sephanlyWHATSAPP WORKSPACEPrivacy policy
This policy describes how Sephanly uses information in Sephanly-Whatsapp.
Information processed
We process the email address or WhatsApp phone number you use for account access, its verification status, account and session records, and temporary verification-code records. We also process the Meta business and WhatsApp account identifiers you connect, business phone identifiers, encrypted access tokens, and messages and delivery events received after connection. Customer phone numbers and message content are used to display conversations and send replies you request.
How information is used
Information is used to connect accounts, provide the customer inbox, send approved templates, troubleshoot service failures, and fulfill data-deletion requests. The application does not sell message content or use it to train AI models.
WhatsApp Business app connections
When you connect an eligible existing WhatsApp Business app account, we synchronize its contacts, new messages, and the chat history you choose to share through Meta. Stored message history follows our 90-day retention. Contact records remain associated with your workspace until removed or deleted; removed-contact names are cleared. Temporary synchronization payloads are encrypted, cleared after processing, and subject to scheduled cleanup. Your existing Business app remains a separate way to use the connected number.
Service providers
Meta provides WhatsApp delivery and account connections. Sign-in is handled within our application using Better Auth, with account and session records stored in our PostgreSQL database. When you choose email, our configured email server delivers verification and password-recovery emails. When WhatsApp account verification is enabled and you choose it, Meta delivers the requested one-time code from Sephanly’s business number to your WhatsApp number. Verifying that number does not verify an email address. Inbox updates are synchronized directly between your browser and our application using the stored messages in our database. Our application hosting and PostgreSQL provider process service data on our behalf. The operator must identify the chosen host, database provider, and processing locations before publishing this policy.
Retention and security
Access tokens are encrypted before database storage. Message access is restricted to the connected workspace. The service includes a 90-day message-cleanup command; the operator must enable its daily schedule and confirm backup retention before this policy is published. Account connections remain until removed or access expires.
Your choices
Use Account & data to delete stored workspace data, or contact the operator. You may revoke the business integration in Meta Business settings. Deleting application records does not delete your WhatsApp account or data independently held by Meta or your customers.
Contact
sephanly.ke@gmail.com