Privacy Policy
Introduction
We respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how information is collected, used, and safeguarded when you visit our website, use our mobile applications, or interact with our products and services.
Our website and applications are designed to provide information about our software products and services and to enable users and potential customers to communicate with us.
Some of our products connect to third-party messaging platforms on behalf of our business customers. In particular, **Expert System** connects a business’s own WhatsApp number to the WhatsApp Business Platform so that the business can send and receive messages through our software while continuing to use the WhatsApp Business app on their phone. Where we provide that service, we process message data belonging to that business and to the people who message them. The section WhatsApp Business Platform Services below explains this in detail, and it takes precedence over the general statements in this policy wherever the two differ.
Information We Collect
We collect limited personal information that you voluntarily provide to us. This may include:
- Full name
- Business name
- Email address
- Phone number
- Message content submitted through contact forms, support requests, or email communications
For customers who use our WhatsApp Business Platform services, we additionally collect the information described under WhatsApp Business Platform Services below, including access credentials issued to us by Meta, message content, and contact information.
We do not collect:
- Location data
- Payment card information (payments, where applicable, are handled by our payment provider)
- Push notification data
- Behavioural tracking or advertising data
How We Use Your Information
The information you provide is used for the following purposes:
- Responding to inquiries, support requests, and contact requests
- Providing information about our software products, applications, and services
- Communicating effectively with users and potential customers
- Delivering the products and services our customers have subscribed to, including WhatsApp messaging services
- Keeping our services secure and reliable, including abuse prevention, debugging, and backups
- Improving customer support and service delivery
- Complying with our legal obligations
We do not sell, rent, or share your personal information with third parties for marketing purposes. We do not use our customers’ message data to train artificial intelligence or machine learning models, and we do not use it to build advertising profiles.
WhatsApp Business Platform Services
This section applies where a business uses our software to connect a WhatsApp number to the WhatsApp Business Platform.
The two roles we play
If you are one of our business customers, you connected your WhatsApp number and use our software. For your account information we are the controller — we decide why and how it is processed.
If you messaged a business that uses our software, you are not our customer and you have no account with us. Your messages, phone number, and profile name are stored on our systems only because that business asked us to handle their WhatsApp conversations. For that information the business is the controller and we act as their processor — we follow their instructions, we do not decide what is done with it, and we do not use it for our own purposes.
If you are in the second group, please direct requests about your information to the business you messaged. They can act on your request themselves. If you do not know who to contact, write to us at expert@analiz-systems.com and we will pass your request to the relevant business.
What we receive
When a business connects a number, and only to the extent they enable it, we receive and store:
- Access credentials issued to us by Meta, which allow us to send and receive messages on the business’s behalf
- The business’s Meta Business Portfolio ID, WhatsApp Business Account ID, phone number ID, and display name
- Message content in both directions, including messages the business sends by hand from the WhatsApp Business app, which WhatsApp mirrors to our software
- Chat history of up to 180 days (6 months) preceding the connection, only if the business explicitly consents on their phone. They may decline, and the connection still works
- The business’s contact list — names and phone numbers from the phone book on their device — only if the business enables sharing
- Phone numbers and WhatsApp profile names of the people who message the business, used to identify conversations
- Delivery information such as sent, delivered, read, failed, and timestamps
We do not receive WhatsApp group chats, voice or video calls, channels, catalog or order data, or messages sent from unsupported companion devices. These remain in the WhatsApp Business app and never reach us.
Messages are protected in transit by WhatsApp’s encryption up to the point of delivery to the business. Once delivered to a business using the WhatsApp Business Platform, message content is available to that business and to us as their processor. It is not end-to-end encrypted at rest on our systems.
Consent and responsibility
Our business customers are responsible for obtaining the opt-in that WhatsApp requires before messaging their customers, and for having a lawful basis for their messaging.
Mobile Applications
Our mobile applications are designed to operate with minimal data collection. Unless otherwise stated within a specific application, our applications do not collect:
- Precise location information
- Payment information
- Contacts, photos, or other personal content stored on your device
- Push notification data
- Behavioral tracking data
Any information collected through our applications is limited to what is necessary to provide the application’s functionality and support services.
Cookies and Tracking Technologies
Our website does not use cookies for advertising, analytics, or behavioral tracking purposes.
Basic technical cookies used by hosting or infrastructure providers may be necessary to ensure the secure and proper operation of the website and related services.
Internet Usage and Location Services
Our website and applications:
- Do not monitor your internet usage
- Do not use location services
- Do not collect GPS-based or IP-based location data for tracking purposes
Who We Share Information With
We share personal information only with providers who help us deliver our services, and only under a written agreement containing confidentiality and security obligations:
- Meta Platforms / WhatsApp, for delivering and receiving messages
- Cloud hosting and database providers, for running our software and storing data
- Error monitoring and logging providers, for reliability and diagnostics
- Payment providers, for billing where applicable
- Professional advisers and competent authorities, where legally required
A current list of these providers is available on request from expert@analiz-systems.com. Business customers are notified at least 30 days before we engage a new provider that processes their data.
International transfers. Our production systems and data are hosted in the European Union. We are established in Gazimağusa, Kıbrıs, which is outside the European Economic Area, so access by our personnel is an international transfer. Where personal information is transferred outside the United Kingdom or the European Economic Area, we rely on the European Commission’s Standard Contractual Clauses together with appropriate technical and organisational safeguards. A copy is available on request.
How Long We Keep Information
- Account details — for the life of the account, then 12 months
- Access credentials issued by Meta — until the customer disconnects or revokes them, then deleted within 7 days
- Message content, chat history, and contact lists — for as long as the customer’s account is active, or until they delete it. Business customers may delete individual conversations at any time
- Support correspondence — 24 months
- Server and security logs — 90 days
- On account closure — all personal information is deleted or irreversibly anonymised within 30 days, except where the law requires us to retain it
- Backups — deleted information may remain in encrypted backups for up to a further 35 days before those backups are overwritten
Data Security
We implement appropriate technical and organisational measures to protect your personal information against unauthorized access, loss, misuse, alteration, or disclosure. These include:
- Encryption of data in transit, and encryption of stored data at rest
- Access credentials encrypted at rest, with the encryption keys held separately from the database
- Cryptographic verification of every message notification we receive from WhatsApp before it is processed; unverified requests are rejected
- Role-based access control, with access to customer message data limited to named personnel and recorded
- Multi-factor authentication on administrative accounts, review of code changes, and regular testing of backup restoration
No system is perfectly secure. If a security incident affects personal information, we will notify affected customers without undue delay, and the competent authorities where required.
Third-Party Links
Our website or applications may contain links to third-party websites or services. We are not responsible for the privacy practices, policies, or content of those third-party services.
Using our WhatsApp Business Platform services also means using WhatsApp, which is governed by Meta’s own terms:
- WhatsApp Business App Privacy Policy — https://www.whatsapp.com/legal/business-app-privacy-policy
- WhatsApp Legal Resources — https://www.whatsapp.com/legal
Your Rights
Subject to applicable laws, you may have the right to:
- – Request access to your personal information
- – Request correction of inaccurate information
- – Request deletion of your personal information
- – Request restriction of, or object to, processing
- – Request a copy of information you provided to us, in a portable format
- – Withdraw consent at any time, without affecting processing carried out beforehand
- – Contact us regarding any privacy-related concerns
Write to expert@analiz-systems.com to exercise any of these rights. We respond within 30 days and we do not charge a fee. Where we cannot fulfil a request — for example where the law requires us to retain information, or where we hold it only on behalf of a business customer — we explain which parts and why.
If you are in the European Economic Area or the United Kingdom, you may also lodge a complaint with the supervisory authority in your country of residence or workplace.
Deleting Your Data
If you are a business using our services
Self-service. Sign in and go to Settings → Delete account. This permanently deletes your account, the details of your connected WhatsApp Business Account, the access credentials we hold, all stored conversations, and any imported contacts.
By email. Write to expert@analiz-systems.com from the address registered on your account, with the subject “Data deletion request”. We verify ownership of the account and then delete.
By telephone. Call +90 392 444 39 77 and ask for a data deletion request. We confirm the request in writing before acting on it.
Timing. Deletion completes within 30 days. Encrypted backups containing the deleted data are overwritten within a further 35 days. We confirm in writing once deletion is complete.
Disconnecting without deleting. To stop the WhatsApp connection while keeping your data, disconnect in the WhatsApp Business app under Settings → Account → Business Platform. Numbers connected in this way can only be disconnected from the app itself. Once we detect the disconnection we stop sending immediately and delete the stored access credentials within 7 days.
If you messaged a business that uses our services
We hold your messages on behalf of that business, not for ourselves.
- Contact the business you messaged and ask them to delete your conversation. They can do this themselves.
- If you cannot reach them, or do not know which business it was, email expert@analiz-systems.com with the WhatsApp number you messaged from and, if you know it, the number you messaged. We will identify the business and pass your request on.
We will not delete a business’s conversation records without their instruction, except where the law requires us to.
What gets deleted, and what may be kept
Deleted: account and contact details; access credentials and WhatsApp Business Account identifiers; all message content including imported chat history; imported contact lists; delivery information.
Retained: records we are legally required to keep, such as billing and tax records, for the statutory period; security logs for up to 90 days; and irreversibly anonymised statistics that cannot identify anyone.
We never charge a fee for deletion. If we cannot fulfil a request in full, we tell you which parts and why.
Children
Our services are intended for businesses. They are not directed at children, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, contact us and we will delete it.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page, and the updated version will become effective upon publication. Where a change materially affects our business customers, we notify them by email or within our software at least 30 days in advance.
Contact Us
If you have any questions regarding this Privacy Policy or the processing of your personal information, please contact us:
Expert Business Solutions
İsmet İnönü Blv No:103, Gazimağusa 99450, Kıbrıs
Email: expert@analiz-systems.com
Telephone: +90 392 444 39 77
Website: https://expertsolutionscy.com