Privacy Policy24Zap WhatsApp API for Bitrix24

1. Introduction

This Privacy Policy describes how Arrecife Tecnologia LTDA ("we", "us", or "our") collects, uses, and protects your personal data when you use 24Zap WhatsApp API for Bitrix24 ("the Software"), a SaaS application that integrates WhatsApp messaging with Bitrix24 CRM.

By using the Software, you consent to the data practices described in this policy. If you do not agree, please do not use the Software.

2. Data We Collect

We collect the following categories of data:

• Account Data: Email address, name, Bitrix24 portal URL, and member ID — collected during authentication and account setup.
• WhatsApp Business Data: Phone number, business profile information, and WhatsApp Business Account ID (WABA ID) — received via the Meta API during onboarding through Meta Embedded Signup.
• Payment Data: Subscription and billing information processed by Stripe. We do not store credit card numbers or payment card details on our servers.
• Usage Data: Server logs, IP addresses, browser information, and feature usage analytics to improve service quality.
• Message Metadata: Sender and recipient identifiers, timestamps, and delivery status — used for message routing and delivery confirmation. This does NOT include message content.

3. How We Use Your Data

• Provide and operate the WhatsApp-Bitrix24 integration service
• Route messages between WhatsApp and Bitrix24 in real-time
• Process payments and manage subscriptions via Stripe
• Provide technical support and respond to inquiries
• Improve and optimize the Software
• Comply with applicable legal obligations
• Send service-related communications (e.g., account updates, maintenance notices)

4. Data We Do NOT Store

We do not store message content on our servers. Text messages, images, audio, video, documents, and any other media exchanged through the Software are relayed in real-time between WhatsApp and Bitrix24 and are not retained on our infrastructure. WhatsApp conversation history is not stored by us.

5. Data Sharing & Third Parties

We share data with the following third-party service providers, solely for the purposes of operating the Software:

• Meta / WhatsApp: WhatsApp Cloud API for message delivery and WhatsApp Business account management. Subject to Meta's Privacy Policy.
• Bitrix24: CRM platform where messages and data are delivered. Subject to Bitrix24's privacy policy.
• Stripe: Secure payment processing. Subject to Stripe's Privacy Policy.
• Microsoft Azure: Cloud infrastructure hosting located in Brazil (Brazil South region).
• Z-API: Third-party WhatsApp API provider used for QRCode-based connections. Subject to Z-API's privacy policy.

We do not sell, rent, or trade your personal data to third parties for marketing or advertising purposes.

6. International Data Transfers

Our primary data processing occurs in Brazil via Microsoft Azure (Brazil South). Some data may be processed internationally by third-party providers (Meta, Stripe) in accordance with their own privacy policies and applicable data protection laws.

7. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

• HTTPS/TLS encryption for all data in transit
• Encrypted data at rest
• Access controls and JWT/JWKS token-based authentication
• Regular security audits and monitoring
• Principle of least privilege for system access

8. Data Retention

• Account data is retained while your subscription is active.
• Upon account deletion request, personal data is deleted within 30 days.
• Certain data may be retained as required by law (e.g., billing records for tax compliance).
• Message content is never stored on our servers, so there is no message data to retain or delete.

9. Your Rights (LGPD)

Under the Brazilian General Data Protection Law (Lei Geral de Proteção de Dados — LGPD), you have the following rights:

• Right of access to your personal data
• Right to correct inaccurate or incomplete data
• Right to request deletion of your personal data
• Right to data portability
• Right to restrict or object to data processing
• Right to revoke consent at any time
• Right to file a complaint with the ANPD (Autoridade Nacional de Proteção de Dados)

10. How to Request Data Deletion

To request the deletion of your personal data, contact us through any of the following channels:

• Email: [email protected]
• WhatsApp: +55 81 99380-9071

We will process your deletion request within 30 days. Some data may be retained if required by applicable law (e.g., billing records for tax purposes).

11. Meta Platform Data

Data received through Meta APIs (including WhatsApp Business API) is used solely for the purpose of providing the WhatsApp-Bitrix24 integration service. We commit to the following:

• We do not sell Meta Platform Data to any third party.
• We do not use Meta Platform Data for advertising or marketing purposes.
• Upon user request or app deauthorization, Meta Platform Data is promptly deleted.
• We use Meta Platform Data only in accordance with Meta's Platform Terms and applicable policies.

12. Children's Privacy

The Software is not directed at individuals under 18 years of age. We do not knowingly collect personal data from minors. If we become aware that we have collected data from a minor, we will promptly delete it.

13. Changes to This Policy

We may update this Privacy Policy periodically. Users will be notified of material changes through the Software or via email. Continued use of the Software after changes take effect constitutes acceptance of the updated policy.

14. Contact

For questions about this Privacy Policy, contact us at: [email protected]

Phone: +55 81 3325 4646
WhatsApp: +55 81 99380-9071
Address: Av. Antônio Tôrres Galvão, nº 221, Imbiribeira, Recife/PE, CEP 51160-330, Brazil