1. Who we are
Aventrix Connect (the “Service”) is a business messaging platform operated by Aventrix Digital (“we”, “us”, “our”) and available at connect.aventrixdigital.com. It lets businesses manage contacts, create message templates and send and receive WhatsApp messages through the official WhatsApp Business Platform (Cloud API) provided by Meta Platforms, Inc.
This policy explains what personal data we process, why, who we share it with, how long we keep it and the choices and rights you have.
2. Our role: controller and processor
Account data. For the people who sign up for and use the Service (workspace owners, administrators and team members) we decide how their data is used, so we act as the data controller.
Customer content. Businesses that use the Service (our “customers”) upload or receive data about their own contacts, such as phone numbers, names and WhatsApp conversations. We process that data only on the customer’s instructions to provide the Service, so for it we act as a data processor (service provider) and the customer is the controller. If you received a WhatsApp message from a business that uses the Service, that business is responsible for your data and you should contact it first; we will help it respond to your request.
3. Information we collect
Information you give us
- Account details: name, email address, password (stored only as a salted hash), job role, profile photo and notification preferences.
- Workspace details: company name, logo and branding, billing contact, and the team members you invite.
- Support and correspondence: anything you send us by email or through the Service.
Information we receive from Meta
When you connect a WhatsApp Business Account, including through Facebook Login for Business or Embedded Signup, we receive and store:
- your Meta Business ID, WhatsApp Business Account ID, phone number IDs, display phone numbers, display names and business profile;
- access tokens that let the Service call the WhatsApp Business Platform on your behalf (encrypted at rest);
- the name and email address of the person who granted access, when Meta provides them;
- message templates and their review status, phone number quality ratings and messaging limits;
- webhook events: delivery, read and failure statuses, and messages that your contacts send to your business number.
Customer content
- Contact records you upload or create: phone numbers, names, email addresses, tags, custom fields and opt-in or opt-out status.
- Messages sent and received through the Service, including text, media files, button replies and timestamps.
- Campaigns, templates, lists, segments and media you create.
Information collected automatically
- Log and security data: IP address, browser type, device information, pages visited, sign-in times and an audit trail of actions taken in your workspace.
- Cookies that are strictly necessary to keep you signed in, remember your theme and remember which company login page you used. We do not use advertising or cross-site tracking cookies.
4. How we use information
We use personal data only to:
- provide, operate and maintain the Service, including sending and receiving WhatsApp messages on your instructions;
- create and secure your account, authenticate users and enforce team permissions;
- process credits, top-ups and usage charges and keep billing records;
- send service emails such as invitations, password resets, delivery and billing alerts;
- honour opt-outs and suppression lists so contacts who asked not to be messaged are not messaged;
- detect, prevent and investigate fraud, abuse, spam and security incidents;
- provide support and respond to your requests;
- comply with legal obligations and with the WhatsApp Business and Meta platform policies.
We do not sell personal data, and we do not use data received from Meta or customer content for advertising, profiling, building marketing audiences or training machine learning models.
5. Legal bases
Where data protection laws such as the GDPR apply, we rely on:
- Contract: to provide the Service you signed up for;
- Legitimate interests: to secure the Service, prevent abuse and improve reliability, balanced against your rights;
- Legal obligation: to keep financial records and respond to lawful requests;
- Consent: where we ask for it, which you can withdraw at any time.
Customers are responsible for having a lawful basis, including any required opt-in consent, for the contacts they message through the Service.
7. How long we keep information
- Account, workspace and customer content: for as long as the workspace is active, then deleted within 30 days of account closure or a verified deletion request.
- Meta access tokens: until you disconnect the WhatsApp Business Account or remove the app, after which they are deleted.
- Raw webhook event logs: 14 days. Completed background job records: 3 days.
- Opt-out and suppression records: kept so we can keep honouring the opt-out, holding only the phone number and date.
- Billing and transaction records: as long as tax and accounting law requires.
- Backups: overwritten on a rolling cycle of up to 30 days.
8. Security
We protect data with encryption in transit (HTTPS/TLS), encryption of access tokens and secrets at rest, hashed passwords, role-based access control, workspace isolation, signed webhook verification and audit logging. No method of transmission or storage is completely secure, but we work to protect your data and will notify affected customers and authorities of a breach as the law requires.
9. International transfers
Our servers and service providers may be located outside your country, and Meta processes WhatsApp messages in its own data centres. When we transfer personal data across borders we use appropriate safeguards, such as standard contractual clauses, where the law requires them.
10. Your rights and choices
Depending on where you live, you may have the right to:
- access the personal data we hold about you and get a copy of it;
- correct inaccurate data;
- delete your data;
- object to or restrict certain processing;
- receive your data in a portable format;
- withdraw consent; and
- complain to your local data protection authority.
Email info@aventrixdigital.com to use any of these rights. We may need to verify your identity and will respond within 30 days. If you received WhatsApp messages from a business that uses the Service, you can reply STOP to that business at any time to stop receiving messages.
11. Deleting your data
You can ask us to delete your data at any time, and you can remove Aventrix Connect from your Facebook account’s Business Integrations. Step-by-step instructions are on our Data deletion instructions page.
12. Children
The Service is for businesses and is not directed to anyone under 18. We do not knowingly collect personal data from children. If you believe a child has given us data, contact us and we will delete it.
13. Changes to this policy
We may update this policy from time to time. We will change the “Last updated” date above and, for material changes, notify workspace administrators by email or in the Service before they take effect.
14. Contact us
Aventrix Digital
Email: info@aventrixdigital.com
Website: https://connect.aventrixdigital.com