Privacy Policy

1. Introduction

Welcome to Lynkist ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our WhatsApp business platform services. Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the platform.

2. Information We Collect

2.1 Personal Information

We may collect personal information that you voluntarily provide to us when you:

• Register for our services
• Interact with our WhatsApp business account
• Subscribe to our services or updates
• Contact us for customer support

This information may include:

• Name
• Phone number (WhatsApp number)
• Email address
• Business name and details
• Profile information you share via WhatsApp

2.2 Automatically Collected Information

When you interact with Lynkist through WhatsApp, we may automatically collect:

• Message metadata (timestamps, delivery status)
• Device information
• Usage data and interaction patterns
• Location data (if you choose to share it)

2.3 WhatsApp Integration Data

As a WhatsApp business platform, we collect and process data in accordance with WhatsApp's Business API terms, including:

• Messages sent and received through our platform
• Media files shared (images, videos, documents)
• Read receipts and message status
• Contact information from your WhatsApp profile

2.4 Website Chat Visitors

Our customers can put a Lynkist chat window on their own website. For the people who use it, the business that runs the website decides what is collected and why (it is the data controller), and we process the data on its behalf. A page view alone creates nothing: the chat starts a visit only when the visitor opens it. For a visitor who opens the chat, we keep:

• The messages and files the visitor sends, and the replies they get (from the business's team or its AI agent)
• The pages of that website the visitor saw, the page they came from and its campaign tags, their country, and their browser and device type
• The answers to the business's pre-chat form (for example a name, email address or phone number), and the visitor's consent where the form asks for it
• An email address the visitor gives to get replies by email, only after they confirm it with a code we send to it

A visitor who opened the chat but never wrote is deleted after 30 days. A visitor who wrote becomes a contact of the business, with the conversation in its inbox, kept for as long as the business keeps it. When a reply arrives and the visitor has not seen it, we may send it to their confirmed email address; every such email has a one-click unsubscribe link, and we send no marketing to these addresses.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain our WhatsApp business services
• Process your transactions and send related information
• Respond to your inquiries and provide customer support
• Send you updates, marketing communications, and promotional materials (with your consent)
• Improve and personalize your experience
• Monitor and analyze usage patterns and trends
• Detect, prevent, and address technical issues or fraudulent activity
• Comply with legal obligations

4. Data Sharing and Disclosure

4.1 Third-Party Service Providers

We may share your information with third-party service providers who perform services on our behalf, including:

• WhatsApp (Meta Platforms, Inc.)
• AiSensy, our WhatsApp Business Solution Provider
• Oracle Cloud Infrastructure (hosting, database and file storage)
• AI providers, only for the AI features you use (see Section 4.2)
• Cloud storage providers
• Analytics services
• Google (Google Analytics and Google Ads), only if you allow those cookies (see Section 10)
• Error monitoring services
• Customer relationship management (CRM) tools
• Payment processors

4.2 AI Features

Some features send data to an AI provider to produce a result. We send only what the feature needs, and only when you or your team use that feature:

• AI agent, template drafts and ✨ Improve — the customer's message (on WhatsApp or website chat), the parts of your knowledge base that answer it, or the text you asked to improve, are sent to OpenAI to write the reply or the text. If OpenAI cannot answer at that moment, the same request goes to Groq, Inc. instead, so the customer still gets a reply.
• Knowledge base — documents you add are sent to OpenAI to turn them into search vectors (embeddings), so the AI agent can find the right part.
• Studio — the prompt and the photos you give are sent to Higgsfield AI to make the image. We copy each finished image to our private storage at once and keep it there for your workspace. Removing an image from the gallery hides it; deleting your account deletes the files.

We do not sell this data, and we do not use it to train AI models of our own. These providers may process data outside your country; see Section 9 on international transfers.

4.3 Error Monitoring

When something breaks — a page fails to load, a request errors — we send a diagnostic report to Sentry, so we can find and fix the fault. A report contains the technical detail of the failure: the error and where in our code it happened, the page you were on, and your browser and operating system version.

It does not record your screen, your messages, your contacts, what you typed, or your IP address. Signed-in reports carry your account identifier and workspace name so we can tell one customer's problem from another's — not your name, email address or phone number. Reports are kept for up to 90 days and are used only to diagnose faults.

This is not tracking and it sets no cookie, so it is not part of the cookie choice in Section 10: it runs on the legitimate interest of keeping a service you are paying for working. Sentry may process this data outside your country; see Section 9 on international transfers.

4.4 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities.

5. WhatsApp-Specific Privacy Practices

5.1 Message Security and Encryption

Personal WhatsApp-to-WhatsApp conversations are protected by end-to-end encryption. Messages sent or received through the WhatsApp Business Platform (Cloud API) work differently: they are encrypted in transit between the user, Meta's servers, and our platform, but are not end-to-end encrypted in the same way personal WhatsApp conversations are, since Meta's Business Platform infrastructure and our own systems process message content in order to deliver, display, and act on it on behalf of the business you are messaging with. We do not use message content for any purpose other than providing, maintaining, and improving the services a business has configured through our platform, and we do not sell message content to any third party.

5.2 Meta's Privacy Policy

Your use of WhatsApp is also governed by Meta's (WhatsApp's parent company) Privacy Policy. We encourage you to review WhatsApp's privacy practices at https://www.whatsapp.com/legal/privacy-policy.

5.3 Message Retention

We retain messages and associated data only for as long as necessary to provide our services and comply with legal obligations. You can request deletion of your data at any time.

5.4 Data We Process as a WhatsApp Technology Provider

Lynkist is registered with Meta as a WhatsApp Technology Provider. In this role, in addition to the data described above, we collect and process the following on behalf of the businesses that use our platform to communicate with their own customers ("Client Businesses"):

• WhatsApp Business Account (WABA) identifiers, registered phone numbers, and business profile information
• Message templates created, submitted, and managed through our platform
• Team member and agent access permissions within a Client Business's account
• Conversation data exchanged between a Client Business and its own customers, processed solely to provide our messaging, automation, and CRM services

We access and manage this data only as necessary to deliver the services a Client Business has configured — such as sending messages, managing message templates, and connecting phone numbers. We do not access, use, or share a Client Business's data for our own marketing, profiling, or any purpose unrelated to providing the contracted services, and we do not sell this data to any third party, including data brokers or advertisers.

6. Data Security

We implement appropriate technical and organizational security measures to protect your personal information, including:

• Encryption of data in transit and at rest
• Regular security assessments
• Access controls and authentication
• Secure data storage practices

However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

7. Your Privacy Rights

Depending on your location, you may have the following rights:

7.1 Access and Portability

You have the right to request access to the personal information we hold about you and receive a copy in a portable format.

7.2 Correction

You have the right to request correction of inaccurate or incomplete personal information.

7.3 Deletion

You have the right to request deletion of your personal information, subject to certain legal exceptions.

7.4 Opt-Out

You can opt out of marketing communications at any time by replying "STOP" to our messages or contacting us directly.

To exercise these rights, please contact us using the information provided below.

8. Children's Privacy

Our services are not directed to children under 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for such transfers in compliance with applicable data protection laws.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the new Privacy Policy on our platform
• Sending you a notification through WhatsApp
• Updating the "Last Updated" date at the top of this policy

Your continued use of our services after changes become effective constitutes acceptance of the revised policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

13. Specific Jurisdictions

For EU/UK Users (GDPR)

We process your data lawfully under GDPR based on consent, contract performance, legal obligations, and legitimate interests. You have additional rights under GDPR, including the right to lodge a complaint with your local supervisory authority.

For California Users (CCPA)

California residents have specific rights under the California Consumer Privacy Act, including the right to know what personal information is collected and the right to opt-out of the sale of personal information. We do not sell your personal information.

For Indian Users

We comply with applicable Indian data protection laws and regulations, including the Digital Personal Data Protection Act, 2023.

By using Lynkist, you acknowledge that you have read and understood this Privacy Policy.