent and reply on the same channel | While the business account is active |
| Delivery and read receipts | Show message status and retry failed sends | While the business account is active |
| Line data: WABA, phone number, verified name, quality rating, templates | Operate the channel and inform the business about the state of its line | While the line remains connected |
| Access tokens of the business and of the user who authorised the app | Call Meta's APIs on behalf of that business | Until disconnection or deauthorisation |
| Raw webhook payloads | Troubleshoot a delivery incident | 30 days |
How to request deletion
Anyone may request deletion of the data WisChat received from Meta about them, in two ways:
- From Meta: removing the app from your Facebook or Instagram settings notifies us and the deletion runs automatically. A confirmation code and a status URL are returned so the request can be tracked.
- By writing to us at privacidad@wis.chat with the channel and the identifier (phone number, Instagram handle or Messenger profile name). Requests are handled within 30 days and answered with the outcome.
Deletion covers messages, hosted media, the contact record, cases, the associated surveys and flows, and the raw webhook payloads in which that identifier appears.
4. What we do NOT do
- We do not sell or transfer user data to third parties.
- We do not use data for advertising or profiling.
- We do not use data to determine creditworthiness or for lending purposes.
- We do not collect users' browsing history or activity outside the platform.
- We do not access conversations unrelated to the lines the subscribing company connects.
- We do not use data received from Meta to train models, enrich profiles, build audiences, or for any purpose other than providing the customer care service of the business it came from.
5. Retention and security
Conversations are kept while the account is active, as they constitute the company's support history. When the account is closed they are deleted or anonymised, except for what must be retained under legal or tax obligations.
Traffic between Meta, the platform and its users travels encrypted over HTTPS (TLS 1.2 or above). Line credentials and Meta tokens are stored encrypted at rest, panel access requires authentication with two-factor available, and each company only sees its own data. Inbound webhooks are accepted only if they carry Meta's signature.
6. Your rights
You may request access, rectification, deletion or portability of your data, and object to certain processing. If you are an agent of a client company, address your request to that company as the controller; we will handle it as processor.
7. Contact
Write to privacidad@wis.chat for anything related to this policy or to the processing of your data.