WhatsApp Messaging Privacy Policy

This Privacy Policy describes how Jafran Group LLC (“we,” “our,” or “us”) collects, uses, stores, and shares information when you exchange messages with our WhatsApp Business number, including reminder messages sent by our internal assistant (“REX”) through our Meta app REX Reminders. It also serves as the privacy policy for that Meta app.

Who we are

Jafran Group LLC is an IT consulting and managed services business. We use the WhatsApp Business Platform, provided by Meta, for business communications. Our WhatsApp integration is an internal tool: it is used by Jafran Group LLC to send reminders and to read messages people send to our business number. It is not a public app, and we do not offer it to other businesses or users.

What information we collect via WhatsApp

When you send a message to our WhatsApp Business number, Meta delivers it to our secure webhook, and we may store:

• Message metadata: your WhatsApp phone number (WhatsApp ID), the message ID, the time the message was sent and received, the message type, and the ID of any message you replied to
• Your WhatsApp profile name as provided by WhatsApp
• Message content: the text you send, captions, button or list replies, reactions, and any location or contact cards you choose to share
• Media files you send (for example images, documents, audio, and video), together with the file name, file type, size, and a checksum. Media is downloaded from Meta and stored in private cloud storage

Full message content and media are stored only for senders we have approved in our system (for example clients and contacts we work with). For messages from other senders, we store only limited metadata (WhatsApp number, profile name, message ID, and timestamps), not the message text or media, so that our team can recognize and review the contact.

When REX sends you a reminder, we use your WhatsApp phone number and the reminder text to send the message through WhatsApp.

We do not use cookies, tracking pixels, or advertising identifiers in connection with WhatsApp messaging, and we do not collect data from your device beyond what WhatsApp delivers with your message.

How we use your information

• To read and respond to messages you send us and to provide the services you request
• To send reminder messages you have asked for or agreed to receive
• To keep our internal records of business communications accurate
• To operate, secure, and troubleshoot our messaging systems (for example, detecting invalid or unauthorized requests)
• To comply with legal obligations

Legal basis and consent

You choose to message us on WhatsApp, and we process those messages to respond to you and to provide our services. We send reminder messages only to people who have opted in to receive them (for example, by asking us to set up a reminder). Reminders are sent using message templates approved by WhatsApp. Where the law requires a specific legal basis, we rely on your consent, on the need to respond to your request or perform a service for you, and on our legitimate interest in running and securing our business communications.

Sharing and service providers

We share information only with the service providers we need to deliver and store messages, and only for that purpose:

• Meta Platforms / WhatsApp: delivers messages between you and our business number. Meta processes messages under its own terms and policies.
• Microsoft Azure: hosts our webhook, storage, and logging services.

We may also disclose information if required to satisfy any law, regulation, legal process, or governmental request; to avoid liability; or to protect our rights, property, or safety or that of others.

Storage location and security

Messages and media we receive are stored in Microsoft Azure data centers in the United States (US West 3 region). We protect this information with measures that include:

• Encryption in transit (HTTPS/TLS) and encryption at rest provided by Azure Storage
• Private storage with no public access; media can be opened only through short-lived, read-only links issued to authorized internal tools
• Verification that each incoming webhook delivery is genuinely from Meta before anything is stored
• Access limited to authorized Jafran Group LLC personnel and internal tools using managed identities and individual access keys
• Application logs that record technical events only; they do not contain message content or full phone numbers (phone numbers are replaced with a non-reversible, salted hash)

No method of transmission or storage is completely secure, but we work to protect your information and to limit who can access it.

How long we keep information

• Messages and message metadata are deleted automatically 90 days after we receive them, by a daily scheduled deletion job.
• Media files are deleted automatically after 90 days by a storage lifecycle rule (deletion typically completes within one to two days after the 90-day mark). We do not keep backup copies or previous versions of deleted messages or media.
• Application logs (which contain no message content or full phone numbers) are kept for up to 90 days. Azure platform diagnostic logs are kept for up to 31 days.
• Our approved-sender list (a phone number and a short label for contacts we work with) is kept until the contact is removed or asks us to remove it.
• Records of reminders we send are kept for 90 days and then deleted.

You can ask us to delete your information sooner; see User Data Deletion Instructions.

Your rights

Depending on where you live, you may have the right to access the information we hold about you, to ask us to correct it, to ask us to delete it, or to object to or restrict certain processing. To make a request, email support@jafrangroup.com and include the WhatsApp number you used to message us. We may need to verify that the number belongs to you before acting on the request. We will respond within 30 days.

For step-by-step deletion instructions, see our User Data Deletion Instructions.

Opting out

To stop receiving reminder messages from us on WhatsApp, reply STOP to any of our messages, or tell us by email at support@jafrangroup.com. You can also block our business number at any time in the WhatsApp app. After you opt out, we will not send you further reminders unless you opt in again.

Children

Our WhatsApp messaging is intended for business communications with adults. It is not directed to children under 13 (or under 16 where local law sets a higher age), and we do not knowingly collect information from them. If you believe a child has sent us information, contact us and we will delete it.

International users

Jafran Group LLC operates in the United States and Mexico. If you message us from outside the United States, your information will be transferred to and stored in the United States, where data protection laws may differ from those in your country. We handle your information as described in this policy wherever you are located.

Related documents

• User Data Deletion Instructions
• SMS Privacy Policy (for our SMS text message service)
• SMS Terms & Conditions

Messages you exchange with us on WhatsApp are also subject to WhatsApp’s own terms and privacy policy.

Changes to this policy

We may update this Privacy Policy from time to time. The effective date above will be revised when material changes are published to this page.

Contact us

If you have questions about this Privacy Policy or how we handle your information, contact us: