Privacy Policy

Who is responsible

For the data of a business's own customers (people who write to the business on WhatsApp), the business that uses Acme decides why and how the data is used, and HS GROUP COLOMBIA S.A.S. processes it on the business's behalf. For the data of the people who sign up for Acme (business users), HS GROUP COLOMBIA S.A.S. is the data controller.

Data we collect

Account data: name, email address, password (stored hashed), organization name and settings.

WhatsApp data: when a business connects a WhatsApp number, we receive the messages sent and received through it, including text, images, audio, video, documents, locations and reactions; the phone numbers and WhatsApp profile names of the people who write; message status (sent, delivered, read); and the WhatsApp Business Account, phone number and message template details needed to operate the connection. The access token Meta issues for the connection is stored encrypted.

Usage data: basic technical information such as device, browser, IP address and actions in the platform, used to keep the service secure and working.

How we use it

To show conversations in the inbox and let teams send and receive WhatsApp messages; to generate suggested or automatic replies with AI when the business turns that on; to send message templates the business creates; to provide support, bill the subscription, prevent abuse and improve the service. We do not sell personal data and we do not use WhatsApp message content to advertise.

Who we share it with

Meta Platforms, through the WhatsApp Business Platform, to send and receive messages.

Infrastructure providers that host and store the platform: application hosting, database and file storage.

AI model providers, such as OpenAI and Anthropic, which receive the text of a conversation only when an AI feature is used to read it or draft a reply.

Other service providers: email delivery and payment processing.

Authorities, when the law requires it. Providers act under contracts that limit their use of the data to providing their service.

How long we keep it

We keep data while the account is active so the business can keep its conversation history. When an account is closed or a deletion request is completed, we delete the related data, except what the law requires us to keep.

Security

Data is encrypted in transit. Access tokens are stored encrypted, passwords are stored hashed, and customer files are kept in private storage that is only reachable through short-lived links. No system is completely secure, but we work to protect the data we hold.

Your rights

You can ask to access, correct, update or delete your personal data, and to withdraw consent. If you are a customer of a business that uses Acme, you can also ask that business. Under Colombian law (Law 1581 of 2012) you may also file a complaint with the Superintendencia de Industria y Comercio. See the data deletion page for how to ask us to delete your data.

Changes

We may update this policy. The date at the top shows when it last changed, and we will notify account holders of material changes.

Contact

Company:

HS GROUP COLOMBIA S.A.S.