Privacy Policy

1. Data controller

Gexp Software S.A. ("GoEasyChat", "we"), with contact email [email protected], is responsible for the processing of personal data collected through the GoEasyChat platform.

2. Data we collect

• Account data: name, email, and login credentials of agents registered on the platform.
• Conversation data: WhatsApp messages sent and received through Meta's WhatsApp Business API, including text, multimedia files, sender contact data (name, phone number).
• Technical data: IP address, browser type, operating system, access logs, and strictly necessary cookies for platform operation.

3. Purpose of processing

• Provide the multi-agent WhatsApp customer service.
• Manage user accounts, authentication, and access control.
• Route and store messages between customers and agents.
• Generate internal reports and service performance metrics.
• Send operational notifications related to the account.

4. Legal basis

Data processing is carried out based on the contractual relationship with our clients (contracting companies), the consent of end users when initiating WhatsApp conversations, and our legitimate interest in maintaining the security and proper functioning of the platform.

5. Data sharing

We do not sell personal data. We share data only with:

• Meta Platforms, Inc. — as the provider of the WhatsApp Business API, necessary for sending and receiving messages.
• Infrastructure providers — hosting and storage services to operate the platform.
• The contracting company — each client (tenant) has access only to the data of their own conversations and agents.

6. Data retention

Starter and Team plans include 12 months of conversation history and file attachments. After this period, data is automatically deleted. The Enterprise plan allows custom retention periods. Upon service cancellation, data is deleted within a maximum of 90 days, unless there is a legal obligation to retain it. Clients may request data export before deletion by contacting <emailLink>[email protected]</emailLink>.

7. User rights

Users and end contacts may exercise their rights of access, rectification, deletion, and data portability by writing to [email protected]. We will respond within a maximum of 30 business days.

8. Security

We implement technical and organizational measures to protect personal data, including encryption in transit (TLS/SSL), role-based access control, and data isolation per tenant.

9. Changes to this policy

We may update this policy periodically. Changes will be published on this page with the revised update date.

10. Contact

For privacy inquiries, write to [email protected].