Privacy Policy

Last updated: August 23, 2026

This Privacy Policy explains how ORLOGOS LLC — the developer of a WhatsApp messaging and automation platform supported by artificial intelligence ("Platform", "ORLOGOS", "we") — collects, uses, shares, and protects data when the Platform is used by a client organization ("Client", "you") and by the contacts who exchange messages with the Client's WhatsApp number through the Platform.

If you are an end contact who exchanged messages with a business that uses ORLOGOS, that business (the Client) is responsible for the processing of your data. ORLOGOS LLC acts as a technology provider that processes that data on behalf of the Client, to operate the WhatsApp channel the Client contracted.

1. What data we collect

Account data: name, email, and password (stored as a hash, never in plain text) of whoever signs up for the Platform.
WhatsApp conversation data: phone number, public WhatsApp profile name, and message content (text, audio, image, document) exchanged between the contact and the Client's WhatsApp Business number.
Business configuration data: information the Client enters into the Platform to train the automated support (FAQs, business policies, catalogs, message templates).
Technical and usage data: IP address, session identifiers, access and usage logs of the Platform, strictly necessary cookies (session authentication and CSRF protection).
Uploaded media: files (images, audio, documents) sent by contacts or by the Client during use of the product, necessary for support to function.

We do not collect payment data directly — subscription billing is processed by external payment providers, who have their own privacy policies.

2. What we use this data for

Operating the Client's WhatsApp Business channel: receiving, routing, and replying to messages.
Generating automated, AI-assisted replies as configured by the Client, based on conversation content and the training information provided.
Providing the Client a dashboard to view, organize, and reply to conversations (CRM).
Authenticating users, maintaining secure sessions, and preventing misuse of the Platform.
Providing technical support and diagnosing issues.
Complying with legal obligations and WhatsApp Business Platform policies.

We do not use conversation data to serve advertising to end contacts, nor do we sell it to third parties.

3. Who we share data with

Meta / WhatsApp Business Platform: since the messaging channel is WhatsApp, conversation content necessarily passes through Meta's infrastructure, which is also subject to Meta/WhatsApp's own privacy policies.
Technology providers, including artificial intelligence services: when automated replies are enabled, the relevant conversation text is sent to artificial intelligence service providers to generate the reply. These providers may process the data necessary to provide those services in accordance with each provider's applicable terms.
Cloud infrastructure providers: hosting, database, and file storage used to operate the Platform.
Payment providers: only when applicable to billing the Client's subscription.

We do not share data with third parties for third-party marketing or advertising purposes.

4. Cookies and similar technologies

We use only cookies that are strictly necessary for the Platform to function: a session cookie to keep you authenticated and a CSRF (cross-site request forgery) protection cookie. We do not use third-party advertising tracking cookies or social media pixels on our pages.

During the step where you connect your WhatsApp Business number (Embedded Signup), we load a script provided directly by Meta to enable that official connection — that script may set cookies or use storage of its own on Meta's domain, outside our control.

5. Data retention

We retain data while the Client's account is active and for as long as necessary to fulfill legal, contractual, or security purposes. When closing an account, the Client may request deletion of associated data, as described on our Data Deletion page.

6. Security

We adopt reasonable technical and organizational measures to protect data, including encrypted transmission (HTTPS), account-level access control, and logical isolation between distinct client organizations on the Platform. No system is completely free of risk, and we work continuously to reduce vulnerabilities.

7. Your rights

Depending on applicable law, you may have the right to access, correct, port, or request deletion of your personal data. To exercise these rights, contact us at the email below. If you are an end contact who spoke with a business client of ORLOGOS, you may also direct your request directly to that business.

8. Minors

The Platform is intended for businesses and professionals over 18 years old who contract the service. We do not direct the Platform at children.

9. International transfer

The infrastructure hosting the Platform may be located outside the Client's or contact's country. By using the Platform, you acknowledge that data may be processed in other countries, subject to the data protection standards applicable to each provider involved.

10. Changes to this policy

We may update this Privacy Policy periodically. The date at the top of this page indicates the most recent version. Material changes will be communicated to the Client through official contact channels.

11. Contact

Questions about this policy or about how we handle your data can be sent to [email protected]. For other questions about the Platform, use [email protected].

This policy describes how the Platform actually operates at the time of publication. It does not constitute a declared official partnership with Meta, nor does it guarantee freedom from the risk of account blocking or suspension — decisions of that nature are made solely by Meta, in accordance with its own policies.