Privacy Policy

1. Introduction

This Privacy Policy explains how Ona.Chat collects, uses, and protects your personal data when you use our services.

2. Data Controller

3. Data We Collect

• Identification Data: Name, email, phone number
• Billing Data: Payment details (processed by third-party providers like Stripe)
• Login Data: Username, password
• WhatsApp Business Data: Messages sent and received via WhatsApp, phone numbers, multimedia content (images, documents, videos), business profile information, message templates
• Usage Data: Interactions, preferences, activity logs
• Cookies: We use cookies for analytics and improving user experience

4. How We Use Your Data

• To provide and maintain our services
• To manage your account and subscription
• To process payments and invoices
• To facilitate WhatsApp Business communications between businesses and their customers
• To create and manage WhatsApp message templates
• To communicate with you (support, updates, marketing if consented)
• To ensure platform security
• To provide aggregated and anonymous analytics of service usage to improve the application

5. Legal Basis for Processing

We process data based on:

• Consent
• Contractual necessity
• Legal obligations
• Legitimate interests

6. Data Sharing

We share data with:

• Payment processors: Stripe
• Hosting and infrastructure providers: Railway (servers located in the Netherlands)
• Meta/WhatsApp: For WhatsApp Business messaging services
• Legal authorities: When legally required

These providers act as data processors on our behalf and are contractually obligated to protect your data.

7. International Transfers

Our servers are located in the Netherlands (within the European Union). Some data processors may be located outside the EU. In such cases, we ensure appropriate safeguards are in place according to GDPR, including standard contractual clauses approved by the European Commission.

8. Data Retention

We retain personal data as long as necessary for service provision and legal compliance. After account deletion, data may be kept for a limited period for legal or security reasons.

9. Your Rights

You have the right to:

• Access your data
• Request correction or deletion
• Restrict or object to processing
• Data portability
• Withdraw consent at any time
• File a complaint with the Spanish Data Protection Agency (AEPD)

To exercise your rights, email us at rafael@ona.chat

10. Security

We implement appropriate technical and organizational measures to protect your data against unauthorized access, loss, alteration, or disclosure. This includes encryption, access controls, and regular security audits.

11. WhatsApp Business API Usage

Ona uses the WhatsApp Business API to facilitate communications between businesses and their customers. Data processed through WhatsApp is subject to both this Privacy Policy and Meta/WhatsApp's Privacy Policy.

12. Changes to This Policy

We may update this Privacy Policy occasionally. Changes will be posted on our website and, in case of substantial changes, will be notified via email. We recommend reviewing this policy periodically.

13. Contact

For any questions, concerns, or to exercise your data protection rights, contact us at: