Legal
Privacy Policy
Last updated: July 28, 2026
This Privacy Policy explains how Vynex Agency (“Vynex Agency”, “we”, “us”, or “our”) collects, uses, discloses, and safeguards information in connection with Vynex, our WhatsApp customer-relationship management (CRM) platform available at https://app.vynexagency.com (the “Service”). By using the Service you agree to the practices described here.
1. Who we are and our two roles
Vynex lets businesses manage conversations with their customers over the official WhatsApp Business Platform (Meta’s Cloud API). Depending on the data, we act in one of two roles:
- Controller — for the account data of the businesses and team members who sign up for and administer the Service (for example, your name, email, and billing details).
- Processor / service provider — for the end-customer data our business users send and receive through their own WhatsApp Business Account using the Service (for example, the phone numbers, profile names, and message content of the people they chat with). We process that data only on our business users’ instructions and on their behalf.
2. Information we collect
a. Account & profile data
- Name, email address, and password (stored only as a secure hash).
- Workspace / account details, team members, and roles.
- Optional profile information you choose to add (avatar, display name).
b. WhatsApp Business Platform data
When you connect a WhatsApp Business Account, we process data through Meta’s WhatsApp Cloud API to provide the Service. This may include:
- Your WhatsApp Business Account ID (WABA), phone number ID, business display name, and quality rating.
- Access tokens that authorize the Service to send and receive messages on your behalf. Tokens are encrypted at rest before storage.
- Inbound and outbound messages and their metadata (sender/recipient phone number, timestamps, delivery / read / reply status), message templates, and any media (images, documents, audio, video) exchanged.
- Contact records your business creates or imports (name, phone number, tags, notes, and custom fields).
- Click-to-WhatsApp / ad referral attribution (campaign source and creative) when a conversation starts from a Meta ad.
c. Usage & technical data
- Log data such as IP address, browser type, pages visited, and timestamps, used for security, debugging, and abuse prevention.
- Essential cookies required to keep you signed in (see Section 8).
3. How we use information
- To provide, operate, secure, and improve the Service.
- To send and receive WhatsApp messages, broadcasts, and automations that you configure.
- To authenticate users and protect against fraud and abuse.
- To provide support and to communicate with you about the Service.
- To comply with legal obligations and enforce our Terms.
We do not sell personal information, and we do not use the content of end-customer WhatsApp messages for advertising or to train AI models.
4. Use of the WhatsApp Business Platform & Meta data
Our access to and use of information obtained through the WhatsApp Business Platform and other Meta APIs complies with the WhatsApp Business Messaging Policy, the Meta Platform Terms, and the Meta Developer Policies. We only request the permissions we need to operate the Service, we use Meta data solely to provide features you have enabled, and we do not transfer it to data brokers or use it for unrelated purposes. If we stop using the WhatsApp Business Platform, or your connection is removed, the associated tokens and data are deleted as described in Sections 6 and 7.
5. How we share information (subprocessors)
We share information only with service providers who help us run the Service, each bound to protect it:
| Provider | Purpose |
|---|---|
| Meta Platforms (WhatsApp Cloud API) | Sending and receiving WhatsApp messages. |
| Supabase (database, authentication, storage) | Hosting your account data, contacts, and messages. |
| Hosting / infrastructure provider | Running the application servers. |
| AI providers (e.g. OpenAI, Anthropic) — only if you enable AI features with your own API key | Generating draft or automated replies at your instruction. |
We may also disclose information if required by law, to protect our rights and users’ safety, or in connection with a merger or acquisition (in which case we will notify affected users).
6. Data retention
We retain account and messaging data for as long as your account is active and as needed to provide the Service. When you delete a record, disconnect a WhatsApp number, or close your account, the associated data is deleted or anonymized within a commercially reasonable period, except where we must retain it to meet legal, tax, or security obligations. Encrypted WhatsApp access tokens are removed immediately when you disconnect a number or reset the configuration.
7. Your rights & choices
Depending on your location, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. You can exercise most of these directly in the app, or contact us at privacy@vynexagency.com. For end-customer data that we process on behalf of a business user, we will refer requests to the relevant business (the controller). To request deletion, see our Data Deletion instructions.
8. Security
We use industry-standard safeguards including encryption in transit (TLS), encryption of sensitive credentials at rest, row-level access controls that isolate each account’s data, and least-privilege access for our systems. No method of transmission or storage is 100% secure, but we work continuously to protect your information.
9. Cookies
We use only essential cookies necessary to authenticate you and keep you signed in. We do not use advertising or third-party tracking cookies.
10. International data transfers
Your information may be processed in countries other than your own. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) for cross-border transfers.
11. Children’s privacy
The Service is intended for businesses and is not directed to individuals under 18. We do not knowingly collect personal information from children.
12. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be posted on this page with a new “Last updated” date, and where appropriate we will notify you in the app or by email.
13. Contact us
If you have questions about this Privacy Policy or our data practices, contact us:
- Email: privacy@vynexagency.com
- Website: https://vynexagency.com