Privacy Policy

This Privacy Policy explains how Migrafy ("Migrafy", "we", "us") collects, uses, and protects personal data when you visit our website or use our WhatsApp commerce automation platform (the "Service").

By using the Service you agree to the practices described here. If you do not agree, please do not use the Service.

We collect the following categories of information:

• Contact details you give us — name, email address, company name, and any message you submit through our demo request form.
• Business account data — the WhatsApp Business number you connect, your product catalog, and your store or integration settings.
• Conversation data — messages exchanged between your customers and your WhatsApp number that are processed to deliver automations, orders, and support handoffs.
• Order data — products, quantities, totals, and fulfillment status generated by orders placed through WhatsApp.
• Usage and device data — pages viewed, approximate location, browser and device type, collected through cookies and analytics.

We use personal data to:

• Provide, operate, and maintain the Service;
• Deliver automations such as order confirmations, payment links, shipping updates, and support replies;
• Route conversations to human agents when escalation is needed;
• Respond to demo requests and support enquiries;
• Analyze usage to improve features, reliability, and performance;
• Comply with legal obligations and enforce our terms.

The Service operates on the official WhatsApp Business Platform. When you use Migrafy, message delivery is handled by Meta Platforms in accordance with their own terms and privacy policy. We also rely on third-party providers for hosting, email delivery, analytics, and payment processing.

These providers process data only on our instructions and under appropriate contractual safeguards. We do not sell personal data.

Migrafy supports WhatsApp Coexistence, meaning automations run on the same number your team already uses. Conversations may therefore be handled by automated flows, by your human agents, or by both. Message content is processed to operate these flows and is made available to the agents you authorize.

You remain the controller of your customers' data. You are responsible for informing your customers about how their messages are handled and for obtaining any consent required in your jurisdiction.

We retain personal data for as long as your account is active or as needed to provide the Service. After account closure we delete or anonymize data within a reasonable period, unless a longer retention period is required by law or to resolve disputes.

We apply technical and organizational measures designed to protect personal data against unauthorized access, loss, or disclosure — including encryption in transit, access controls, and audit logging. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Depending on where you live, you may have the right to access, correct, delete, restrict, or object to the processing of your personal data, and to request a portable copy. To exercise these rights, contact us at the address below. You may also lodge a complaint with your local data protection authority.

Your data may be processed in countries other than your own. Where data is transferred outside your jurisdiction, we use appropriate safeguards such as standard contractual clauses.

Our website uses cookies and similar technologies for essential site functionality and analytics. You can control cookies through your browser settings; disabling them may affect how parts of the site work.

The Service is intended for businesses and is not directed to children under 16. We do not knowingly collect personal data from children.

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above. Material changes will be communicated through the Service or by email.

Questions about this policy or your personal data? Email us at [email protected].