vibe sender

Privacy Policy

Vibe Sender ("we", "us") is a WhatsApp broadcast platform operated by Prime Society, available at app.primesociety.ai. It lets businesses connect their own WhatsApp Business Account (via Meta's official Cloud API) and send approved template messages to their contact lists. This policy explains what data we handle and why.

1. Data we collect

• Account data: your name, email address and a hashed password.
• WhatsApp Business data (with your explicit authorization through Meta's Embedded Signup): an access token, your WhatsApp Business Account ID, phone number ID and business ID. Tokens are stored encrypted at rest (AES-256-GCM).
• Contact lists you upload (names, phone numbers and any columns in your files). They belong to you; we process them only to send the campaigns you create.
• Message logs: recipient phone number, template used, send status and timestamps — used for your dashboard, deduplication and reports.
• Optional integrations: credentials you provide for your own Chatwoot or Kommo accounts (stored encrypted) and logos you upload for reports.

2. How we use data

Exclusively to provide the service: authenticating you, sending the template messages you request through Meta's WhatsApp Cloud API on your behalf, registering sends in your own CRM integrations when you enable them, and showing you statistics and reports. We do not sell, rent or share your data or your contacts' data with third parties.

3. Meta platform data

Data received from Meta (tokens and account identifiers) is used solely to call Meta's APIs on your behalf, is stored encrypted, and is never shared. You can revoke our access at any time in Meta Business Manager → Settings → Integrations → Connected apps, which invalidates the token.

4. Retention and deletion

Data deletion: you may request deletion of your account and all associated data (credentials, contact lists, logs) at any time by emailing gramadopublicidade@gmail.com with the subject "Delete my data". Deletion is completed within 7 days and is irreversible. Contact lists can also be deleted individually inside the product at any time.

5. Security

All traffic is encrypted (HTTPS/TLS). Access tokens and integration credentials are encrypted at rest. Access to production systems is restricted and every account only sees its own data.

6. Your responsibilities

You are the controller of the contact lists you upload. You must have a lawful basis to message those contacts and must honor opt-out requests, in line with the WhatsApp Business Messaging Policy and applicable law (including LGPD in Brazil).

7. Changes and contact

We may update this policy; the date above always reflects the current version. Questions: gramadopublicidade@gmail.com.