Privacy Policy — WhatsApp & Meta Platform

1. Data controller and app ownership

Multiversum d.o.o., with registered office in Slovenia, is the data controller for the processing of personal data obtained through the Meta / WhatsApp Business Platform when such data is processed in connection with the WatsappAI Meta developer application (App ID published in Meta for Developers).

Lyntaris is the product and platform brand under which Multiversum provides AI-powered conversational deployments (including kiosk, web, and messaging channels). References to “Lyntaris” on lyntaris.com describe the same product family operated by Multiversum.

Contact for questions and rights: [email protected]
We will respond within 30 days where required by law (e.g. GDPR Art. 12(3)).

2. Meta Platform Data and WhatsApp

When a business uses our integration with the WhatsApp Business Platform (Cloud API), Meta shares Platform Data with us as defined in the Meta Platform Terms (including data related to the WhatsApp Business account, phone numbers, message delivery, and webhooks). We use this data only to provide and improve the messaging service agreed with our business client, in line with Meta Platform Terms and applicable WhatsApp Business policies.

End users who message a business on WhatsApp should also read WhatsApp Business Policy and Meta’s privacy materials for how WhatsApp operates as a channel.

3. Categories of data we process

Depending on configuration, this may include:

• Identifiers: WhatsApp phone numbers or other identifiers provided by Meta in webhooks and API responses.
• Message content: text and, where applicable, media metadata or content that users send to the business number.
• Technical data: delivery statuses, timestamps, and related webhook payloads necessary to operate conversations.
• Configuration and security: technical tokens and credentials used only to authenticate to Meta’s APIs (stored and handled under strict access controls; not used for unrelated purposes).

We do not sell personal data. We do not use Platform Data to train unrelated third-party AI models beyond what our subprocessors’ terms permit for providing the service.

4. Purposes and legal basis

We process the above data to deliver customer support and business messaging initiated by users or businesses on WhatsApp, to operate webhooks and API calls securely, and to troubleshoot and secure the service. Legal basis: performance of a contract with our business client, our legitimate interest in operating a secure service, or consent where required (Art. 6 GDPR), as applicable.

5. Subprocessors and transfers

We use trusted infrastructure providers (for example cloud hosting and network / tunnel services) to receive webhooks and run our systems. They process data on our instructions under Art. 28 GDPR where applicable. Data may be processed in the European Economic Area and, where necessary, in other countries with appropriate safeguards (e.g. Standard Contractual Clauses). A non-exhaustive list may include providers such as Microsoft Azure and Cloudflare; locations follow each provider’s published subprocessor disclosures.

6. Retention

We retain Platform Data only as long as needed to provide the service, meet legal obligations, and resolve disputes. Retention periods may be set per client agreement. You may request erasure where applicable; see our data deletion instructions.

7. Your rights (GDPR)

If you are in the EEA or otherwise protected by GDPR, you may have rights of access, rectification, erasure, restriction, objection, portability, and the right to lodge a complaint with a supervisory authority (e.g. Informacijski pooblaščenec RS in Slovenia). Contact [email protected] to exercise your rights. For step-by-step deletion requests, see our user data deletion instructions.

8. Changes

We may update this page when our integration or legal requirements change. The “Last updated” date at the top will reflect revisions.

9. Contact

Multiversum d.o.o. (Lyntaris / WatsappAI)
Email: [email protected]
General Lyntaris Privacy Policy