Privacy Policy

1. Information we collect

We may collect the following categories of information:

• Contact data: name, email, phone number, company.
• Business assets: WhatsApp Business numbers, Meta Business Manager IDs, Facebook Pages, Instagram accounts.
• Technical data: access tokens, app IDs, webhook configuration, automation logs, n8n workflow metadata.
• Conversation data: messages exchanged with our AI assistant Dam and with end-user chatbots we operate on behalf of clients.
• Usage data: pages visited, delivery rates, engagement metrics, technical errors (via Google Analytics / GTM).
• Approximate location: city/country derived from IP for personalization (not stored).

2. How we use the information

• Configure and operate automated flows on WhatsApp, Facebook Messenger and Instagram.
• Manage technical integrations with Meta APIs, OpenAI, Resend, Flowise and tools such as n8n.
• Provide technical support, monitoring and continuous improvement.
• Respond to inquiries and deliver the analyses you request.
• Comply with legal obligations and Meta Platform policies.

3. WhatsApp Business API & Meta Platforms

iADam acts as a Tech Provider / Solution Provider on top of the WhatsApp Business API operated by Meta Platforms Ireland Limited. When we operate WhatsApp on behalf of a client business, we process the phone numbers, profile names and message content of end-users who initiate or receive conversations. This data is processed solely to deliver the messaging service requested by the client business, in accordance with the WhatsApp Business Solution Terms and the Meta Platform Terms. We do not sell end-user data, we do not use it for advertising, and we do not share it with third parties beyond the sub-processors strictly required to deliver the service.

4. Data sharing and sub-processors

We do not sell or share personal data with third parties, except:

• Meta Platforms Ireland Limited — to operate WhatsApp Business API, Facebook Messenger and Instagram messaging.
• OpenAI — for AI processing of assistant responses.
• Resend — transactional email delivery.
• Google (GA4 / GTM) — anonymized analytics.
• Hosting and infrastructure providers under confidentiality agreements.
• When required by law or competent authority.

5. Data retention

We retain personal data only as long as necessary for the purpose collected. WhatsApp and chatbot conversation logs: 30 days unless a longer period is contractually required by the client. Contact form data: until you request deletion. Technical credentials and tokens: only while the engagement is active.

6. Security

• Restricted access to tokens and credentials (least-privilege).
• Per-client segmentation of automation flows.
• Encrypted transport (HTTPS/TLS) and encrypted storage at rest.
• Continuous monitoring of API usage and quality rating.

7. Your rights (GDPR)

You have the right to access, rectify, delete, restrict, port or object to the processing of your personal data, and to withdraw consent at any time. To exercise any of these rights, including deletion of WhatsApp message data, see our Data Deletion page or write to info@iadam.nl. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

8. Cookies

We use essential cookies for site functionality and analytics cookies via Google Tag Manager. You can disable cookies in your browser settings.

9. Changes to this policy

We may update this policy. Material changes will be announced via our website or official channels.

10. Contact

Privacy enquiries: info@iadam.nl — General contact: info@iadam.nl