Privacy Policy

1. Scope and who is responsible

This Privacy Policy applies to WASA Social Hub's website, applications, dashboards, APIs, and related services (collectively, the "Service"). WASA Social Hub is operated by Wasa Company, which is responsible for the personal data described in this policy unless another organization is identified as the controller.

A business using WASA Social Hub may also control the customer conversations, content, and other information it imports into its workspace. In that situation, we process that information on the business's behalf and its own privacy notice may also apply.

2. Data we collect

Information you provide

• Account and profile information, such as name, email address, password credentials handled by our authentication provider, company name, role, and workspace preferences.
• Content you create or upload, including captions, posts, images, videos, files, drafts, schedules, comments, and support requests.
• Team and company information, including invitations, assignments, permissions, and workspace settings.

Information from connected platforms

When you choose to connect a supported platform such as Facebook, Instagram, or Telegram, we receive information that the platform makes available under the permissions you approve. Depending on the platform and features you use, this may include:

• Account, Page, or channel identifiers, names, usernames, profile images, and connection status.
• Access tokens and authorization details needed to keep the connection working.
• Posts, media, comments, messages, message participants, and conversation history needed for publishing and inbox features.
• Engagement and performance information made available by the connected platform.

We only request platform permissions needed for the features you choose. Connecting an account does not give WASA Social Hub unrestricted access to the platform or to unrelated accounts.

Information collected automatically

We may collect device, browser, IP address, sign-in, activity, error, and security-log information when you use the Service. We use this information to operate, secure, troubleshoot, and improve WASA Social Hub.

3. How we use data

We use the information described above to:

• Create and secure accounts and company workspaces.
• Connect authorized social accounts and display their available pages, channels, and professional accounts.
• Publish or schedule user-approved content to selected platforms.
• Retrieve and display messages, comments, and conversation history and send replies initiated by authorized users.
• Provide analytics, team collaboration, notifications, and customer support.
• Detect misuse, investigate errors, maintain audit records, and protect the Service.
• Comply with law, enforce our terms, and protect users and others.

We do not sell personal data or customer content. We do not use private messages or customer content for third-party advertising. AI-assisted features, when enabled, are designed to suggest or summarize content; users must review important content and approve replies or publications before they are sent.

4. Legal bases

Where applicable law requires a legal basis, we process data to provide the Service under our contract with you, based on your consent for optional connections, for our legitimate interests in operating and protecting WASA Social Hub, and when necessary to comply with legal obligations. You may withdraw consent for a connected account by disconnecting it, although this does not affect processing already completed.

5. Service providers and disclosures

We use service providers to operate WASA Social Hub. They process data for us under their agreements and security obligations:

When you direct WASA Social Hub to connect with or send information to Meta services (including Facebook and Instagram), Telegram, or another platform, that platform receives and processes the information under its own terms and privacy policy. We may also disclose information when required by law, to protect rights and safety, or as part of a merger, financing, acquisition, or sale of assets with appropriate safeguards.

6. Meta Platform Data

Information received through Meta products is used only to provide user-authorized account connection, publishing, messaging, comment-management, and analytics features. We process that data according to Meta's Platform Terms and applicable developer policies. We do not use Meta Platform Data for surveillance, eligibility decisions, or unrelated advertising.

You can remove WASA Social Hub's access in the connected-account settings, in your Facebook or Instagram business settings, or by following the deletion process below.

7. Retention

We retain account, workspace, content, and activity data while your account is active and for as long as reasonably needed to provide the Service, meet legal obligations, resolve disputes, prevent abuse, and enforce agreements. Connection tokens are retained only while the connection is active or until they expire, are revoked, or are deleted.

After a verified deletion request, we delete or de-identify data in active systems within 30 days unless a longer period is required by law or needed for security, fraud prevention, or dispute resolution. Residual copies may remain temporarily in protected routine backups until those backups are overwritten under our service providers' backup schedules. Backup copies are not used for ordinary business purposes.

8. Security

We use administrative, technical, and organizational measures designed to protect data. These include HTTPS/TLS in transit, server-side storage of platform credentials, encryption of sensitive connection tokens where supported by our application configuration, access controls, role-based permissions, logging, and restricted production access.

No service can guarantee absolute security. You are responsible for using a strong, unique password, protecting your sign-in methods, limiting workspace access, and promptly reporting suspected unauthorized use.

9. International data transfers

WASA Social Hub and its service providers may process information in countries other than the country where you live. Where required, we rely on contractual and other safeguards recognized by applicable law for these transfers.

10. Your rights and choices

Depending on your location, you may have rights to access, correct, export, restrict, object to, or delete personal data, and to withdraw consent. You can update certain account and workspace details inside WASA Social Hub, disconnect social accounts, or contact us to exercise a legal right.

We may need to verify your identity and authority over the relevant account or workspace before completing a request. If a business controls the data, we may direct you to that business or assist it with the request.

12. Cookies and local storage

WASA Social Hub uses cookies or similar browser storage that are necessary for authentication, security, session continuity, and user preferences. We do not currently use customer workspace content for cross-site advertising. If we introduce optional analytics or advertising cookies, we will update this policy and provide consent controls where required.

13. Children

The Service is intended for businesses and is not directed to children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided data to WASA Social Hub, contact us so we can investigate and delete it as appropriate.

14. Changes to this policy

We may update this policy to reflect changes to the Service, providers, or legal requirements. We will post the revised policy here, change the "Last updated" date, and provide additional notice when required.

15. Contact us

For privacy questions, rights requests, or deletion requests, contact: