Privacy Policy

1. Overview & BYOK Model Transparency

Patify operates under a Bring Your Own Key (BYOK) architecture. We provide enterprise cloud software to manage WhatsApp broadcasts and 1-to-1 live chats using your official Meta WhatsApp Business API (WABA) credentials. We do not sell, monetize, or rent your contact lists or subscriber data to third parties under any circumstances.

2. Meta WABA Credential & Token Encryption

Your Meta System User Access Tokens, Phone Number IDs, and WABA Account IDs are encrypted at rest using AES-256 encryption via OpenSSL keys. Access tokens are used strictly to communicate with Meta Cloud API endpoints (`graph.facebook.com`) to send authorized template broadcasts and live chat responses.

3. Data Retention & Automatic Pruning Policy

To maintain database optimization and adhere to data minimisation principles:

• Live Chat Messages & Media: Messages and media exchange history are retained for 30 days before being automatically pruned by scheduled system cleanup tasks.
• Broadcast Analytics Metrics: Message status mapping (WAMID) is cached in Redis for 7 days before expiring cleanly.
• Contact Audiences: Contact records and assigned tags (`spatie/laravel-tags`) remain stored until explicitly deleted by workspace administrators.

4. Cookies & Local Analytics

We use essential session cookies to authenticate user sessions into the workspace and administrative panels. Optional analytical tracking (Google Analytics 4 / Meta Pixel) is only loaded upon explicit visitor consent via our Cookie Banner.