What data I handle, and what I do with it
A messaging integration touches end-customer conversations. So it is worth spelling out what comes in, what it is used for, and what never happens.
What the integration receives from Meta
Only data that belongs to the client company itself, and only what the conversation requires:
- The messages end customers send to the company, and the replies the company sends back
- The phone number on WhatsApp, or the profile identifier on Instagram, of the person who wrote in, plus their display name
- Delivery, read and failure status for each message
- Account identifiers and credentials belonging to the company, needed to keep the connection alive
- Conversation metrics, used for the company's operational reporting and cost reconciliation
What that data is used for
To deliver the message into the client company's system, show the conversation to its team, send the reply back to the end customer, trigger the notifications that end customer opted into, and produce the company's own operational reports. Nothing beyond that.
The data stays in the client company's infrastructure, in its cloud account, under its credentials. Retention is decided by the client, not by me. My own access is the minimum needed to build and operate the integration, it is logged, and the client can revoke it at any time without depending on me.
What never happens here
- I do not sell, rent or share this data with any third party
- I do not use one client's data to serve another, or to build a database of my own
- I do not use end-customer conversations to train any AI model of mine
- I do not use this data for advertising, mine or anyone else's
- I do not run bulk messaging to purchased lists, or to people who did not opt in
Who owns what
The business portfolio, the WhatsApp Business account, the phone number and the Instagram professional account belong to the client company, under its own name and its own agreement with Meta. Praeda acts as the technical provider, on that company's behalf, with the access it grants and for as long as it wants. No asset is held in my name, and there is no scenario where your company needs my permission to run its own channel.
In practice this means the work follows Meta's business messaging policies and the data protection law that applies to your case, including Brazil's LGPD and the GDPR when end customers are in Europe. Contact only with consent, opt-out honoured, purpose declared.
