netSEO Whatsapp Connect
Legal
Politica de confidențialitate
1. Who we are
This Privacy Policy describes how NET SEO MEDIA SRL (“Net Seo Media”, “we”, “us”) processes personal data when providing netSEO Whatsapp Connect, a SaaS integration between online stores (any ecommerce platform or custom systems via Connect API) and the WhatsApp Business Platform.
Controller / service provider identity:
NET SEO MEDIA SRL
Str. Muzelor, Nr. 9, Bragadiru, Ilfov 077025, Romania
CUI: RO 29957449 · Reg. Com.: J2012003328409
Website: https://netseo.ro
Contact: contact@netseo.ro · +40 722 331 465
2. Categories of people
- Merchants / store administrators who connect an online store (via platform module or Connect API) to WhatsApp through our service.
- Buyers / message recipients of those stores, when the merchant sends transactional WhatsApp notifications to opted-in customers.
- Website visitors of connect.netseo.ro who browse public pages or contact us.
3. Categories of data we process
Depending on the use of the service, we may process:
- Meta Business identifiers and related authorization metadata;
- WhatsApp Business Account (WABA) ID;
- Phone Number ID, business display phone number and verified name (as returned by Meta);
- encrypted access / refresh tokens and connection status;
- store / tenant identifiers and order identifiers needed to send transactional messages;
- recipient phone numbers, minimized and protected according to operational need;
- message template identifiers, message IDs and delivery statuses;
- consent / opt-in indicators provided by the merchant for a recipient;
- technical and security logs (for example request metadata, error codes, timestamps);
- contact details you voluntarily send to us (for example by email).
We do not intentionally collect payment card data for Meta billing through this product. Meta billing remains between the merchant and Meta.
4. Purposes of processing
- establish and maintain the merchant-authorized connection to WhatsApp Business Platform;
- send merchant-configured transactional templates to opted-in recipients;
- receive and process webhook delivery statuses;
- operate multi-tenant isolation, authentication and security controls;
- respond to support, disconnection and data deletion requests;
- comply with legal obligations and defend legitimate claims where applicable.
Net Seo Media does not sell Platform Data and does not use Platform Data for advertising.
5. Roles and responsibilities
Roles may vary by context. For merchant account and connection data processed to provide the SaaS, Net Seo Media typically acts as an independent controller for its own service operations. For buyer contact details and message content initiated by a merchant, the merchant remains responsible for determining the lawful basis (including obtaining and documenting customer opt-in) and for the content of communications. In that context, Net Seo Media processes data as needed to provide the integration on the merchant’s instructions. We do not claim a single fixed role for every data element in every scenario.
Each merchant is responsible for obtaining valid consent / opt-in from buyers before WhatsApp notifications are sent.
6. Legal bases
Where GDPR applies, processing is based on one or more of: performance of a contract with the merchant; legitimate interests in operating a secure SaaS integration; compliance with legal obligations; and, where relevant for website contact, steps at the request of the person contacting us. Merchants must ensure an appropriate lawful basis for messaging their customers.
7. Processors and third parties
- Hosting / infrastructure for connect.netseo.ro and related application databases;
- Meta Platforms services for WhatsApp Business Platform, Facebook Login for Business / Embedded Signup, Graph API and webhooks — subject to Meta’s terms and policies;
- email providers if used for support correspondence.
Using WhatsApp Business Platform necessarily involves transferring relevant data to Meta according to the merchant’s authorization and Meta’s documentation.
8. International transfers
Meta services may process data outside Romania / the EEA. Transfers occur as part of using Meta’s platform under the merchant’s connection and Meta’s contractual terms. We do not operate a separate advertising transfer pipeline for Platform Data.
9. Security measures
- HTTPS / TLS for public endpoints;
- encrypted storage of sensitive tokens;
- server-to-server authentication for Connect API / store module calls;
- webhook signature verification;
- access controls for administrative interfaces;
- security headers and rate limiting on relevant endpoints.
No method of transmission or storage is completely secure. We work to reduce risk; we do not claim absolute security.
10. Retention
We retain connection and operational data for as long as needed to provide the service to the merchant and for a reasonable period afterward for security, dispute handling and legal compliance. Exact retention windows may depend on the type of record and ongoing legal requirements. When a merchant disconnects or a verified deletion request is completed, we delete or anonymize data that is no longer necessary, except where retention is required by law or for legitimate security/audit purposes.
11. Your rights
Subject to applicable law, individuals may request access, rectification, erasure, restriction, objection, or data portability, and may withdraw consent where processing is consent-based. Merchants and affected individuals can contact us at contact@netseo.ro. Buyers should usually contact the merchant store first for order-related messaging questions.
12. Disconnect and deletion
Merchants can disconnect the integration from their store / admin flows where available, remove authorization in Meta Business Integrations when applicable, and request deletion as described on our Data Deletion Instructions page. Meta may also call our automated data deletion callback for certain Meta-originated deletion flows.
13. Complaints
You may contact us first. You may also lodge a complaint with the Romanian supervisory authority (ANSPDCP) or another competent authority where you live or work.
14. Changes
We may update this policy to reflect product or legal changes. The effective date and version above will be revised when material changes are published on this page.
15. Contact
Questions about this policy: contact@netseo.ro · Contact page.