OneIA Privacy Policy for WhatsApp Embedded Signup

Effective date: October 29, 2025

1. Who we are

OneIA – Soluções de Tecnologia Ltda. (“OneIA”, “we”, “us”, or “our”) provides artificial-intelligence-based tools that help companies prospect and engage leads through multichannel workflows, including WhatsApp, email, phone, and LinkedIn.

Address: Avenida Paulista 1636, Conj. 3, Pavmto 1, Bela Vista, São Paulo – SP, 01310-200, Brazil

Email: contato@oneiasolucoes.com.br

Phone: +55 34 9838-5109

This Privacy Policy explains how we collect, use, and protect information when you connect your WhatsApp Business account through our Embedded Signup flow, in accordance with Meta Platform requirements.

2. Data we collect

When you use our WhatsApp Embedded Signup integration, we may collect:

2.1 Business account data

• WhatsApp Business Account (WABA) ID
• Phone numbers linked to the account
• Business display name
• Access tokens and session data

2.2 Message data

• Messages sent and received
• Message templates
• Metadata, including timestamps and delivery status

2.3 Contact data

• Recipients’ phone numbers
• Contact names, when provided
• Interaction history

3. How we use data

• Provide the service: Process, send, and receive WhatsApp messages through the API.
• Automation and AI: Run automated prospecting, qualification, and scheduling workflows.
• Reporting: Generate campaign dashboards and metrics.
• Maintenance: Monitor, maintain, and improve the platform.
• Communication: Inform you about changes to the platform or terms of service.

4. Controller and processor roles

Client as data controller: When you use OneIA to message your leads and customers, you are the data controller for those individuals. OneIA acts only as a processor and processes data according to your instructions.

OneIA as data controller: We are the controller of data collected during Embedded Signup, including your business account data, and of data required to maintain our contractual relationship with you.

5. Data retention

• Business account data: Retained while you use our service. Access tokens are renewed as required to operate the integration.
• Message history: Retained for 90 days for reporting and troubleshooting, and may be retained longer under your contracted plan.
• Contact data: Retained while your account relationship remains active unless you request earlier deletion.

6. Data sharing

We may share data with:

• Meta Platforms: To operate the WhatsApp integration.
• Infrastructure providers: Cloud hosting and database services, such as Google Cloud Platform.
• Third-party integrations: CRMs and other tools when configured by you.

We do not sell personal data to third parties.

7. International transfers

Our servers are hosted in Brazil and the United States through Google Cloud. We ensure that international transfers use appropriate safeguards, such as standard contractual clauses.

8. Security

We implement technical and organizational measures including:

• Encryption in transit (TLS) and at rest
• Role-based access controls
• Activity monitoring and logs
• Periodic security reviews

9. Your rights

Under the LGPD and other applicable privacy laws, you may:

• Access the data we hold about you
• Request correction of inaccurate data
• Request deletion of data
• Withdraw consent at any time
• Request data portability

To exercise these rights, email contato@oneiasolucoes.com.br.

10. Data deletion

For detailed instructions, see our Data Deletion Instructions.

11. Changes to this policy

We may update this Privacy Policy periodically. If we make material changes, we will notify you by email or through a platform notice at least 30 days in advance.

12. Contact us

If you have questions about this Privacy Policy or how we handle your data: