Privacy Policy

Zhat Convex Technologies (“Zhat Convex”, “we”, “us”, or “our”) operates the Zhat Convex platform, which enables businesses to send messages and media to their customers through the WhatsApp Business Platform / WhatsApp Business API provided by Meta Platforms, Inc. (“Meta”). This Privacy Policy explains what information we collect, how we use it, and the choices you have.

By using our website or services, you agree to this Privacy Policy.

1. Who this policy covers

This policy applies to (a) visitors to our website, (b) our customers (businesses that use the platform, “Customers”), and (c) the end users those Customers communicate with (“End Users”). When a Customer uses our platform to message their own contacts, that Customer is the data controller for those messages; we act as a data processor on their behalf.

2. Information we collect

• Account & business information: name, email, phone number, company name, billing details, and WhatsApp Business account identifiers.
• Contact data you provide: phone numbers and contact attributes you upload or sync to send messages. You are responsible for having a lawful basis and valid opt-in for these contacts.
• Message and media content: the text, images, videos, documents, templates and metadata you send or receive through the platform, transmitted via Meta’s WhatsApp Business Platform.
• Delivery metadata: timestamps, delivery/read receipts, and status callbacks.
• Usage & technical data: IP address, device/browser type, pages viewed, and interactions, collected via cookies and similar technologies.

3. How we use information

To provide and operate the platform; transmit your messages and media through the WhatsApp Business API; authenticate accounts and process billing; provide support; monitor performance, security and abuse; comply with legal obligations; and improve the service.

4. WhatsApp Business Platform and Meta

Messages and media you send are processed and delivered through Meta’s WhatsApp Business Platform. Meta’s handling of that data is governed by Meta’s and WhatsApp’s own terms and privacy policies. By using our service you also agree to comply with the WhatsApp Business Messaging Policy and applicable Meta policies. We do not control Meta’s processing and are not responsible for it.

5. Message content and media handling

We transmit your content to deliver it to the intended recipient. We may temporarily store content and media as needed to provide the service (for example, queued campaigns, delivery retries, media libraries, and logs). Retention periods are described in Section 9.

6. Consent and opt-in (Customer responsibility)

WhatsApp requires that recipients have opted in to receive messages. As a Customer, you represent and warrant that you have obtained valid opt-in consent from every recipient and that you will honour opt-out requests promptly. We provide tools to help capture consent and process opt-outs, but responsibility for lawful contact rests with you.

7. How we share information

• Meta / WhatsApp: to deliver your messages and media.
• Paddle (merchant of record): all payments are processed by Paddle, which collects and processes your billing details (name, email, payment method, billing address, tax information) as an independent controller under Paddle’s privacy policy. We never see or store your full card number.
• Sub-processors: infrastructure and service providers who process data on our behalf under contract — cloud hosting and database providers, a job-queue/cache provider, an email delivery provider, and (only for workspaces that enable the AI Chatbot add-on) AI providers that generate embeddings and answers from the knowledge base content and customer questions the workspace chooses to process. Uploaded knowledge-base content is isolated per workspace.
• CRM integrations you connect: if you connect a CRM (for example Bitrix24 or Zoho CRM), conversation fields you map are sent to that CRM under your instruction and its own terms.
• Legal & safety: where required by law, to enforce our terms, or to protect rights, safety and security.
• We do not sell personal information.

8. International data transfers

Your information may be processed in countries other than your own. Where required, we use appropriate safeguards (such as standard contractual clauses) for such transfers.

9. Data retention

We retain account data for as long as your account is active and as needed to provide the service and meet legal obligations. Message and media content and logs are retained for 90 days unless a longer period is required by law or requested by you under contract, after which they are deleted or anonymized.

10. Security

We use encryption in transit, access controls, and monitoring to protect data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Your rights

Depending on your location (e.g., under GDPR or CCPA/CPRA), you may have rights to access, correct, delete, restrict or object to processing, and data portability. To exercise these, contact us at hello@thecodegate.com. If you are an End User, please contact the Customer who messaged you, as they control that data; we will assist them as their processor.

12. Cookies

We use necessary cookies to run the site and optional analytics cookies to understand usage. You can control cookies through your browser settings.

13. Children

Our service is not directed to individuals under 16, and we do not knowingly collect their data.

14. Third-party links

Our site may link to third-party sites (including Meta). We are not responsible for their privacy practices.

15. Changes to this policy

We may update this policy. Material changes will be posted here with a new “Last updated” date and, where appropriate, notified to you.

16. Contact

Zhat Convex Technologies. Email: hello@thecodegate.com — or open a ticket from the Support section inside the app.