1.Introduction
This Privacy Policy explains how Wazzap.mx (“Wazzap”, “we”, “our” or “us”) collects, uses, stores and shares personal data when you use our platform and related services. Wazzap is a software-as-a-service provider operating in Mexico that enables businesses to centralize and manage their communications on WhatsApp, Instagram, Facebook and other channels. We take the privacy and security of personal data seriously; however, please read this document carefully to understand our practices and the limits of our responsibility.
Wazzap processes personal data both for our own purposes and under instructions from our customers. As noted by similar providers, when we process data on behalf of customers we strictly adhere to their instructions and do not use the data for any other purposes. Our customers are responsible for the content and use of the messages they send through our platform, and they must ensure their own compliance with applicable laws.
This Policy is drafted in accordance with the Mexican Federal Law on the Protection of Personal Data Held by Private Parties (Ley Federal de Protección de Datos Personales en Posesión de los Particulares — LFPDPPP). The LFPDPPP provides that the protection of personal data is of public order and aims to guarantee the privacy and the right of individuals to control their information.
2.Scope and Responsibility
This policy applies to the data we collect when you:
- Sign up for an account or use our services;
- Connect third-party channels (e.g., WhatsApp, Instagram, Facebook) to your Wazzap account;
- Integrate external tools such as n8n, GoHighLevel, ChatWoot or other connectors;
- Communicate with us or participate in surveys or feedback programs.
Our services are intended for use by businesses. Wazzap is not responsible for the misuse of the platform by our clients. Clients control the messages they send and the data they collect; we do not monitor or filter the content. When clients send illegal, abusive or unsolicited messages, they bear sole responsibility for any consequences.
3.Data We Collect
The personal data we collect depends on how you interact with our services. In general, we may collect:
- Account Information: Contact details (name, email, phone number), company name, payment information and credentials. This information is provided directly by you when you register.
- Message Content: To operate the service we store the content of the conversations you send or receive through Wazzap. Similar to other communication platforms, we store all content you provide, including information related to you or your end users, and we may gather this information from integrations linked to the service.
- Integration Data: When you connect third-party services (like WhatsApp, Instagram or other tools) we may receive information from those services as necessary to provide our own services.
- Usage and Log Data: Metadata about how and when you use Wazzap (e.g., IP addresses, device information, browser type, access times). This helps us monitor performance and improve our services.
We do not intentionally collect sensitive personal data (e.g., racial or ethnic origin, health, political opinions) unless you or your users include such information in the messages processed through Wazzap. If sensitive data is transmitted, we treat it with the same technical safeguards described below but cannot control its disclosure by clients.
4.Purposes of Processing
We process personal data for the following purposes:
- Service Provision: To deliver and maintain our platform, create and manage user accounts, route messages, provide customer support and respond to inquiries.
- Integration and Automation: To enable the functioning of third-party integrations (e.g., n8n, GoHighLevel, ChatWoot) and automate workflows.
- Security and Monitoring: To detect and prevent fraud, abuse and technical issues; to monitor usage and performance; and to secure our systems.
- Legal Compliance: To comply with legal obligations, such as responding to lawful requests from authorities or enforcing our Terms of Service.
When we process data on behalf of our clients, we act as a processor, following their instructions and not using the data for our own purposes.
5.Legal Basis for Processing
Under the LFPDPPP, data controllers must process personal data lawfully, fairly and responsibly. We rely on the following bases:
- Consent: By creating an account and connecting channels to Wazzap, you consent to our processing of your data for the purposes described in this Policy. You can withdraw your consent at any time, but this may affect your ability to use the service.
- Performance of a contract: We process data as necessary to fulfil our contractual obligations to provide the services you request.
- Legitimate interests: We may process data for our legitimate interests, such as improving our services or ensuring security, provided that these interests are not overridden by your rights.
Clients who process data using Wazzap are responsible for obtaining their end users’ consent and providing them with an appropriate privacy notice, including the purposes of processing and their rights under the LFPDPPP (rights of access, rectification, cancellation and opposition — ARCO).
6.External Software and Third-Party Integrations
Wazzap integrates with several external software solutions to provide automation and messaging capabilities (for example n8n, GoHighLevel and ChatWoot). These tools are operated by third parties and may experience disruptions, security incidents or outages that are beyond our control. Wazzap is not responsible for failures, errors, downtime or data loss caused by third-party software.
When you enable a third-party integration:
- You direct Wazzap to exchange data with that tool. Any information transmitted to or from third-party services is subject to their own privacy policies and terms.
- You acknowledge that Wazzap cannot guarantee the performance or security of those systems. If a third-party provider has an incident, your data might be affected.
7.Use of Non-Official WhatsApp API
Wazzap provides connectivity with WhatsApp via both official and non-official APIs. Using a non-official WhatsApp API carries inherent risks:
- Account bans: WhatsApp may suspend or ban numbers that use non-official integrations. Wazzap cannot control or reverse such bans. Recovery of banned numbers is beyond our control and may not be possible.
- Changes and downtime: Because non-official solutions depend on reverse engineering of WhatsApp protocols, they may stop working without warning. We are not liable for service interruptions or losses resulting from changes by WhatsApp.
By choosing to use a non-official API, you assume responsibility for these risks.
8.Data Security
We implement technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse or disclosure. These measures include encryption, access controls and security policies. In the Mexican data protection framework, controllers must establish technical and administrative security measures to protect personal data. We strive to meet or exceed these requirements.
Nevertheless, no method of transmission over the internet or electronic storage is completely secure. Wazzap cannot guarantee absolute security and is not responsible for unauthorised access to data or accidental leaks, particularly when such leaks result from misuse by clients, third-party integrations or uncontrollable external factors.
9.Data Retention and Deletion
We retain personal data only for as long as necessary to fulfil the purposes outlined in this Policy, unless a longer retention period is required by law. Clients may delete their accounts at any time; upon deletion, we will remove or anonymise associated data, subject to our legal obligations and legitimate business interests. Clients are responsible for exporting any necessary data before closing their account.
10.Sharing and Disclosure of Data
We may share personal data with:
- Service providers and subprocessors who assist us in hosting, processing payments, analytics, customer support or other functions. When selecting service providers, we ensure they implement appropriate security measures and comply with applicable data protection laws.
- Authorities or third parties when required by law, court order or to protect our rights, users’ safety or property.
We do not sell personal data. We also do not disclose data to third parties for their direct marketing unless expressly authorised by you.
11.Your Rights
Depending on your jurisdiction, you may have the following rights:
- Access: You can request access to the personal data we hold about you.
- Rectification: You can ask us to correct inaccurate or incomplete data.
- Cancellation/Deletion: You can request deletion or anonymisation of your data when it is no longer necessary or if you withdraw your consent.
- Opposition: You can object to the processing of your personal data for specific purposes.
To exercise these rights, please contact us using the details in section 14. We will respond to requests within the time limits established by the LFPDPPP and other applicable laws.
12.Responsibility of Clients
Clients using Wazzap are controllers of the personal data they collect and process through the platform. Clients must:
- Provide an appropriate privacy notice to their end users.
- Obtain any necessary consents and authorisations.
- Use Wazzap in compliance with all applicable laws, including anti-spam and consumer protection rules.
- Avoid sending abusive, deceptive, unsolicited or illegal content via Wazzap.
Wazzap disclaims all responsibility for messages or content transmitted by clients and any consequences arising from their use of our platform.
13.Changes to This Privacy Policy
We may update this Policy from time to time to reflect changes in our practices, services or legal obligations. We will notify you of any material changes and indicate the date of the last update. Continued use of the services after notification constitutes acceptance of the revised Policy.
14.Contact Us
If you have questions, concerns or wish to exercise your data protection rights, please contact us at privacy@wazzap.mx. We will handle your request in accordance with applicable laws.
By using Wazzap, you acknowledge that you have read and understood this Privacy Policy and agree to its terms. If you do not agree with the policy, please refrain from using the services.