Privacy Policy
Last updated: 23 June 2026
This Privacy Policy explains how Klaros ("Klaros", "we", "us") collects, uses, stores, and protects information when you use our WhatsApp messaging and CRM software (the "Service"). We designed the Service so that your contacts and conversations remain yours, and so that messaging runs on Meta's official WhatsApp Business Platform — not a workaround.
You bring your own WhatsApp Business Account (WABA) and pay Meta directly for messaging. Klaros never marks up your messaging and never sells your data.
1. Information we collect
- Account information — the email address and credentials you use to register, and basic profile/settings you enter.
- Contacts you provide — the contact records you import or sync (such as names, phone numbers, tags, and notes) so the Service can manage conversations and consent.
- Message content and metadata — the inbound and outbound WhatsApp messages you send and receive through your connected number, plus delivery status, timestamps, and the conversation/billing category Meta reports.
- Consent records — opt-in and opt-out events (including the message that evidenced them) so we can enforce who may be messaged.
- Technical and usage data — log data needed to operate the Service securely (e.g. request metadata, error and audit logs, correlation IDs).
2. How we use information
- To provide the Service: deliver and receive messages, build your inbox, manage contacts, run campaigns, and show delivery and cost analytics.
- To enforce compliance: honor opt-outs, respect the WhatsApp 24-hour service window, and require approved templates where Meta requires them.
- To secure and maintain the Service: prevent abuse, debug, and keep an audit trail.
- To communicate with you about your account, security, and material changes.
We do not sell your data, and we do not use the content of your customer conversations to advertise to you or to third parties.
3. WhatsApp and Meta
Messaging is delivered through the official WhatsApp Business Platform operated by Meta Platforms, Inc. When you send or receive messages, Meta processes that traffic as part of delivering the WhatsApp service and applies its own terms and policies. Your use of WhatsApp messaging is also subject to the WhatsApp Business Messaging Policy and Meta's terms. Klaros is not affiliated with or endorsed by Meta; WhatsApp is a trademark of Meta Platforms, Inc.
4. Service providers (subprocessors)
| Provider | Purpose |
|---|---|
| Meta Platforms, Inc. | WhatsApp message delivery (official Business Platform) |
| Cloudflare, Inc. | Application hosting, database, and object storage |
We share only what is necessary for these providers to perform their function, and we do not authorize them to use your data for their own purposes.
5. Storage and security
Access tokens and other sensitive credentials are encrypted at rest. Data is isolated per tenant, inbound webhooks are signature-verified, and media you send is served from private storage behind short-lived signed links. See our Security page for details. No system is perfectly secure, but we apply industry-standard safeguards appropriate to the data we handle.
6. Data retention
We retain your account data and messaging records for as long as your account is active and as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. You can export or delete your data at any time (see below). When you delete data or close your account, we remove it from active systems within a reasonable period, subject to legal retention requirements.
7. Your rights and choices
- Access & export — export your full contact book and records at any time, in standard formats, from within the Service.
- Deletion — request deletion of your contacts or your account; we provide a data-erasure path and will action verified requests.
- Correction — update inaccurate account information in your settings.
- Consent — your recipients can opt out at any time (e.g. by replying STOP), and we record and enforce it automatically.
Depending on where you live, you may have additional rights under laws such as the GDPR or similar regulations. To exercise any right, contact us using the details below.
8. International data transfers
Our providers may process data in regions outside your own. Where required, we rely on appropriate safeguards for such transfers.
9. Children
The Service is intended for businesses and is not directed to children. We do not knowingly collect personal information from children.
10. Changes to this policy
We may update this policy from time to time. We will revise the "Last updated" date above and, for material changes, take reasonable steps to notify you.
11. Contact us
Questions or requests about this policy or your data? Reach us via our Contact page or at hello@tryklaros.com.