Privacy Policy

Effective Date: 1 October 2025 — TTNet LTD operating WhatsChat

This Privacy Policy explains how TTNet LTD (the operator of the “WhatsChat” platform, hereafter “WhatsChat”, “we”, “us” or “our”) collects, uses, stores, shares and protects personal data in connection with the WhatsChat services, including but not limited to WhatsApp Cloud API integration, categorized lead distribution, AI automations, automatic translation, user-uploaded contact lists, campaign analytics, and developer integrations. This policy is written with compliance to the laws and OHADA principles applicable in Cameroon.

Scope and applicability

This policy applies to all persons and entities who use WhatsChat or whose data is processed by WhatsChat in the course of providing its services: business account holders, advertisers, developers, visitors, and recipients of messaging activities (collectively “you”).

Categories of data we collect

We collect categories of information necessary for platform functionality, security, and service delivery, including:

  • Identity & account information: business name, representative name, business registration documents, contact details, and KYC data where required for verification.
  • Integration & credentials: encrypted WhatsApp Cloud API tokens, App IDs and secrets, webhook endpoints and associated logs (stored encrypted).
  • Uploaded contacts: contact lists imported by you (names, phone numbers, tags, and other fields provided by you).
  • Provided lead pool data: categorized leads from our lead pool (metadata and categorization used for targeting).
  • Campaign metadata: templates, CTA buttons, media attachments, scheduling, delivery logs, read receipts, and response logs.
  • AI analytics and logs: AI response traces used to operate automations and, where permitted, for model improvement (anonymised/aggregated where feasible).
  • Technical data: IP addresses, device/browser fingerprints, session logs and diagnostic telemetry used for security and operations.
  • Billing data: transaction references, invoices and billing metadata (payments processed by third-party payment gateways).

Purpose of processing

We process your data to:

  • Operate and provide WhatsChat services (WhatsApp Cloud API messaging, lead delivery, campaign execution);
  • Run AI automations and provide automatic translations between English, French and other supported languages;
  • Provide analytics and reporting, monitor campaign performance, and measure response rates and conversions;
  • Secure the platform, prevent abuse and fraud, and maintain operational continuity;
  • Comply with legal obligations and cooperate with lawful inquiries under OHADA/Cameroon law;
  • Bill and manage subscriptions, and perform related accounting tasks.

Ownership and use of uploaded contacts and provided leads

Uploaded contacts remain your sole property. WhatsChat operates as a processor, with a limited licence solely to process uploaded contacts for campaign delivery and analytics as instructed by you. Leads provided from WhatsChat’s pool are supplied under licence for marketing via the Platform and may not be exported or resold outside permitted use. You remain responsible for ensuring legal consent or lawful basis before messaging any contact where local law requires it.

Legal bases

Processing is based on contractual necessity, legitimate interests (platform security, fraud prevention, product improvement), consent where obtained, and compliance with legal obligations. For personal data processed for direct marketing, where required by law we will rely on consent or other lawful bases as appropriate.

Security, retention and deletion

WhatsChat uses technical measures (TLS in transit, AES-256 at rest for sensitive stores, role-based access controls, MFA for administrators), organizational measures (security policies, staff training, NDAs for personnel) and operational measures (logging, monitoring, periodic audits). Uploaded contacts persist until you request deletion or terminate your account, subject to legal holds. Campaign logs are retained for a minimum of 36 months unless you request otherwise or law requires different retention.

Disclosure and subprocessors

We share data only as necessary to deliver services: Meta (WhatsApp) for message delivery, payment providers for subscription processing, cloud hosts and selected subprocessors (translation engines, AI hosts, analytics providers) under contractually binding data protection obligations. A list of subprocessors is available on request via our contact page.

International transfers

Data may be processed or stored in jurisdictions outside Cameroon. Where cross-border transfers occur, WhatsChat implements contractual and technical safeguards consistent with legal requirements to protect personal data.

Your rights and choices

Subject to applicable law, you may request access to, correction of, deletion of, restriction of processing for, or portability of your personal data. To exercise these rights, contact us through the contact page. We will respond in accordance with OHADA and applicable Cameroonian law.

Data breach notification

Where a personal data breach occurs affecting your data, WhatsChat will notify you and any competent supervisory authority as required by law, providing information about the nature of the breach, likely consequences and remedial actions taken.

Children

The platform is intended for businesses and professionals. We do not knowingly collect personal data from children under 18. If we obtain information indicating a minor’s data has been collected, we will take action to remove it in accordance with applicable law.

Contact & further assistance

To exercise privacy rights, to request data exports, or for privacy questions, use: https://www.whatschatads.com/contact-us/

Operational reference: sample category file for internal use: /mnt/data/Wholesale & Product Promotion.txt

Last updated: 1 October 2025 — TTNet LTD operating WhatsChat