Privacy Policy

1. Who we are

Mesorra ("we", "us") provides a multi-tenant conversational automation platform for WhatsApp Business messaging, shared inbox, bots, templates, and campaigns. This policy explains how we handle personal and business data when you use mesorra.com, our web app, and related APIs.

2. Data we collect

• Account data: name, email, organization details, and authentication credentials.
• Messaging data: WhatsApp conversation content, contacts, templates, and campaign metadata processed on behalf of your organization.
• Integration credentials: Meta / WhatsApp Business access tokens and related identifiers, stored encrypted at rest.
• Usage & logs: product analytics, audit events, and technical logs needed to operate and secure the service.

3. How we use data

We use data to provide the product (inbox, bots, sending/receiving messages), authenticate users, bill for plans and message credits, improve reliability and security, and comply with law. We do not sell personal data. We do not scrape WhatsApp Web or use unofficial WhatsApp clients.

4. Meta & WhatsApp

When you connect a WhatsApp Business Account via Meta Embedded Signup, Meta shares tokens and asset identifiers with Mesorra so we can send/receive messages and manage templates on your behalf. Tokens are encrypted server-side and are not returned to browsers after connection. Live webhooks are validated with Meta signature checks.

5. Sharing

We share data with subprocessors that host infrastructure (e.g. cloud hosting), payment processors, and Meta as required to deliver WhatsApp messaging. Tenant data is isolated by organization membership. We may disclose information if required by law or to protect rights and safety.

6. Retention & security

We retain account and messaging data while your organization is active and as needed for legal, billing, and security purposes. We apply encryption in transit, encryption of sensitive tokens at rest, access controls, and audit logging. No method of transmission or storage is perfectly secure.

7. Your rights

Depending on your location, you may have rights to access, correct, delete, or export personal data, or to object to certain processing. Contact us using the details below. Organization admins control tenant user access inside the product.

8. Contact

Privacy questions: privacy@mesorra.com