/ Privacy Policy /

1. Information We Collect

We collect information that is necessary to operate our websites, provide our services, manage customer accounts, provide SaaS functionality, communicate with customers, and maintain the security of our systems.

1.1 Information You Provide

• Full name
• Email address
• Phone number
• Company or organization name
• Job title or professional information
• Business address
• Account credentials
• Information submitted through contact forms
• Support requests and communications
• Information required to configure our services

1.2 Technical Information

• IP address
• Browser type and version
• Operating system
• Device information
• Pages visited
• Referral information
• Date and time of access
• Security and diagnostic information

2. How We Use Information

We use information only for legitimate business and service purposes, including:

• Providing and operating our websites and software services.
• Creating and managing customer accounts.
• Providing SaaS platform functionality.
• Processing support requests and enquiries.
• Managing customer relationships.
• Maintaining security and preventing abuse.
• Diagnosing technical problems.
• Improving our products and services.
• Complying with legal and regulatory requirements.

Where marketing communications are provided, we will use appropriate consent or other lawful mechanisms as required by applicable law.

3. SaaS Platform Data

Tawny Tech provides software and SaaS solutions that may allow businesses to manage business operations, customer interactions, leads, communications, workflows, and related information.

Depending on the product and configuration, information processed by our SaaS platforms may include:

• Business account information
• Employee or authorized user information
• Customer contact information
• Lead information
• Communication records
• Messages and related metadata
• Uploaded business information
• Account activity and audit information

We process this information to provide the features and services requested by the authorized business customer.

4. Meta and WhatsApp Platform Data

4.1 What WhatsApp / Meta Data May Be Processed

Depending on the permissions granted by an authorized business and the features enabled, the platform may process information such as:

• WhatsApp Business Account identifiers.
• Business or portfolio identifiers.
• WhatsApp phone numbers associated with an authorized business account.
• Customer phone numbers.
• Customer names or profile information made available through the integration.
• Messages and conversation content.
• Message timestamps and delivery information.
• Message status and related communication metadata.
• Information necessary to operate the authorized WhatsApp integration.

4.2 Why We Use WhatsApp / Meta Data

Platform data received through an authorized integration is used to provide requested business functionality, which may include:

• Displaying customer conversations in the business dashboard.
• Allowing authorized business users to respond to customers.
• Managing customer enquiries and leads.
• Providing customer-support functionality.
• Maintaining conversation history where the service provides that functionality.
• Providing relevant communication and operational features.
• Maintaining security, reliability, and service functionality.

4.3 How We Handle WhatsApp / Meta Data

We use Meta and WhatsApp platform data only to provide the functionality requested by the authorized business customer.

We do not sell WhatsApp or Meta platform data to third parties. We do not use WhatsApp or Meta platform data for unrelated advertising purposes.

Access to platform data within our systems is restricted to authorized personnel and systems that require access to provide, maintain, secure, or support the relevant service.

5. Customer Communications

Where our SaaS platform enables businesses to communicate with their customers through WhatsApp or another communication channel, the business customer is responsible for the messages it sends and the individuals it contacts.

Businesses using the service must ensure that their communications comply with applicable laws, platform policies, consent requirements, and applicable messaging rules.

Tawny Tech does not authorize customers to use its services for spam, unsolicited communications, fraudulent activity, misleading communications, or prohibited content.

6. Consent and Customer Responsibilities

Businesses using Tawny Tech services are responsible for ensuring that they have the necessary rights, permissions, and lawful basis to collect and process customer information and communicate with their customers.

Where required, businesses must obtain appropriate customer consent before sending communications, particularly promotional or marketing communications.

Businesses must also respect customer requests to stop receiving communications and must not use the platform to circumvent communication preferences or applicable platform restrictions.

7. Information Sharing and Disclosure

We do not sell or rent personal information.

Information may be shared only when reasonably necessary for operating our services or fulfilling legal obligations.

This may include sharing information with:

• Authorized service providers that support hosting, infrastructure, security, communications, analytics, or customer support.
• Meta or other third-party platforms when required to provide an integration requested and authorized by the customer.
• Professional advisors where reasonably necessary.
• Government authorities or law-enforcement agencies when legally required.
• Successors or parties involved in a legitimate corporate transaction, subject to applicable confidentiality and legal requirements.

8. Data Security

We implement reasonable technical and organizational safeguards designed to protect personal and business information against unauthorized access, misuse, alteration, disclosure, or destruction.

Depending on the service, security measures may include:

• Authentication and access controls.
• Role-based access restrictions.
• Secure server-side processing.
• HTTPS/TLS encryption for data transmitted between systems where supported.
• Logging and monitoring of relevant system activity.
• Security updates and maintenance.

No internet-based service can guarantee absolute security. Therefore, users should also maintain strong passwords, protect their account credentials, and promptly report suspected unauthorized access.

9. Data Retention

We retain information only for as long as reasonably necessary to provide the requested services, maintain legitimate business records, resolve disputes, prevent abuse, comply with legal obligations, and enforce agreements.

For SaaS customers, retention periods may also depend on the customer's account configuration, service requirements, and applicable contractual obligations.

When information is no longer required, we may delete, anonymize, or securely dispose of it, subject to applicable retention requirements.

10. International Data Processing

Depending on the infrastructure and third-party services used to operate our products, information may be processed or stored in countries other than the country where the information was originally collected.

Where required, we take reasonable steps to ensure that applicable legal and contractual requirements are considered when information is transferred or processed internationally.

11. Your Privacy Rights

Depending on applicable law, you may have rights regarding your personal information, including:

• Requesting access to personal information.
• Requesting correction of inaccurate information.
• Requesting deletion of personal information.
• Requesting restriction of certain processing.
• Objecting to certain processing where applicable.
• Withdrawing consent where processing is based on consent.

To exercise applicable rights, contact us using the information provided in the Contact section below.

12. Cookies and Tracking Technologies

Our websites may use cookies and similar technologies to provide functionality, remember preferences, understand website usage, improve performance, and maintain security.

You may control or disable cookies through your browser settings. Disabling certain cookies may affect website functionality.

13. Children's Privacy

Our business services and SaaS products are not intended for children under the age of 18.

We do not knowingly design our business services to collect personal information directly from children. If you believe that information belonging to a child has been submitted to us, please contact us so that we can review the request and take appropriate action.

14. Third-Party Services and Links

Our services may integrate with or contain links to third-party services, including technology, communication, analytics, payment, hosting, or social-media providers.

Third-party services operate under their own privacy policies and terms. We recommend reviewing the applicable policies of third-party services before using them.

For Meta and WhatsApp services, users should also review the applicable Meta and WhatsApp policies and terms.

15. Data Deletion

You may request deletion of eligible personal information or account information by contacting us through our data-deletion process.

Where Tawny Tech processes information on behalf of a business customer, certain deletion requests may need to be directed to that business because the business may control the relevant customer information.

We may retain limited information where necessary to comply with legal obligations, resolve disputes, prevent fraud or abuse, maintain security, or satisfy legitimate record-keeping requirements.

16. Business Customer Data

When a business uses Tawny Tech as a SaaS provider, the business may provide information relating to its customers, employees, contacts, leads, or other individuals.

In those circumstances, the business customer is responsible for determining the purposes and lawful basis for processing that information and for responding to requests relating to data under its control, except where Tawny Tech is independently responsible for the relevant processing.

17. Account Security and Responsible Use

Users and business customers are responsible for protecting their account credentials and ensuring that only authorized personnel have access to their accounts.

Customers must not use Tawny Tech services to:

• Send spam or unauthorized communications.
• Collect information through unlawful or deceptive methods.
• Engage in fraudulent or deceptive activity.
• Circumvent platform restrictions or security controls.
• Distribute prohibited or unlawful content.
• Abuse communication APIs or messaging functionality.

We may restrict or suspend access to functionality when reasonably necessary to protect our systems, users, customers, third-party platforms, or comply with applicable policies and legal requirements.

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, technology, legal requirements, or business practices.

When we make changes, we will update the "Last Updated" date at the beginning of this policy. We encourage users and customers to review this page periodically.

19. Contact Us