Privacy Policy

1. Scope

This Policy explains how we collect, use, share, and protect personal data when you use ShopEazzy and related sites at our platform (the "Services").

2. Information We Collect

We collect only what we need to provide the Services:

• Account & business details: name, business name, business email, business category.
• WhatsApp/Meta identifiers: WhatsApp Business Account IDs (e.g., business_id, waba_id, phone_number_id), Meta user ID.
• Phone numbers: your WhatsApp Business phone number(s).
• Operational data: template names/IDs, messaging status (delivery, read receipts, timestamps), support tickets.
• Auth tokens: access tokens generated through Embedded Signup (stored server-side; never exposed to the browser).

3. How We Use Your Information

We use data to:

• Facilitate onboarding to the WhatsApp Business Platform (Embedded Signup).
• Send/receive WhatsApp messages on your behalf via the WhatsApp Cloud API.
• Manage templates, phone numbers, and webhooks.
• Provide support, troubleshooting, and service analytics.
• Comply with legal, security, and platform requirements.

Legal bases (where applicable): contract (to provide the Services), legitimate interests (service security/analytics), consent (where obtained), and legal obligations.

4. How We Share Information

We share data only with service providers necessary to run the platform:

• Meta Platforms, Inc. – to provision and operate WhatsApp Business integration.
• Twilio, Inc. (if used in your region or for fallback) – provisioning and technical support for WhatsApp API connectivity.
• Cloud vendors (e.g., hosting, storage, email, monitoring) under data-processing agreements.

We require all processors to protect your data and use it only as instructed.

5. International Transfers

Where data is transferred internationally, we rely on appropriate safeguards (e.g., standard contractual clauses) as required by law.

6. Retention

• Account/WABA identifiers: retained while your account is active.
• Support & operational logs: typically 90 days.
• Backups: encrypted and rolled off within 90 days.

We delete or anonymize data once it's no longer needed or upon verified request (see Data Deletion Policy).

7. Your Rights

Subject to applicable law, you may:

• Access, correct, or update your data.
• Request deletion of your data.
• Object to or restrict certain processing.
• Withdraw consent where processing is based on consent.

Contact tech@rurallink.africa to exercise these rights. We will verify your request and respond within statutory timelines.

8. Security

We implement industry-standard administrative, technical, and physical safeguards, including encryption in transit and access controls. No method of transmission/storage is 100% secure.

9. Children

Our Services are not directed to children under 16. We do not knowingly collect such data.

10. Changes

We may update this Policy. Material changes will be posted here with a new effective date.

11. Contact