Skip to content
sosyalmedya.website

Privacy Policy

Last updated:

This policy explains how personal data is processed when you use the sosyalmedya.website website and application (the "Service"). It follows the principles of the EU General Data Protection Regulation (GDPR) and Türkiye's Personal Data Protection Law (KVKK).

1. Controller

The controller is Yapay Zeka LLC, 30 N Gould St Ste N, Sheridan, WY 82801, United States. Contact: [email protected].

2. Data we process

  • Account data: name, email, business name, a one-way hash of your password (we never store the password itself), language preference.
  • Subscription data: plan, payment status, Stripe customer ID. Card details never reach us; Stripe processes them directly.
  • Meta Platform Data (WhatsApp): WhatsApp Business Account (WABA) ID, phone number ID and display number, verified business name, quality rating, the business access token Meta grants (stored encrypted), message templates, and the messages you exchange with your customers on WhatsApp together with their status (sent, delivered, read).
  • Request forms: name, email, phone, business, industry and message.
  • Technical data: IP address, browser details, session and security logs, campaign source (UTM parameters, ad click ID).
  • Analytics and marketing cookies, only with your consent (see section 8).

3. Purposes and legal bases

  • Providing the Service and managing your account and subscription — performance of a contract.
  • Showing and sending your WhatsApp messages and running your auto-replies — performance of a contract; for your customers' data we act as your processor.
  • Billing and legal obligations — legal obligation.
  • Security, abuse prevention and improving the Service — legitimate interests.
  • Analytics and ad measurement — only with your consent.

4. How we use Meta Platform Data

We use the data we receive through the WhatsApp Business Platform only to provide the Service to you: to show and send your messages, manage your templates and run the automations you set up.

We never sell or rent this data, use it for advertising or profiling, or share it with other customers. Only the users on your account and, where strictly needed to operate the Service, our authorized staff can access it. We comply with Meta's Platform Terms and Developer Policies.

When you remove your WhatsApp connection in the panel, the access token is invalidated and no new data is received; when you ask us to delete your account, the related data is deleted within the periods in section 7.

5. Transfers and sub-processors

We work with the providers below to run the Service. Some are located outside your country, so data is transferred internationally with appropriate safeguards.

  • Meta Platforms (WhatsApp Business Platform, Cloud API) — message delivery.
  • Hostinger International — application and database hosting (European data centers).
  • Cloudflare — content delivery and security.
  • Stripe — payments and invoicing.
  • Resend — transactional email.
  • Google (Analytics), Microsoft (Clarity) and Meta (Pixel, Conversions API) — only if you consent to cookies.

6. Security

  • All traffic is encrypted with HTTPS.
  • Meta access tokens and app secrets are stored encrypted with AES-256-GCM.
  • Passwords are hashed with bcrypt.
  • Access is limited by role-based permissions and important actions are logged.

7. Retention

  • Account and message data: while your account is active; 30 days after the subscription ends, then deleted or anonymized.
  • Technical and webhook logs: up to 90 days.
  • Invoices: for the legally required periods.
  • Request forms: up to 2 years after the request is closed.

8. Cookies

  • Necessary: smw_session (session), lang (language), smw_consent (your cookie choice), smw_attr (campaign source, 90 days).
  • Analytics (with consent): Google Analytics cookies (_ga, _ga_*) and Microsoft Clarity cookies (_clck, _clsk) — measuring how pages are used (clicks, scrolling).
  • Marketing (with consent): Meta Pixel cookies (_fbp, _fbc). With consent, events such as sign-ups and purchases are also sent through Meta's Conversions API; emails and phone numbers are hashed (SHA-256) before sending.
  • You can change your choice anytime with the "Cookie preferences" link at the bottom of the page.

9. Your rights

You have the right to access, rectify, erase, restrict or object to processing of your data, and to data portability. Email [email protected]; we reply within 30 days. You may also complain to your data protection authority.

For your customers' data (the people you message on WhatsApp) you are the controller and we process it on your instructions. We forward any requests from your customers to you.

10. Data deletion

See https://sosyalmedya.website/en/data-deletion for how to delete your account and data.

11. Changes

We may update this policy. We'll announce material changes by email or in the panel.