Centro de ayudaContacto
Iniciar sesión
Whatsuite
Agenda una demoPrueba gratis

Privacy Policy

Actualizado el 26 October 2026

This Privacy Policy explains how Outhentica Global (Private) Limited, the company that owns and operates Whatsuite ("Whatsuite", "we", "us"), collects, uses and shares personal data. It covers our websites, the Whatsuite platform, and conversations with our team.

For the personal data described here, Outhentica Global (Private) Limited is the controller. Our details are in section 13.

1. Our role: controller and processor

Whatsuite is used by businesses ("customers") to talk to their own customers on WhatsApp, Instagram, Messenger, TikTok, web chat and phone.

  • We are the controller of data about our customers' account users, people who visit our websites or contact us, and the people who connect Meta accounts to Whatsuite.
  • We are a processor of the contacts, messages, calls and files that a customer handles in its workspace. That business decides why and how the data is used, and its privacy notice applies. We process that data only on its instructions, under our Data Processing Addendum.

If a business messaged you through Whatsuite and you want your data deleted, contact that business, or use our data deletion page and we will pass your request on.

2. Data we collect

Data you give us

  • Account details: name, work email, phone number, company, role, password (stored only as a hash) and two-factor settings.
  • Billing details: billing address, tax number and payment information. Card details are handled by our payment provider; we never see full card numbers.
  • Communications: messages to our sales, support and privacy teams, demo bookings, and form submissions.
  • Content you publish to us, such as reviews or partner applications.

Data we collect automatically

  • Usage data: pages visited, features used, and actions taken in the platform.
  • Device and log data: IP address, browser, operating system, time zone, and security logs such as sign-ins.
  • Cookies and similar technologies, as described in our Cookie Policy.

Data from third parties

  • Meta (Facebook, Instagram and WhatsApp), when you connect a business account. See section 3.
  • Other channels and integrations you connect, such as TikTok, online stores, CRMs and payment providers.
  • Payment providers, to confirm payments.

3. Data we receive from Meta

When you connect WhatsApp, Instagram or Messenger to Whatsuite, you log in with Facebook Login for Business (including WhatsApp Embedded Signup) and choose which assets to share. Through Meta's APIs we then receive:

  • your name and app-scoped Facebook user ID, and the permissions you granted;
  • your business portfolio ID and name;
  • WhatsApp Business Account IDs, phone numbers and their IDs, display names, verification status, quality ratings and messaging limits;
  • message templates and their approval status;
  • Facebook Page and Instagram professional account IDs, names and usernames;
  • the access token that lets Whatsuite act on those assets;
  • messages, media, reactions, delivery and read receipts, and call events sent to and from the connected accounts.

We use this data only to connect and operate the channels you chose, to show you their status, and to keep your account secure. We do not sell it, use it for advertising, share it with data brokers, or use it to train AI models. We handle it in line with Meta's Platform Terms and Developer Policies.

Access tokens are encrypted at rest. When you disconnect a channel, we delete its access token straight away and delete the related account data within 30 days, unless the law requires us to keep it. You can also remove Whatsuite's access at any time in Meta Business Settings (under Integrations, Connected apps) or in your Facebook settings (under Business integrations).

4. How we use personal data

We use personal data to:

  1. Create and manage accounts and provide the Service.
  2. Connect and operate the messaging channels you choose.
  3. Process payments and send invoices.
  4. Provide support and answer requests.
  5. Keep the Service secure, prevent fraud and spam, and enforce our Terms and Acceptable Use Policy.
  6. Improve the Service, using aggregated or de-identified data where possible.
  7. Send service messages, such as security alerts, billing notices and changes to our terms.
  8. Send marketing about Whatsuite, where permitted. You can opt out at any time.
  9. Comply with legal obligations.

Where data protection laws such as the GDPR or UK GDPR apply, we rely on:

  • Contract: to provide the Service you signed up for.
  • Legitimate interests: to secure, support, improve and promote the Service, balanced against your rights.
  • Consent: for non-essential cookies and some marketing, which you can withdraw at any time.
  • Legal obligation: to keep records and respond to lawful requests.

6. How we share personal data

We do not sell personal data. We share it only with:

  • Service providers who help us run Whatsuite, such as hosting, email delivery, payments and, when enabled, AI model providers, under contracts that protect the data. The current list is in our Trust centre.
  • Channels you connect, such as Meta and TikTok, so that messages can be sent and received.
  • Integrations you connect, when you turn them on.
  • Professional advisers, such as lawyers, auditors and accountants.
  • Authorities, when the law requires it or to protect rights and safety.
  • A buyer or successor, if our business is merged or sold. We will tell you first.

7. International transfers

We are based in Pakistan and our providers may process data in other countries. When we transfer personal data out of the European Economic Area, the United Kingdom or Switzerland, we use appropriate safeguards, such as Standard Contractual Clauses.

8. How long we keep data

  • Account data: while your account is active. After it is closed, you have 30 days to export your data, and we delete it within a further 60 days, including from backups as they rotate.
  • Connected channel data: deleted within 30 days after you disconnect the channel.
  • Billing records: as long as tax and accounting law requires.
  • Website enquiries and privacy requests: up to 24 months after our last contact, so we can show how we handled them.
  • Security logs: up to 12 months.

9. Security

We protect personal data with technical and organisational measures. These include encryption in transit and at rest, separation of each workspace's data in the database, role-based access, two-factor authentication for staff, logging and tested backups. No system is perfectly secure, so please use a strong password and turn on two-factor authentication.

10. Your rights

Depending on where you live, you may have the right to:

  • access the personal data we hold about you;
  • correct inaccurate data;
  • delete your data;
  • restrict or object to some processing, including direct marketing;
  • receive your data in a portable format;
  • withdraw consent at any time;
  • complain to your data protection authority.

To exercise these rights, use our data deletion and privacy request form or email privacy@whatsuite.io. We will confirm your identity first, then respond within 30 days. Account owners can also export or delete data in Settings → Privacy. We will not treat you differently for exercising your rights.

11. Children

Whatsuite is a business service and is not intended for anyone under 18. We do not knowingly collect personal data from children. If you believe a child has given us personal data, contact privacy@whatsuite.io and we will delete it.

12. Changes to this policy

We may update this policy. We will post the new version here with a new "Updated" date and, for material changes, tell account owners by email or in the Service.

13. Contact us

Outhentica Global (Private) Limited (trading as Whatsuite)

Site 105, 1st Floor, PECHS Community Hall & Office Complex, Block-2, Karachi, Sindh 75400, Pakistan

  • Privacy questions and requests: privacy@whatsuite.io
  • General enquiries: info@whatsuite.io
  • Phone: +1 425 541 4212