Privacy Policy

Metiox Solutions LLC ("Metiox", "we", "us", or "our") operates WhautX, a cloud-based WhatsApp Business messaging and automation platform, and is the data controller for the personal information collected through it.

• Legal entity: Metiox Solutions LLC
• Registered address: Sharjah Media City, Sharjah, United Arab Emirates
• Email: privacy@whautx.com
• Support: hi@whautx.com
• Website: https://whautx.com

We collect the following categories of information to provide and improve the WhautX platform.

Account Information

• Full name
• Email address
• Phone number
• Company name
• Billing details (processed by our payment provider)

WhatsApp Data

• WhatsApp Business Account IDs (WABA ID)
• Phone Number IDs
• Template names and content
• Message logs (metadata)
• Contact data uploaded by customers

Technical Data

• IP addresses
• Browser type and version
• Device information
• Cookies and session tokens
• Anonymized usage analytics

We use the information we collect to:

• Provide WhatsApp messaging services
• Deliver automation workflows and AI features
• Send transactional notifications
• Process payments and manage subscriptions
• Improve platform performance and reliability
• Prevent fraud, abuse, and policy violations
• Comply with legal and regulatory obligations

This section governs how we handle WhatsApp Business Platform data.

• We access and process WhatsApp Business Platform data solely to provide the services our customers request. We do not sell, rent, lease, or otherwise commercially exploit WhatsApp message content for advertising, marketing, or any purpose outside of providing the WhautX platform.
• We process WhatsApp data on behalf of our customers. Our customers — not WhautX — are the data controllers for the contact lists and message content they upload.
• Meta Platforms, Inc. may receive data directly through the WhatsApp Business Platform for the purpose of message delivery and platform operation. Meta's handling of that data is governed by Meta's own privacy policy.
• Customers are responsible for obtaining lawful opt-in consent from their end users before sending WhatsApp messages through WhautX, in accordance with the WhatsApp Business Messaging Policy.

When using WhautX, customers agree to:

• Obtain proper opt-in consent from all contacts before sending WhatsApp messages
• Comply with the WhatsApp Business Messaging Policy, the WhatsApp Commerce Policy, and Meta Platform Terms
• Not send unsolicited messages, spam, or messages to contacts who have opted out
• Not upload unlawful, infringing, or policy-violating data to the platform
• Respect applicable privacy and data protection regulations, including GDPR and the UAE Personal Data Protection Law
• Maintain records of consent for the duration required by applicable law

We retain personal information for as long as necessary to provide our services and comply with our legal obligations.

• Message logs (metadata): retained for up to 90 days, unless otherwise required by law or requested by the customer
• Account information: retained for the lifetime of the account, plus a reasonable period for tax, accounting, and legal purposes after closure
• Billing records: retained for 7 years in accordance with UAE accounting requirements
• Backup copies: retained for up to 35 days on encrypted backup infrastructure

We disclose information only as described below.

Service Providers

• Cloud hosting providers (AWS, hosted in UAE and EU regions)
• Payment processors (Stripe)
• Email delivery providers (transactional email only)
• Analytics providers (anonymized usage data)

Legal Requests

• When required by law, court order, or valid legal process
• To cooperate with government investigations
• To enforce our Terms and protect our rights

Meta Platforms, Inc.

Some information is transmitted to Meta as required for WhatsApp message delivery and platform operation. Meta's handling of this data is governed by Meta's privacy policy.

We do not sell personal information to third parties for advertising or marketing purposes.

WhautX uses cloud infrastructure operated in the UAE and the EU. Some of our service providers may process data in other jurisdictions.

• Cloud hosting: data centers in the UAE (Sharjah) and EU (Frankfurt, Ireland)
• Payment processing: cross-border transfers as required for transaction clearing
• Customer support tools: hosted in the EU

Where personal data is transferred outside the UAE or EU, we rely on appropriate safeguards, including Standard Contractual Clauses (SCCs) and equivalent legal mechanisms, to ensure your data remains protected.

We implement industry-standard security measures designed to protect your information, including:

• Industry-standard encryption of data in transit and at rest
• Secure authentication with role-based access controls and least-privilege principles
• Secure infrastructure practices, monitoring, and access management
• Regular vulnerability management and patching
• Encrypted backups with restricted access

No method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

We use cookies and similar technologies to operate the platform:

• Essential cookies: required for authentication, session management, and security — cannot be disabled
• Analytics cookies: anonymized usage analytics to help us improve the platform — can be disabled
• Preference cookies: store your language and display preferences — can be disabled

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect platform functionality.

GDPR Rights (for EU and EEA residents)

• Right of access — request a copy of your personal data
• Right of rectification — correct inaccurate or incomplete data
• Right of erasure ("right to be forgotten") — request deletion of your data
• Right of data portability — receive your data in a portable format
• Right of restriction — limit how we process your data
• Right to object — object to certain types of processing
• Right to lodge a complaint with a supervisory authority

UAE Privacy Rights (under the Personal Data Protection Law)

• Right to request information about how your data is processed
• Right to correct inaccurate data
• Right to request deletion, where applicable

To exercise these rights, contact us at privacy@whautx.com. We will respond within 30 days.

The WhautX platform is not intended for users under 18 years of age. We do not knowingly collect personal information from minors. If we learn that we have collected information from a minor, we will delete it promptly.

We may update this Privacy Policy periodically to reflect changes in our practices, the platform, or applicable law. The "Last updated" date at the top of this policy indicates when the latest changes took effect. Material changes will be communicated by email or through the platform.

For privacy-related questions or to exercise your rights, contact us at privacy@whautx.com or by postal mail at the address listed in Section 1.

Certain features of the Service may use artificial intelligence technologies to generate suggested responses, automate workflows, classify messages, summarize conversations, or assist users in managing communications.

Customer data may be processed by AI systems solely for providing these features within the WhautX platform. We do not use customer message content to train public AI models without explicit customer consent.

AI-generated outputs are provided for assistance only and may not be accurate or complete. Customers remain responsible for reviewing AI-generated content before use or distribution.

If we become aware of a security incident affecting personal information, we will investigate promptly and take reasonable steps to contain and remediate the incident.

Where required by applicable law, we will notify affected customers without undue delay and provide information necessary for them to meet their own regulatory obligations.

Notification timing, content, and method will be determined based on the nature of the incident, applicable legal requirements, and the information available at the time of the investigation.

If WhautX is involved in a merger, acquisition, financing, reorganization, asset sale, or similar transaction, customer information may be transferred as part of that transaction, subject to applicable privacy laws.

We will provide reasonable notice before customer information becomes subject to a different privacy policy. Customers may then have the right to opt out or request account closure in accordance with our standard practices.

Under applicable data protection law, including the EU General Data Protection Regulation (GDPR), the parties have the following roles with respect to customer-uploaded contact information and message content:

• Customers act as the Data Controller and are responsible for determining the lawful basis for processing personal data, obtaining necessary consents, and responding to data subject requests
• WhautX acts as the Data Processor and processes personal data only on the documented instructions of the Data Controller
• WhautX does not sell personal data and does not determine the purposes or means of processing

Customers may request a Data Processing Addendum (DPA) governing our processing activities by contacting privacy@whautx.com.