Privacy Policy

This Privacy Policy explains how SAFEWATS ("SAFEWATS", "we", "us") collects, uses, shares and protects personal data when you visit our website, request a consultation, or connect your WhatsApp Business account to our service. It also explains your rights and how to exercise them.

1. Who we are

The data controller responsible for your personal data is:

• CHAMMAKH EL HOUCINE, auto-entrepreneur, operating the SAFEWATS service
• Tax identifier (IF): 68759431
• Fès, Morocco
• Email: [email protected]

We process personal data in accordance with Moroccan Law No. 09-08 on the protection of individuals with regard to the processing of personal data, and, where it applies to you, the EU General Data Protection Regulation (GDPR).

2. Data we collect

2.1 Data you give us through the consultation form

• First name
• WhatsApp phone number
• Type of business
• Approximate monthly advertising budget on Meta
• Whether a WhatsApp Business number of yours has been banned before
• Your consent to be contacted on WhatsApp

2.2 Data collected automatically on our website

• Technical data such as IP address, browser type, device type and pages visited, processed by our hosting provider and by the Meta Pixel (see Cookies & tracking).
• Whether you watched our video, used only to show the form on the page (not stored).

2.3 Data we receive when you connect WhatsApp Business

If you choose to connect your WhatsApp Business account through our "Connect WhatsApp Business" page, see section 3.

3. Data from Meta, Facebook Login & the WhatsApp Business Platform

Our connection page uses Facebook Login for Business and WhatsApp Embedded Signup, provided by Meta Platforms. You log in on Meta's own pages; we never see or store your Facebook password. With your permission, we receive:

• An authorization code that we exchange for an access token allowing us to manage and send messages from the WhatsApp Business account you choose to share (permissions whatsapp_business_management and whatsapp_business_messaging)
• Your WhatsApp Business Account ID, phone number ID, business name and display phone number
• Your Facebook user ID and the business portfolio you selected
• When the service is active: messages sent and received through the connected number, the phone numbers and profile names of the contacts you communicate with, and message delivery statuses

We use data received from Meta only to provide the service you asked for. In particular, we:

• do not sell this data or share it with data brokers;
• do not use it for advertising, profiling or to build user profiles for third parties;
• do not use it for any purpose other than operating, securing and supporting your SAFEWATS service;
• comply with the Meta Platform Terms and the WhatsApp Business policies.

You can remove our access at any time from your Facebook settings (Settings & privacy → Settings → Business integrations) or from Meta Business Settings, and request deletion as described in section 12.

4. How we use your data

• To reply to your consultation request and contact you on WhatsApp, as you agreed on the form.
• To assess whether our free offer fits your business.
• To set up, operate and support the SAFEWATS service for your connected WhatsApp Business account.
• To measure the performance of our advertising on Meta (Meta Pixel).
• To protect our website and service against spam, fraud and abuse.
• To meet our legal and accounting obligations.

5. Legal basis

• Consent: consultation form, WhatsApp contact, connecting your WhatsApp Business account, advertising cookies.
• Performance of a contract (or steps before one): providing the service you requested.
• Legitimate interest: securing our website and preventing spam and abuse.
• Legal obligation: keeping accounting and tax records.

You can withdraw your consent at any time; this does not affect processing already carried out.

6. Sharing & service providers

We do not sell or rent your personal data. We only share it with the providers we need to run the service, who process it on our behalf:

We may also disclose data if required by law, a court order or a competent authority, or to protect our rights and the safety of our users.

7. International transfers

Some of our providers (such as Meta and Cloudflare) process data on servers outside Morocco, including in the European Union and the United States. We only use providers that apply appropriate safeguards to protect personal data.

8. Cookies & tracking

• Meta Pixel (on our landing page): sets cookies such as _fbp to measure visits and the results of our Meta ads. You can control this in your Meta ad preferences or by blocking third-party cookies in your browser.
• Facebook SDK (on our WhatsApp connection page): sets cookies needed for Facebook Login to work.

You can delete or block cookies in your browser settings. Blocking them may prevent Facebook Login from working.

9. How long we keep data

• Consultation requests: up to 24 months after our last contact with you, unless you become a customer.
• WhatsApp Business connection data (tokens, account IDs, messages and contacts): as long as your account is connected, then deleted within 30 days after you disconnect or ask us to delete it.
• Accounting records: for the period required by Moroccan law.

10. Security

We protect your data with encrypted connections (HTTPS), restricted access, and by keeping secret keys and access tokens on our servers only, never in your browser. No system is completely secure, but we work to protect your data and will notify you and the competent authorities of any breach where required by law.

11. Your rights

Under Law No. 09-08 (and the GDPR where it applies), you have the right to:

• access the personal data we hold about you;
• correct inaccurate or incomplete data;
• object to processing, including for marketing, at any time;
• request deletion of your data;
• withdraw your consent;
• where the GDPR applies, restrict processing and receive your data in a portable format.

To exercise these rights, email [email protected]. We reply within 30 days. You can also file a complaint with Morocco's data protection authority, the CNDP (www.cndp.ma), or with your local data protection authority.

12. Data deletion instructions

You can ask us to delete all data we hold about you at any time:

• Send an email to [email protected] with the subject "Data deletion request", including the phone number and/or the WhatsApp Business account or business name you used with us.
• To remove our access to your Facebook or WhatsApp Business account, go to Facebook Settings & privacy → Settings → Business integrations, select SAFEWATS and click Remove, or remove the app from your Meta Business Settings.

We confirm your request by email and delete your data, including data received from Meta, within 30 days, except for records we are legally required to keep.

13. Children

Our service is intended for businesses and is not directed at anyone under 18. We do not knowingly collect data from children.

14. Changes to this policy

We may update this policy. The "Last updated" date at the top shows when it last changed. If the changes are significant, we will inform connected customers directly.

15. Contact

For any question about this policy or your personal data, contact CHAMMAKH EL HOUCINE at [email protected].