Privacy Policy

1. Introduction

Welcome to ConnectStream ("we," "us," or "our"). We operate a premium SaaS communication platform providing developer APIs, official WhatsApp Business API endpoints, automated AI chatbots, workflows, and a shared team inbox. We are committed to protecting the privacy of your customer data, platform communications, and account details. This Privacy Policy details what information we collect, why we process it, and how we protect it in compliance with global standards.

2. Information We Collect

We collect various types of information from our users and developers to ensure safe and efficient message ingestion:

• Account Data: Contact information, email address, password hash, organization parameters, business name, and payment billing configurations.
• WhatsApp API Integration Data: Meta Business Manager IDs, WhatsApp Business Account (WABA) metadata, phone credentials, templates, and webhook mapping structures.
• System Log Telemetry: Latency metrics, browser configuration, request parameters, IP addresses, database uptime indicators, and system errors.

3. How We Use Your Information

We use collected information under legal processing bases to:

• Maintain the core operation of the ConnectStream workspace, dashboard, and billing pipeline.
• Process API payloads and route text/media files safely across official Meta Business Cloud systems.
• Verify contacts opt-in statuses, handle tier scalability graduations, and monitor messaging delivery performance logs.
• Improve chatbot conversational intent confidence ratios and train localized machine learning automation templates.
• Prevent system spam, unverified bulk broadcasting, quality score degradation, and compliance infringements.

4. Cookies & Tracking Technologies

We use cookies, localized session storage, and persistent identifiers to monitor your console session state. These include functional cookies mapping secure login statuses and diagnostic cookies tracing latency markers. You can adjust your browser properties to block cookies, though this may restrict access to several console configuration dashboards.

5. Data Sharing

We do not sell, license, or exchange your business communications or personal databases with advertising networks. We share details only with our direct service processors (such as Meta Platforms, Inc. for message delivery, Stripe for payment clearance, and cloud network hosts) to maintain API transmission channels.

6. Third-Party Services

Our platform integrates directly with third-party software, database layers, and developer environments. Any transmission mapping configured in your workspace (such as syncing webhooks with external CRMs or database endpoints) is subjected to the privacy terms of those respective platforms. We are not responsible for how these third parties process your data once exported.

7. Data Security

We protect transmissions using TLS 1.3 encryption and implement security controls across all database layers. Access logs are restricted via credential validation, keeping database records isolated from outside entities. Webhook payloads are processed in transient memory nodes.

8. Data Retention

We keep account parameters and integration configurations for as long as your workspace remains active. Connection logs, diagnostic webhooks metadata, and transaction records are kept for a maximum of 30 days to facilitate server debugging before automated deletion cycles execute.

9. User Rights

Under standard data protection laws, including GDPR and CCPA, you have the right to request access to your data, demand correction of invalid parameters, export your logs in structured JSON format, or request complete account erasure. To exercise your rights, email our compliance team at mail@connectstream.io.

10. International Data Transfers

Because our API and database nodes run on cloud instances distributed across multiple global zones, your metadata and message payloads may cross international borders during ingest. We enforce standard contractual clauses to ensure all transfers align with legal compliance structures.

11. Children's Privacy

Our platform is a business-facing corporate SaaS toolkit. We do not knowingly target or collect personal details from children under 13 years of age. If we discover that any child has registered a workspace, we will delete the account records immediately.

12. Policy Updates

We may update this Privacy Policy to reflect changing Meta APIs, updated compliance rules, or system modifications. We will post updates on this page and revise the effective date at the top of this document.

13. Contact Information

For questions, billing disputes, or data export requests, contact ConnectStream compliance team at:

Email: mail@connectstream.io
ConnectStream Innovation Lab LLC Support Desk