Privacy Policy

PRIMSEND is a business-to-business (B2B) SaaS platform. Understanding who controls what data matters:

• For Merchant account data (business profile, team member accounts, billing and support correspondence), PRIMSEND is the data controller.
• For End Customer data a Merchant collects or receives through PRIMSEND (for example, WhatsApp messages, contact details, tickets, and notes about that Merchant's own customers), the Merchant is the data controller and PRIMSEND acts as a data processor, processing that data only to provide the PRIMSEND service to the Merchant and under the Merchant's instructions. If you are an End Customer with a question about how a specific business uses your data, please contact that business directly; we will support them in responding to you.

Account and business data — when a Merchant registers, we collect the account owner's email address and password (stored as a salted, one-way hash — we never store or can recover plaintext passwords), and business profile details entered during account setup (business name, logo, and similar information).

Team and role data — for each team member a Merchant invites, we store their email and their role within that Merchant's workspace.

WhatsApp / Meta Platform Data — see Section 3 below.

Customer conversation and support data — messages, contact details, tags, internal notes, and support tickets that a Merchant's team creates or receives while using the Team Inbox and Tickets features, scoped to that Merchant's own workspace.

Technical and usage data — standard web server logs (such as IP address, browser type, and request timestamps) generated by using our application and API, used for security, troubleshooting, and abuse prevention.

We do not knowingly collect more personal data than is needed to operate the features described in this Policy, and we do not sell personal data.

PRIMSEND integrates with Meta's WhatsApp Business Platform so a Merchant can connect their own WhatsApp Business Account (WABA) and send and receive WhatsApp messages through PRIMSEND. When a Merchant connects WhatsApp:

• The Merchant authorizes the connection directly with Meta through Meta's Embedded Signup flow. We receive and store identifiers for the connected WhatsApp Business Account and phone number, the Merchant's verification status, and an access token issued by Meta that lets PRIMSEND send and receive messages on the Merchant's behalf.
• That access token is encrypted at rest (AES-256-GCM) in our database, is decrypted only in server memory for the instant it is needed to make an authorized call to Meta's API, and is never included in any API response, log file, or shown to any user.
• We receive webhook events from Meta about the connected account (for example, account verification status and, once a Merchant enables the Team Inbox, inbound customer messages and outbound delivery status) and use them solely to keep the Merchant's PRIMSEND workspace and conversations up to date.
• Data received from Meta's WhatsApp Business Platform ("WhatsApp Business Platform Data") is used only to provide, maintain, and improve the messaging features of the PRIMSEND service for the Merchant that data belongs to. We do not use WhatsApp Business Platform Data for advertising, and we do not sell or share it with third parties except as described in this Policy (for example, our infrastructure processors, who process it only on our behalf and under contract).
• Our use of information received via the WhatsApp Business Platform and the Meta APIs is additionally subject to Meta's own terms, including the Meta Platform Terms and the WhatsApp Business Messaging Policy.

Merchants are responsible for having a lawful basis (such as opt-in consent) to message their End Customers over WhatsApp and for complying with Meta's messaging policies; see our Terms of Service.

PRIMSEND is multi-tenant software: every Merchant's account, WhatsApp connection, conversations, tickets, and team data are logically isolated per workspace ("tenant") in our database and are only ever readable by that Merchant's authenticated team members. Every API request is scoped to the requesting user's own tenant; PRIMSEND staff do not access Merchant or End Customer data except where necessary to provide support at a Merchant's request, to investigate a security issue, or as required by law.

We share personal data with a small number of service providers who process it on our behalf, under contract, and only to the extent needed to provide PRIMSEND:

• Meta Platforms, Inc. — operator of the WhatsApp Business Platform described in Section 3.
• Hostinger — our infrastructure provider. Hostinger hosts the servers that run the PRIMSEND application, API, and database, and delivers the transactional emails PRIMSEND sends (such as password-reset emails).

We do not sell personal data to any third party, and we do not permit our sub-processors to use personal data for their own marketing purposes. We may disclose data where required to comply with a legal obligation, or to protect the rights, property, or safety of PRIMSEND, our Merchants, or others.

We apply the following safeguards, among others:

• All traffic to our application and API is encrypted in transit via TLS/HTTPS.
• WhatsApp access tokens are encrypted at rest using AES-256-GCM and are never returned by any API response or written to logs.
• Passwords are hashed with bcrypt and are never stored or logged in plaintext.
• Sessions are authenticated with a signed, HTTP-only cookie that browser-side scripts cannot read.
• Every request that touches Merchant or End Customer data is scoped to the authenticated user's own tenant, as described in Section 4.
• Incoming WhatsApp webhook requests are verified against Meta's cryptographic signature before any data in them is trusted or processed.

No method of transmission or storage is perfectly secure. If we become aware of a security incident affecting your personal data, we will notify affected Merchants and take reasonable steps required by applicable law.

We retain personal data for as long as a Merchant's account remains active, so that the service keeps working as expected. When a Merchant closes their account or requests deletion (see our Data Deletion page), we delete or irreversibly anonymize the corresponding account, WhatsApp connection, and conversation data within 30 days, except where we are required to retain limited records for longer to comply with a legal, tax, or security obligation. Routine infrastructure backups that may still contain deleted data are rotated out on their normal schedule, which does not exceed 30 days after deletion.

Depending on your relationship to PRIMSEND and where you are located, you may have the right to:

• Request access to, or a copy of, the personal data we hold about you.
• Request that we correct inaccurate or incomplete data.
• Request that we delete your personal data, as described on our Data Deletion page.
• Object to, or request that we restrict, certain processing.
• Withdraw consent, where processing is based on consent, without affecting processing carried out before the withdrawal.

If you are an End Customer, please direct data requests to the Merchant you interacted with, since they control that data; we will assist that Merchant in fulfilling a valid request. Merchants and PRIMSEND account holders can exercise these rights by contacting us at support@primsend.com. We may need to verify your identity before acting on a request.

PRIMSEND is a business tool and is not directed at, or knowingly used to collect personal data from, children. If you believe a child has provided us with personal data, please contact us and we will delete it.

We may update this Privacy Policy from time to time to reflect changes to our service or legal requirements. We will update the "Last updated" date above when we do, and, for material changes, we will provide additional notice such as an in-app notice or an email to Merchant account owners.

Techzone Business Solutions Company, operating PRIMSEND, is based in Somalia. For any question about this Privacy Policy or to exercise your data rights, contact us at support@primsend.com.