Privacy Policy

SAASLAND LTD ("WhatsTeam", "we", "us", or "our"), a company registered in England and Wales under Company Number 15793509, with its registered office at 124 City Road, London, United Kingdom, EC1V 2NX. We are the Data Controller for the personal data processed through our services, as defined under the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (EU GDPR), and the UK Data Protection Act 2018. This Privacy Policy applies to the whats.team website and the WhatsTeam platform, including all related services, features, and tools we provide. By using our services, you acknowledge that you have read and understood this policy.

We collect the following categories of personal data: • Account Information: your name, email address, company name, phone number, and billing details provided during registration and account management. • Communication Data: messages sent and received through the platform, including message content, timestamps, and delivery status. • Device Information: details about WhatsApp devices connected to your account. • Usage Data: information about how you interact with our platform, including features used, actions taken, and time spent. • Technical Data: IP address, browser type and version, operating system, device identifiers, and other technical information collected automatically when you access our services. • Payment Data: transaction and billing information necessary to process your subscription payments. Payment processing is handled by third-party payment processors. We do not store full credit card numbers on our servers.

We process your personal data under the following legal bases as set out in Article 6 of the UK GDPR: • Contract Performance (Art. 6(1)(b)): processing necessary to provide the WhatsTeam platform and fulfill our obligations under your subscription agreement. • Legitimate Interests (Art. 6(1)(f)): processing necessary for our legitimate interests, including platform security, fraud prevention, service improvement, and analytics, where these interests are not overridden by your rights. • Legal Obligation (Art. 6(1)(c)): processing necessary to comply with our legal obligations, including tax reporting, regulatory requirements, and law enforcement requests. • Consent (Art. 6(1)(a)): processing based on your explicit consent, such as receiving marketing communications and the use of optional analytics cookies. You may withdraw your consent at any time.

We use the personal data we collect for the following purposes: • To provide, maintain, and improve our services and platform functionality. • To process transactions and manage your subscription. • To send technical notices, security alerts, and support messages. • To respond to your requests, inquiries, and customer support needs. • To monitor usage trends and analyze how our services are used. • To detect, prevent, and address fraud, abuse, and security issues. • To personalize your experience and deliver relevant content. • To comply with applicable legal obligations and regulatory requirements.

We may share your personal data in the following circumstances: • Sub-processors: we engage trusted third-party service providers for hosting, analytics, and payment processing. These providers are bound by appropriate data processing agreements and may only process your data on our instructions. • Legal Requirements: we may disclose your data when required by law, regulation, legal process, or enforceable governmental request. • Business Transfers: in connection with a merger, acquisition, reorganization, or sale of assets, your data may be transferred as part of that transaction. We will notify you of any such change. • With Your Consent: we may share your data with third parties when you have given us explicit consent to do so. We do not sell your personal data to third parties.

As a WhatsApp Business Solution Provider, certain data is shared with Meta Platforms, Inc. as required by the WhatsApp Business API terms and conditions. This includes: • Business profile information associated with your WhatsApp Business account. • Message metadata, such as sender and recipient identifiers, timestamps, and delivery receipts. Message content is end-to-end encrypted by WhatsApp and is not accessible to Meta or WhatsTeam in readable form during transmission. As a WhatsTeam customer, you are responsible for obtaining appropriate consent from your end users before sending them messages through the WhatsApp Business API. You must ensure your use of the platform complies with applicable data protection laws and WhatsApp Business policies.

Your personal data may be transferred to and processed in countries outside the United Kingdom and the European Economic Area (EEA). When such transfers occur, we ensure your data is protected by implementing appropriate safeguards, including: • Standard Contractual Clauses (SCCs) approved by the European Commission. • The UK International Data Transfer Addendum to the EU SCCs. • Transfers only to countries that have been recognized as providing an adequate level of data protection. We conduct transfer impact assessments where required and implement supplementary measures to ensure your data remains protected.

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy: • Account Data: retained for the duration of your active account, plus a reasonable period thereafter to allow for account reactivation or to address any outstanding matters. • Message Data: retained in accordance with your account settings and applicable legal requirements. • Billing Records: retained as required by tax and accounting law, typically for a period of 6 years. Upon receiving a valid deletion request, we will remove your personal data within 30 days, except where we are legally required to retain certain information. Residual copies in backup systems are purged in accordance with our backup rotation schedule.

We implement appropriate technical and organizational measures to protect your personal data, including: • Encryption of data in transit using TLS (Transport Layer Security) and encryption of data at rest. • Regular security assessments and vulnerability testing. • Strict access controls and multi-factor authentication for internal systems. • Employee training on data protection and security best practices. • Incident response procedures to detect, report, and address data breaches promptly. No method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to protect your personal data, we cannot guarantee its absolute security.

Under the UK GDPR, EU GDPR, and the UK Data Protection Act 2018, you have the following rights regarding your personal data: • Right of Access: request a copy of the personal data we hold about you. • Right to Rectification: request correction of inaccurate or incomplete data. • Right to Erasure: request deletion of your personal data, subject to legal retention requirements. • Right to Data Portability: request a machine-readable copy of your data to transfer to another provider. • Right to Restriction: request that we limit the processing of your data in certain circumstances. • Right to Object: object to processing based on our legitimate interests. • Right to Withdraw Consent: withdraw your consent at any time where processing is based on consent. • Right to Lodge a Complaint: file a complaint with a supervisory authority. We will respond to your request within 30 days and at no charge in most cases. To exercise any of these rights, please contact us at privacy@whats.team. UK residents may lodge a complaint with the Information Commissioner's Office (ICO): Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, United Kingdom (https://ico.org.uk). EU residents may lodge a complaint with their local data protection supervisory authority.

We use cookies and similar tracking technologies on our website and platform: • Essential Cookies: required for session management, security, and core functionality. These cannot be disabled. • Functional Cookies: store your preferences and settings to enhance your experience. • Analytics Cookies: help us understand usage patterns and improve our services. These are only placed with your consent. You can manage your cookie preferences through your browser settings or our cookie consent mechanism. Please note that disabling certain cookies may affect the functionality of our services. We may also use third-party cookies from analytics providers. Cookie consent is managed in accordance with applicable UK and EU law.

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected personal data from a child, we will take steps to delete that information promptly. If you believe that a child has provided us with personal data, please contact us at privacy@whats.team so we can take appropriate action.

Our website and platform may contain links to third-party websites, services, or applications that are not operated by us. We are not responsible for the privacy practices or the content of these third-party sites. We encourage you to review the privacy policies of any third-party services you access through links on our platform.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by email or by posting a prominent notice on our platform. The "Last updated" date at the top of this policy indicates when it was last revised. Your continued use of our services after any changes take effect constitutes your acceptance of the revised policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: • SAASLAND LTD (trading as WhatsTeam) • 124 City Road, London, EC1V 2NX, United Kingdom • Privacy inquiries: privacy@whats.team • Data Processing Agreement requests: legal@whats.team UK residents may also contact the Information Commissioner's Office (ICO): Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, United Kingdom (https://ico.org.uk). EU residents may contact their local data protection supervisory authority.