Privacy Policy

We handle two categories of data. Customer Account Data (where Texnity acts as the data controller) and End‑User Messaging Data, where our business customer is the controller and Texnity acts as a processor on their behalf.

From account holders: name, email, phone, business name, country, role, hashed password, Meta Business Manager ID, WABA ID, phone number IDs, display names, access tokens, invoicing details and transaction records (excluding full card numbers).
On behalf of businesses: contact numbers, custom attributes, tags, message content (templates, images, documents, audio, video, location) and conversation metadata (timestamps, delivery/read receipts, status, category, error codes) and opt‑in records.
Automatically: IP address, browser/device type, pages viewed, in-app actions, timestamps and cookies.

To provide, maintain and secure the service; route messages via the Meta API; authenticate users; enforce account limits; prevent abuse and fraud; investigate incidents; send transactional emails; provide support; and produce aggregated analytics. We do not sell personal data. We do not use the content of your end‑users' WhatsApp messages to train AI models or for any purpose other than delivering the Service.

We rely on performance of a contract, our legitimate interests, legal compliance, and consent where required. Businesses are responsible for having a lawful basis to message their customers (opt-in per the WhatsApp Business Messaging Policy).

We share data with Meta Platforms, Inc. (via the WhatsApp Cloud API); cloud infrastructure, storage and email providers; payment processors; professional advisors and authorities where required; and successors in interest in the event of a merger, acquisition or asset sale.

Texnity operates globally, with customers across multiple regions. Your data may be processed outside your country. Where required, we use Standard Contractual Clauses or equivalent safeguards.

Account data is retained for the active period plus 12 months after closure. End‑user messaging data is retained per your settings and can be deleted anytime; account closure triggers deletion or anonymization within 90 days. Logs and security records are kept for around 12 months. Backups are rotated on a schedule.

Subject to applicable law (including GDPR / UK GDPR) you may access, correct, delete, restrict, object to, or port your data, and withdraw consent. Exercise these rights via hello@texnity.com; we typically respond within 30 days. End-users should contact the business they interacted with directly.

We use TLS in transit, encryption at rest, least-privilege access, audit logging, regular patching and hardened staff authentication. Report vulnerabilities to hello@texnity.com.

The service is not directed at anyone under 16, and we do not knowingly collect personal data from children under 16.

We use strictly-necessary cookies for sessions and, with consent, analytics cookies. We do not use cross-site advertising trackers within the product.

Our service may link to third-party websites that have their own privacy policies. This policy does not cover those sites.

We will notify you of material changes by email or in-app at least 14 days before they take effect. Minor edits are reflected in the "Last updated" date above. Continued use of the service means you accept the updated policy.

General enquiries: hello@texnity.com. Data rights requests can go to the same address.