WebgrupEnglish

Webgrup Messaging

Privacy Policy

Last updated: October 17, 2026

Webgrup Messaging Privacy Policy

Last updated: October 17, 2026

Webgrup Messaging ("the service") is a business messaging platform published by Webgrup, Türkiye. It lets businesses connect their WhatsApp Business accounts through Meta's official WhatsApp Business Platform (Cloud API) to send order, shipping and appointment notifications, answer their customers from a shared inbox and use an AI assistant for customer service. This policy explains what data is processed, why, and what choices you have.

1. Who this policy covers

  • Business customers: companies and their staff who create an account on Webgrup Messaging and connect a WhatsApp Business account.
  • End customers: people who exchange WhatsApp messages with a business that uses Webgrup Messaging.

For end customer data, the business is the data controller and Webgrup acts as a data processor on its behalf. For business customer account data, Webgrup is the data controller.

2. Data we process

Business customer account data

  • Name, e-mail address, company name and role of users who sign in
  • Billing and subscription information (card data is handled by the payment provider and never stored by us)
  • Usage records, security logs and support requests

WhatsApp Business Platform data (received through Meta's Embedded Signup and Cloud API with the business's permission)

  • WhatsApp Business Account ID, phone number ID, display name and message templates
  • Access tokens issued by Meta, stored encrypted and used only to call the WhatsApp Business Platform on the business's behalf
  • Message delivery and read status, quality rating and messaging limits

End customer data (processed only on the business's instructions)

  • WhatsApp phone number and profile name
  • Content of messages exchanged with the business, including media files
  • Opt-in and opt-out records for each message type
  • Order, cart, shipping or reservation details sent from the business's connected store or point-of-sale system

3. Why we process it

  • To provide the service: sending and receiving WhatsApp messages, showing conversations in the inbox, running automations the business sets up
  • To keep accounts secure, prevent abuse and enforce messaging policies (including WhatsApp's Business Messaging Policy)
  • To bill subscriptions and provide support
  • To meet legal obligations

We do not sell personal data, do not use end customer data for our own marketing and do not use message content to train AI models.

4. AI assistant

If a business enables the AI assistant, incoming messages and the business's own catalog or menu data are sent to our AI model provider to draft or send replies. The provider processes this data only to return a response, under a data processing agreement, and does not use it to train its models. End customers can always ask to talk to a person.

5. Meta and WhatsApp

Messages are carried by Meta's WhatsApp Business Platform. Meta processes message data as described in the WhatsApp Business Terms and Meta's policies: https://www.whatsapp.com/legal/business-policy and https://www.facebook.com/privacy/policy. Webgrup Messaging uses only official Meta APIs.

6. Where data is stored and international transfers

Service data is stored on servers operated by Webgrup. Meta and our AI model provider may process data outside Türkiye, including in the United States. Such transfers are carried out under Article 9 of Türkiye's Personal Data Protection Law (KVKK) and, where applicable, the GDPR, using the safeguards those laws require.

7. How long we keep data

  • Conversations and contact records: for as long as the business keeps its account, unless the business deletes them earlier
  • After a business closes its account: all its data, including conversations and tokens, is deleted within 30 days
  • Security logs: 90 days
  • Billing records: as long as tax law requires

8. Security

Access tokens and secrets are encrypted at rest, all traffic uses TLS, staff access is limited by role and recorded in an audit log, and each business's data is kept separate from other businesses.

9. Your rights (KVKK and GDPR)

You can ask to access, correct, delete or export your personal data, object to processing or withdraw consent, as provided by KVKK Article 11 and, where applicable, the GDPR. End customers should first contact the business they messaged; we will help that business respond. You can also write to us directly at [email protected].

10. Data deletion instructions

  • Businesses: delete your account from Account Settings, or e-mail [email protected] from your account e-mail. Disconnecting your WhatsApp Business account in Webgrup Messaging, or removing the app from Meta Business Settings, stops all access immediately.
  • End customers: reply "STOP" to unsubscribe from a business's messages, or ask the business to delete your data. You may also e-mail [email protected] with your phone number and the business name; we will forward and complete the request within 30 days.

11. Children

The service is meant for businesses and is not directed at children under 16.

12. Changes

We may update this policy. The date above shows the latest version, and material changes will be announced in the service or by e-mail.

13. Contact

Webgrup, Türkiye. [email protected]