Privacy Policy

This policy describes how Wablar, a product of Paylus Estudio, processes personal data of site visitors, platform customers, and people who chat with a business customer through WhatsApp.

1. Data controller

• Owner: Paylus Estudio.
• Product: Wablar (wablar.com).
• Privacy contact: info@wablar.com.

2. Your role in this relationship

Two scenarios apply:

• Business customer (B2B): when your company contracts Wablar, we act as the data processor for your conversations with your own customers. Your company is the controller of that data.
• End user: if you wrote on WhatsApp to a business that uses Wablar, we process your messages on behalf of that business. To exercise your rights, contact that business first.

3. What data we collect

3.1 Customer data (business contracting Wablar)

• Identification of the company and its users (name, email, phone, role).
• Billing and tax information.
• Access credentials and activity logs on the platform.

3.2 Data processed on behalf of the customer

Through the integration with WhatsApp Business Platform (Meta) we process:

• End user’s WhatsApp phone number.
• Public WhatsApp profile name.
• Message content (text, attachments, location, shared contacts).
• Conversation metadata (timestamps, delivery status, message IDs).

3.3 Website technical data

• IP address, user-agent, pages visited.
• Minimal information required to operate the site.

4. Why we use it

• Deliver the contracted service and keep conversations active.
• Generate AI-assisted replies that human agents review and approve before sending.
• Provide support, billing, and comply with legal obligations.
• Improve service quality on an aggregated and anonymized basis.

We do not use messages to train generic AI models.

5. Legal basis

• Performance of contract with the business customer.
• Consent of the end user, obtained by the business before initiating the conversation (required by WhatsApp’s messaging policy).
• Legal obligations (billing, response to authorities).
• Legitimate interest in maintaining security and improving the service.

6. Third parties we share data with

• Meta Platforms, Inc. / WhatsApp LLC — provider of the official messaging API. Messages necessarily transit through their infrastructure. See Meta’s policy at https://www.whatsapp.com/legal.
• Infrastructure providers (hosting, database, monitoring), under confidentiality and processing agreements.
• Competent authorities when required by law.

We do not sell or transfer personal data for commercial purposes.

7. International transfers

Part of Meta/WhatsApp and our providers’ infrastructure is located outside the customer’s country of origin. When this happens, we apply standard contractual clauses or another mechanism recognized by applicable data protection law.

8. Retention

• Customer account data: while the contract is active and up to 30 days after termination (see Data Deletion).
• Conversations: by default retained while the customer maintains the account. The customer can configure shorter retention policies.
• Billing data: for the applicable legal period.

9. Your rights

You have the right to:

• Access your personal data.
• Rectify inaccurate data.
• Request deletion (see dedicated page).
• Object to processing or withdraw your consent.
• Request portability of your data.
• File a complaint with the data protection authority of your country.

To exercise them, write to info@wablar.com.

10. Security

We apply encryption in transit (HTTPS), encryption at rest for sensitive data, role-based access control, and audit logs for critical actions.

11. Changes

If we modify this policy, we will publish the new version on this page with the update date. Substantial changes will be notified to active customers via email.

12. Contact

For any privacy-related questions, write to us at info@wablar.com.