WhatsSend privacy policy (English)
Last updated: 31 October 2026. The Italian version above prevails in case of doubt.
This policy covers WhatsSend, a web tool to manage contacts, customers and WhatsApp conversations (web form requests, order, shipping and appointment updates, opt-in campaigns) that Michele Sergi (sole proprietorship, VAT IT05098890758, Corso Fratelli Ciardo 46, 73034 Gagliano del Capo (LE), Italy, [email protected]) provides to business customers in any sector through Meta's WhatsApp Business Platform (Cloud API).
Roles
For the personal data of a business's contacts, the business is the data controller and Michele Sergi acts as data processor under Art. 28 GDPR. For panel users and connected Meta account identifiers, Michele Sergi is the controller.
Data we process
Contacts' phone numbers, names and email addresses from the business's web forms, online shop or other systems; order and booking details (order number, items or service, shipping or delivery status, appointment date and time); content of WhatsApp messages sent and received, attached photos and documents, delivery and read statuses; messages sent from the business's WhatsApp Business app and, only if the business chooses to share them during onboarding, up to 6 months of chat history and app contacts; Meta identifiers (WhatsApp Business Account ID, phone number ID, business portfolio ID) and access tokens; panel users' name, email, hashed password, IP address and activity log.
Purpose
To send and receive WhatsApp messages on behalf of the business that connected its number, including order, shipping and appointment updates and the custom automations it sets up (for example through webhooks from its online shop or management software), to manage its contacts, leads and reports, to create message templates and check phone number status on its WhatsApp Business Account, and to keep the service secure. Data received from Meta's APIs is used only to provide the service to the business that connected the account. It is never sold, never used for advertising or profiling, never combined across customers and never used to train AI models.
Retention
Messages, attachments and order or booking details: 12 months. Logs: 90 days. Database backups: 14 days. Contacts, tokens and Meta identifiers: until the contract ends or the business requests deletion, then deleted within 30 days.
Recipients
Meta Platforms Ireland Ltd. as provider of the WhatsApp Business Platform; IONOS SE, Germany, as hosting provider (server located in Germany); Brevo (Sendinblue SAS, France) for service emails that do not contain conversation content; authorities where required by law. The server and database are in the European Union and Meta access tokens are stored encrypted.
Website and contact form
When you visit whatssend.app or fill in the contact form, Michele Sergi is the controller. Form data (name, company, email, phone, message) is used to answer your request (Art. 6.1.b GDPR) and kept for 24 months after the last contact, or for the duration of the contract if you become a customer. Being contacted on WhatsApp is optional and based on your consent. The form sends no automatic WhatsApp messages: the request reaches us by email. IP address and technical data are processed by Cloudflare Turnstile to block spam (legitimate interest). Google Analytics 4 and Google Ads cookies are set only after you consent in the cookie banner, and you can change your choice from "Cookie settings" at the bottom of every page. Providers: IONOS SE (hosting, Germany), Brevo (notification email, France), Cloudflare, Inc. (anti-spam, USA), Google Ireland Ltd. (analytics and ads, possible transfer to the USA under the EU-US Data Privacy Framework or standard contractual clauses).
Your rights
Access, rectification, erasure, restriction, portability and objection (Art. 15-22 GDPR): write to [email protected], we reply within 30 days. You can also complain to the Italian Data Protection Authority (Garante). Businesses can request deletion of all their data as described in the data deletion instructions.