Privacy Policy

1. Data Controller

The data controller for this application is SAMZ Webdevelopment & Trading VOF, registered in the Netherlands. For any questions regarding this privacy policy or data processing, you can contact us at albert@samzdesign.nl.

2. What Data We Collect

When you use our WhatsApp Business Platform, we may collect and process the following data:

• Phone numbers of message recipients
• Message content and template data
• WhatsApp Business Account information obtained via Facebook Embedded Signup
• Usage data such as message delivery status and timestamps

3. Legal Basis for Processing

We process personal data based on the following legal grounds under the General Data Protection Regulation (GDPR / AVG):

• Consent — Recipients have opted in to receive WhatsApp messages
• Legitimate interest — To operate and improve our messaging platform
• Contract performance — To deliver agreed-upon messaging services

4. How We Use Your Data

We use the collected data to:

• Send WhatsApp messages on behalf of our users
• Create and manage message templates
• Facilitate WhatsApp Business Account onboarding via Meta
• Monitor message delivery and platform performance

5. Third-Party Services

We use the following third-party services to operate our platform:

• Meta (Facebook) — WhatsApp Business API and Embedded Signup
• Twilio — Message delivery infrastructure
• Vercel — Application hosting

These providers may process data outside the European Economic Area (EEA). Where applicable, appropriate safeguards such as Standard Contractual Clauses (SCCs) are in place.

6. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes described in this policy. Message data is retained for a maximum of 30 days after delivery unless required for legal compliance.

7. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of access — Request a copy of your personal data
• Right to rectification — Request correction of inaccurate data
• Right to erasure — Request deletion of your personal data
• Right to restriction — Request restriction of data processing
• Right to data portability — Receive your data in a structured format
• Right to object — Object to processing based on legitimate interest

To exercise any of these rights, contact us at albert@samzdesign.nl.

8. Cookies

This application uses a single essential cookie (auth_token) for authentication purposes. This cookie is strictly necessary for the application to function and does not require consent under the ePrivacy Directive.

9. Complaints

If you believe your data protection rights have been violated, you have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.

10. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this page periodically.