Mesico Privacy Policy

Mesico is a WhatsApp business messaging platform operated by Autometa. This policy covers personal data handled through Mesico's website, workspace, mobile applications and APIs, including connections to the WhatsApp Business Platform provided by Meta.

Autometa determines how account, billing, support and security information is used to operate Mesico. For contacts, messages and other information a business manages in its workspace, that business determines the purpose of processing and Autometa processes the information on its behalf.

This policy describes Mesico specifically. Our company privacy policy covers other Autometa services; their features do not necessarily apply to Mesico.

• Accounts and workspaces: names, email addresses, password hashes, business profile information, team memberships, roles, invitations and preferences.
• WhatsApp connections: business portfolio and WhatsApp Business Account identifiers where provided, phone numbers and their identifiers, display names, account and verification statuses, granted permissions and integration credentials. Access tokens and supplied app secrets are stored encrypted on the server.
• Business communications: contact names and phone numbers, imported contact records, tags, segments, conversation assignments, message text, attachments and media, timestamps, message identifiers and delivery, read or failure statuses.
• Templates and campaigns: message templates and their approval statuses, selected recipients, campaign content, scheduling information and sending results.
• Service records: subscription, usage, credit and payment records where applicable, support correspondence, session and authentication information, IP addresses and technical or audit logs. Device notification tokens are processed when push notifications are enabled.

Information comes from you, authorized workspace members, connected Meta services and people who communicate with your business. Connecting Meta authorizes the selected business assets; it does not give Mesico access to unrelated personal WhatsApp chats. Do not upload information your business is not entitled to process.

We use information to create and authenticate accounts, connect authorized WhatsApp assets, send and receive messages, display shared conversations, route work to team members, manage contacts, synchronize templates, run requested campaigns, report delivery results, provide notifications, administer subscriptions and respond to support requests.

We also use relevant records to investigate errors and abuse, enforce access controls, protect the service, resolve disputes and meet applicable legal obligations. We do not sell WhatsApp contacts or message content, or use that content to target advertising.

Businesses using Mesico are responsible for giving their contacts appropriate notices, obtaining required permissions and opt-ins, and complying with applicable law and WhatsApp messaging policies.

Workspace information is accessible to authorized members according to their organization, role and assigned access. Your workspace administrator manages team access. Authorized Autometa personnel may access relevant information when necessary to provide support, maintain the service or investigate security issues.

Meta processes information needed to provide the WhatsApp Business Platform, including message transmission and account management, under its applicable terms and privacy policies. Mesico also relies on service providers for hosting, databases, file storage, email delivery and, where enabled, payments and notifications. We disclose information to these providers as needed for their services.

We may disclose relevant information when legally required, to protect users or the service, or as part of a business transfer subject to applicable privacy obligations. Service providers may process information in countries other than yours. Contact us to ask about the providers and processing locations relevant to your workspace.

When you use Meta Embedded Signup, Meta asks you to log in, select business assets and grant permissions. Mesico exchanges the resulting authorization code on the server and uses the granted access to operate the selected WhatsApp connection. An authorized administrator may also connect supported assets using API credentials.

You can disconnect a WhatsApp account in Mesico or revoke Mesico's access through the relevant Meta business integration settings. Disconnecting in Mesico disables that connection and clears its stored connection credentials. Revoking permissions prevents further API access under that authorization.

Disconnecting or revoking access does not automatically erase contacts, messages or other records already stored in your workspace. Use the deletion instructions below to request their removal. Meta manages its own copies and retention separately.

We retain workspace information as needed to provide the service and carry out the business customer's instructions. Account, support, security and financial records may be retained where needed for their purposes, dispute resolution or applicable legal obligations. Retention depends on the data and context; disconnecting an integration does not start an automatic deletion schedule.

Integration credentials are encrypted before storage. Organization and role checks restrict workspace access. These measures reduce risk, but no system can guarantee absolute security. Protect your account and limit the access you grant to team members.

Where backups or provider-managed copies exist, removal from those copies may follow their applicable retention and rotation processes. If some information must be retained after a deletion request, we will explain the relevant limitation.

To request access, correction, export or deletion of Mesico information, email privacy@autometa.in. For deletion, use the subject Mesico data deletion and include:

1. Your Mesico account email and the workspace or business name.
2. The account, connected WhatsApp number or categories of information you want deleted.
3. Whether you are the account holder, an authorized workspace administrator or a person who contacted a business using Mesico.

We may ask for information needed to verify your identity and authority before acting. Never send passwords, access tokens, app secrets or WhatsApp verification codes. We will review your request, explain any applicable exceptions and respond within the time required by applicable law.

If you are a customer or contact of a business using Mesico, contact that business first: it controls its workspace records. You can also email us so we can help route the request and work with the business on its instructions.

Requests can cover information received through Meta as well as information supplied directly to Mesico. Removal of an integration alone is not a request to delete the workspace. Some records may need to remain for legal, security or dispute-related purposes. We cannot delete information independently held by Meta, the business outside Mesico or message recipients.

Mesico accounts are intended for business users aged 18 or older. If you believe a child has supplied personal information improperly, contact us so we can review it with the relevant business.

We may update this policy as Mesico or its data practices change. The effective date identifies the current version. Where required, we will provide additional notice of material changes.

For privacy questions or requests, contact Autometa at privacy@autometa.in or use our contact page.