Privacy policy

Last updated: October 20, 2026

Integramate (“we”, “us”) is a service that lets businesses (“clients”) run automations on their WhatsApp Business number, such as answering frequent questions, and read and reply to their WhatsApp conversations from a web dashboard. This policy explains what data we process, why, and the choices you have. Questions go to pablomalyk@gmail.com.

Who this policy covers

Members: the people at a client business who sign in to the Integramate dashboard.
Customers: the people who write to a client’s WhatsApp number. They never use Integramate directly; the client decides to use Integramate and is responsible for informing its customers.

Data we process

About members

Name, email address and a hashed password, or the Google account used to sign in.
The workspace they belong to and their role in it.
Session data needed to keep them signed in and secure: a session cookie, IP address, browser user agent and sign-in attempts.

Received from Meta when a client connects WhatsApp

The WhatsApp Business Account ID, phone number ID, display phone number and verified business name.
An access token that lets Integramate act on that WhatsApp Business Account. We encrypt it at rest and never show it back.

About customers, through the WhatsApp Business Platform

Their WhatsApp number and WhatsApp profile name.
The text of the messages they exchange with the client’s number, including replies from the client’s bot and team.
For photos, audio, video, documents, stickers and locations, only the type of message. We do not store the media itself.

About automation runs

For each run: when it happened, whether it succeeded, error codes, and whether it was answered automatically. Used for the client’s dashboard metrics.

How we use it

To provide the service: sign members in, receive the client’s WhatsApp messages, answer them with the automations the client configured, and show conversations and metrics in the dashboard.
To send the replies a member writes in the dashboard through the client’s WhatsApp number.
To keep the service secure: rate limits, sign-in protection and abuse prevention.
To send service emails such as password resets and invitations.

We do not sell personal data, we do not use it for advertising, and we do not use customers’ messages to train AI models. Data received from Meta is used only to provide the service to the client that connected it.

Who processes it for us

We use these providers to run the service, each only for that purpose:

Meta (WhatsApp Business Platform), to receive and send WhatsApp messages.
DigitalOcean, to host our servers and the database for accounts and configuration.
MongoDB Atlas, to store conversations, messages and automation runs.
Cloudflare, to serve the web dashboard and to protect the sign-in with a bot check.
Google, when a member chooses to sign in with Google.
Resend, to deliver service emails.

These providers may process data in countries other than yours.

How long we keep it

Messages are deleted automatically 180 days after they were sent, and a conversation 180 days after its last message.
The WhatsApp access token is deleted as soon as the client disconnects WhatsApp in the dashboard.
Member accounts and workspace data are kept while the client uses the service and deleted on request when it ends.

Security

Data travels over HTTPS. Each client’s data is kept separate from every other client’s. Access tokens are encrypted at rest. Our logs leave out message texts, phone numbers, emails and tokens.

Data deletion and your rights

You can ask us to access, correct or delete your personal data at any time:

Clients: disconnecting WhatsApp in the dashboard deletes the stored access token immediately. To delete the whole workspace, its members, conversations and configuration, email pablomalyk@gmail.com from an owner’s address.
Customers: ask the business you wrote to, or email pablomalyk@gmail.com with your WhatsApp number and the business’s name. We delete your conversations within 30 days and confirm by email.

Changes

If this policy changes, we update the date above and tell clients by email before material changes take effect.