Privacy Policy

StraboWats ("StraboWats," "we," "us," or "our") provides an enterprise customer communication platform that helps businesses manage conversations, relationships, and workflows on the WhatsApp Business Platform. This Privacy Policy describes how we collect, use, disclose, and protect information in connection with our website, applications, and services (collectively, the "Services").

By accessing or using the Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use the Services.

This Policy applies to businesses that register for a StraboWats account ("Customers"), individuals who use the Services on behalf of a Customer ("Users"), and end customers who communicate with a Customer through the Services ("End Customers"). It covers information processed through our web application, APIs, and any connected channels, including the WhatsApp Business Platform.

This Policy does not apply to third-party websites, applications, or services that we do not control, even if accessed through our Services.

We collect the categories of information necessary to operate the Services, including:

We also automatically collect technical information such as device identifiers, IP addresses, browser type, log data, and usage analytics when you interact with the Services.

StraboWats is an authorized user of the Meta WhatsApp Business Platform. When a Customer connects a WhatsApp Business Account, we process messages, media, template notifications, and metadata exchanged with End Customers strictly to deliver the requested Services, such as the Shared Inbox, CRM, automation, and analytics features.

WhatsApp data is processed only to provide requested services and is not used for any purpose unrelated to operating and improving the Services on behalf of the Customer. We handle this data in accordance with Meta's WhatsApp Business Platform policies and applicable data protection laws.

Our AI Copilot uses artificial intelligence to assist Users with day-to-day communication. These features may process conversation content to operate, including:

AI-generated outputs are provided as assistive suggestions for Users and are not used to make automated decisions with legal or similarly significant effects on End Customers without human review.

We use the information we collect to:

• Provide, operate, and maintain the CRM, Shared Inbox, AI Copilot, Workflow Automation, Analytics, and Campaign Management features
• Authenticate Users and secure Customer accounts
• Deliver, route, and store messages exchanged between Customers and End Customers
• Generate analytics, reporting, and insights for Customers
• Detect, investigate, and prevent fraud, abuse, and security incidents
• Provide customer support and respond to inquiries
• Comply with legal obligations and enforce our agreements

Where the General Data Protection Regulation (GDPR) applies, we rely on the following legal bases to process personal data:

• Contractual necessity — to provide the Services under our agreement with the Customer
• Legitimate interests — to secure, maintain, and improve the Services
• Legal obligation — to comply with applicable laws and regulations
• Consent — where required, such as for certain marketing communications

For most Services, the Customer acts as the data controller of End Customer data, and StraboWats acts as a data processor, processing information under the Customer's instructions and a Data Processing Agreement.

We share information only as necessary and in the following circumstances:

• With Meta, to deliver messages through the WhatsApp Business Platform
• With sub-processors and infrastructure providers who support hosting, storage, and processing
• With third-party integrations that a Customer chooses to connect
• With professional advisors, auditors, or regulators where required by law
• In connection with a merger, acquisition, or sale of assets, subject to confidentiality obligations

We maintain enterprise-grade technical and organizational measures designed to protect information against unauthorized access, disclosure, alteration, and destruction, including:

While no system can be guaranteed 100% secure, we continuously review and improve our security practices.

Customer data is retained only as long as necessary to provide the Service or comply with legal obligations. Organizations may delete customer data at any time from within their account, or by contacting us. Retention periods vary by data category:

Upon account closure or a verified deletion request, we delete or anonymize personal data within a reasonable period, except where retention is required to comply with legal obligations, resolve disputes, or enforce our agreements.

As a global platform, information may be transferred to, stored, and processed in countries other than where you are located. Data may be processed in secure cloud regions located in Europe, the Middle East, or the United States. Where we transfer personal data internationally, we implement appropriate safeguards, such as Standard Contractual Clauses, to ensure an adequate level of protection consistent with applicable data protection laws.

Subject to applicable law, individuals may have the following rights regarding their personal data:

To exercise these rights, please contact us at privacy@strabowats.com.

We use cookies and similar technologies to operate our website and application, remember preferences, and understand usage patterns through analytics. Essential cookies are used for authentication and security and cannot be disabled without affecting the functionality of the Services. You can control non-essential cookies through your browser settings.

Customers may connect the Services to third-party platforms to extend functionality. When a Customer enables an integration, data may be shared with that provider in accordance with the Customer's configuration and the provider's own privacy practices. Supported integrations include:

Each provider processes data under its own privacy policy and, where applicable, a data processing agreement with StraboWats. We select providers that maintain industry-standard security and compliance certifications.

The Service is not intended for children under 13 years of age. The Services are designed for business use and are not directed to individuals under this age. We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child without appropriate consent, we will take steps to delete such information.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will post the updated Policy on this page and revise the Effective Date above. Material changes may be communicated through the Services or by email.