This Privacy Policy explains how Ranvedix (“Ranvedix”, “we”) handles information when you use our WhatsApp Business Platform onboarding and monitoring service (the “Service”). We operate as a Meta Technology Provider: we help businesses connect and manage their own WhatsApp Business Accounts on the WhatsApp Business Platform (Cloud API).
The information we collect
- Account & organization data: your name, email, and organization details, provided via our authentication provider.
- Connection metadata: WhatsApp Business Account (WABA) IDs, phone-number IDs, display names, quality ratings, messaging limits, and template metadata (name, category, approval status).
- Access tokens: per-connection business access tokens, stored encrypted at rest and used only to perform the management operations you authorize.
- Operational data: connection health snapshots, audit logs of privileged actions, and configuration you set.
What we deliberately do NOT collect or store
By design, the content of your WhatsApp conversations does not flow through our systems. We configure each connection so that message webhooks are delivered directly to your own server (Webhook Override). We do not store message bodies, conversation media, or the contact numbers of the people you message. If a message-content payload ever reaches our infrastructure, it is dropped and not persisted.
How we use information
To provide, secure, monitor, and support the Service: onboarding connections, monitoring account health and template status, alerting you to issues, billing, and meeting our legal and platform obligations.
Sub-processors
- Meta Platforms, Inc. — the WhatsApp Business Platform.
- Supabase — database hosting for account and connection metadata.
- Clerk — user authentication and organization management.
Security
Access tokens are protected with envelope encryption. We use TLS in transit, least-privilege access, and append-only audit logging for privileged actions.
Data retention & your rights
We retain account and connection metadata for as long as your account is active and as required for legal/operational purposes. You may request access to, correction of, or deletion of your data by contacting us.
International transfers
Your information may be processed in regions where we or our sub-processors operate, with appropriate safeguards.
Changes
We may update this policy; material changes will be reflected by the “Last updated” date above.
Contact
Questions about this policy: privacy@ranvedix.com.