Legal

Privacy Policy

Last updated: October 2026 · Versão em português

Summary: OneSendz collects and uses your data to provide its WhatsApp customer communication and marketing platform. We never sell your data. You can access, correct and delete your information at any time. This policy complies with Brazil's General Data Protection Law (LGPD, Law 13.709/2018) and the requirements of the Meta WhatsApp Business Platform.

This is an English translation of our Privacy Policy, provided for convenience. If there is any difference between versions, the Portuguese version prevails.

1. Who we are

OneSendz is a SaaS platform for WhatsApp customer communication and marketing, developed and operated by Impulsionaê (impulsionae.com). We are an official Meta partner and use exclusively the WhatsApp Business Platform API.

For privacy matters, contact us at: privacidade@onesendz.com

2. Data we collect

We collect data in two ways:

2.1 Data you provide directly (platform users):

Name, email and phone number to create an account
Company name, tax ID (CNPJ) and billing information
The connected WhatsApp Business phone number
Message templates created on the platform
Contact lists uploaded for campaigns

2.2 Data collected automatically:

IP address and access data (system logs)
Session cookies and usage preferences
Platform usage metrics (pages visited, features used)
Message delivery and read data (provided by the Meta API)

3. How we use your data

To provide, operate and improve the platform's services
To process WhatsApp and email campaigns and automations
To generate performance reports by branch and campaign
To send transactional communications (confirmations, alerts, invoices)
To comply with legal and contractual obligations
To prevent fraud and keep the platform secure

    We never sell, rent or share your personal data with third parties for marketing purposes without your explicit consent.
  

4. Use of the WhatsApp API (Meta)

OneSendz uses the WhatsApp Business Platform API, provided by Meta Platforms, Inc. To operate our platform:

Message data travels through Meta's servers under the WhatsApp Business Terms of Service
Message templates are submitted to and approved directly by Meta
Meta may retain message metadata under its own Privacy Policy
By using OneSendz, you also accept Meta's terms that apply to the WhatsApp Business API
The end recipients of your campaigns must have opted in to receive communications via WhatsApp, as required by Meta

5. Artificial intelligence, API and connectors

OneSendz offers artificial intelligence features and lets you connect your account to other systems:

Platform AI features: when you turn on automated replies, audio transcription or conversation classification, the necessary content of those conversations is processed by contracted artificial intelligence providers, only to run the feature
API and connectors (MCP): you can connect your account to third-party AI assistants, such as Claude or ChatGPT, or to your own system, using an API key or the Connect button. Only account administrators and managers can do this, choosing what the connection may do (view data, change data and send messages) and, optionally, limiting the connection to one branch
What the assistant receives: only the data it requests to fulfill your request, such as a list of contacts or a conversation. From then on, that data is also handled by the assistant's provider, under its own terms and privacy policy
What we store: we do not receive or store your conversations with the assistant. We store keys and access tokens only in protected (hashed) form, plus a record of each call (tool used, result and time) for 90 days, for security and auditing
Sending: messages sent through an assistant follow the same rules as the dashboard (opt-in, the 24-hour window and approved templates) and are only sent after the person using the assistant confirms
Control: you can view and revoke any key or connected app at any time in Settings > Integrations. Revocation takes effect immediately

6. Data sharing

We may share data only in the following situations:

Meta Platforms: required to operate the WhatsApp Business API
Infrastructure providers: cloud services (hosting, database) under confidentiality agreements
Artificial intelligence providers: only for the AI features you turn on, as described in section 5
AI assistants and systems you connect: only the data they request, within the permissions you granted, as described in section 5
Payment processing: billing data with PCI-DSS certified payment providers
Legal compliance: when required by law, court order or competent authority
Headquarters/Franchisor: branch performance data is visible to users with access permission in the same organization

7. Opt-in and WhatsApp communications

OneSendz requires all platform users to obtain explicit consent (opt-in) from their contacts before sending marketing messages via WhatsApp. This is required by Meta and by Brazilian law (LGPD).

By using our platform to send campaigns, you declare that you:

Have obtained valid consent from each recipient to receive messages
Offer an opt-out mechanism in all communications
Comply with the WhatsApp Business Policy

8. Data security

We adopt technical and organizational measures to protect your data:

Encrypted communication via HTTPS/TLS across the platform
Data access restricted by authentication and permission controls
Continuous security monitoring and access logs
Regular backups with secure retention
Granular access control by user, branch and organization

9. Data retention

We keep your data while your account is active. After the account is closed:

Account data is anonymized or deleted within 90 days
Billing data is retained for 5 years (tax obligation)
Security logs are retained for 12 months
You can request earlier deletion through the privacy email

While the account is active, conversation media files (audio, photos, videos and documents) are kept for 180 days, and API and connector usage records for 90 days.

10. Your rights (LGPD)

Under Brazil's General Data Protection Law (LGPD, Law 13.709/2018), you have the right to:

Confirmation and access: know whether we process your data and obtain a copy
Correction: correct incomplete, inaccurate or outdated data
Anonymization or deletion: request blocking or deletion of unnecessary data
Portability: receive your data in a structured format
Withdrawal of consent: withdraw your consent at any time
Objection: object to processing in the cases provided by law

To exercise these rights, contact: privacidade@onesendz.com

11. Cookies

We use essential cookies for the platform to work (authentication, session) and analytics cookies to understand product usage. You can manage cookies in your browser settings.

12. International data transfers

Some data may be processed outside Brazil (for example, Meta's servers in the United States). We ensure these transfers take place with appropriate safeguards, as provided by the LGPD and Meta's policies.

13. Changes to this policy

We may update this policy from time to time. We will notify users of significant changes by email or by a notice on the platform at least 30 days in advance.

14. Contact

For privacy matters, contact us:

OneSendz is a platform by Impulsionaê.