Privacy Policy

Last updated: May 2026

1. Who We Are

WhatBiz is operated by Degordons Tech Enterprises, based in Abuja, Nigeria. We build automation tools that connect businesses to their customers via WhatsApp, Instagram, and Facebook Messenger. Contact us at hello@whatbizapp.com.

2. What Data We Collect

We collect information you provide when creating an account including your name, email address, and business details. We also collect data generated through your use of the platform such as customer messages, order records, product catalogues, and delivery zone configurations. When customers interact with your automated WhatsApp, Instagram, or Facebook channels, their messages and contact information are processed and stored on your behalf.

3. How We Use Your Data

We use your data to provide and improve the WhatBiz service, to send automated replies to your customers across WhatsApp, Instagram, and Facebook Messenger, to process orders and payment links, to send you service-related notifications and updates, and to provide customer support. We do not sell your data to third parties. We do not use your data for advertising.

4. Legal Basis for Processing

We process your personal data on the following legal bases: performance of our contract with you (to deliver the WhatBiz service you signed up for), our legitimate interests (to operate, secure, and improve the platform and prevent abuse), your consent (where you connect third-party channels such as WhatsApp, Instagram, or Facebook), and compliance with legal obligations (such as tax and record-keeping requirements). Where we rely on consent you may withdraw it at any time by disconnecting the relevant channel or contacting us.

5. Data Processors

We use the following third-party services to process data on your behalf: Supabase Inc for database storage and user authentication, Vercel Inc for hosting and deployment, Meta Platforms Inc for WhatsApp Business API, Instagram Messaging API, and Facebook Messenger API, Paystack for payment processing, Groq Inc for voice transcription (when customers send voice notes), and Resend for transactional email delivery. Each processor handles data according to their own privacy policies and is contractually bound to protect your data.

6. Meta Platform Data

When you connect your WhatsApp Business number, Instagram account, or Facebook Page to WhatBiz, we receive and store access tokens and account identifiers provided by Meta. This data is used exclusively to send and receive messages on your behalf. We store this data securely and never share it. You can disconnect any channel at any time from your WhatBiz settings, which immediately removes our access.

7. TikTok Integration and Data Usage

When you connect your TikTok account to WhatBiz, we access basic TikTok profile details, ad comment data, and mentions through the official TikTok Business API. This data is used strictly to populate your private WhatBiz dashboard for business insights and automation management. We do not sell, scrape, or share your TikTok data with any third party, and we never use it for advertising. TikTok Data Deletion Instruction: to remove your TikTok data or unlink your account at any time, open WhatBiz Settings, go to Connected Channels, and click Disconnect on TikTok. This immediately revokes our access and deletes the stored access and refresh tokens. You can also email hello@whatbizapp.com to request full deletion of all TikTok-derived data, which we complete within 30 days.

8. Customer Data

When your customers message your connected channels, their phone numbers, names, and message content are stored in your WhatBiz account. This data belongs to you. You are responsible for informing your customers that automated responses may be used. Customers can request deletion of their data by contacting you directly as the business owner.

8b. Storefront Customer Data

When a customer places an order through your WhatBiz Storefront, we collect their name, Nigerian phone number, email address, delivery address or chosen pickup point, and order details. This data is stored in your WhatBiz account so you can fulfill and manage the order. The customer email address is used to send transactional order updates (order received, payment confirmed, dispatched, delivered) via Resend. We do not use storefront customer data for advertising. Storefront customer data belongs to you as the business owner. Customers who placed an order through your storefront and wish to have their data removed should contact you directly. You may also contact us at hello@whatbizapp.com to request deletion of specific records.

9. Data Retention

We retain your account data for as long as your account is active. Messages and orders are retained for 24 months by default. If you delete your account, we delete all associated data within 30 days except where retention is required by law.

10. Security

We protect your data using industry-standard technical measures. All data in transit, including every connection to our database, API, and storefront, is encrypted using TLS 1.2 or higher. All data at rest is encrypted using AES-256 encryption through our infrastructure provider Supabase. We also use row-level security on our database so each business can only access its own data, API signature verification on all incoming webhook communications, and access controls restricting who can reach production systems. Despite these measures, no system is completely secure. Please protect your account credentials and notify us immediately of any suspected unauthorised access.

10b. Access Control

Access to personal data stored on WhatBiz is restricted to authorized personnel on a need to know basis only. Team members may only access customer or business data when required to operate, maintain, or support the platform, such as resolving a support ticket or investigating a security issue. We do not grant blanket access to production data, and access is revoked immediately when a team member no longer needs it or leaves.

11. Your Rights

You have the right to access the personal data we hold about you, to correct inaccurate data, to request deletion of your data, and to export your data. To exercise these rights contact us at hello@whatbizapp.com. We will respond within 30 days. You also have the right to request deletion of data associated with a connected Meta account at https://whatbizapp.com/api/auth/data-deletion.

12. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes by email or via an announcement in your dashboard. Continued use of WhatBiz after changes take effect constitutes acceptance of the updated policy.

13. Contact

For privacy-related questions or requests contact us at hello@whatbizapp.com or write to Degordons Tech Enterprises, Abuja, Nigeria.