QeloWhatsApp

Legal

Privacy Policy

This policy explains how Qelo (“we”, “us”) handles personal information processed through the Qelo WhatsApp Portal at this domain.

What we collect

  • Account details — the name, email address and password (stored only as a salted hash) of each person who signs in, and the business workspace they belong to.
  • Contacts a business uploads— the names and WhatsApp numbers of the business’s own customers, together with a record of whether and how each of them agreed to receive messages. This data belongs to the business that uploaded it; we process it only to deliver the messages that business sends.
  • WhatsApp Business Account details— when a business administrator connects a WhatsApp Business Account through Meta’s Embedded Signup, we store the business name, WhatsApp Business Account ID, phone number ID and displayed phone number, together with an access token that Meta issues for the assets the administrator explicitly shared.
  • Message metadata — recipient numbers, template names, message IDs and delivery statuses for messages sent through the portal.
  • Webhook events — event notifications Meta delivers about connected accounts (message statuses, template review outcomes, account updates).

How we use it

This information is used solely to provide the service: connecting WhatsApp Business Accounts, sending messages the business initiates, managing message templates and contact lists, and showing delivery status. We do not sell personal information, and we do not use it for advertising.

Storage and security

Data is stored with our hosting and database providers (Vercel and Neon). Access tokens are encrypted at rest and passwords are stored only as salted hashes. Each business has its own workspace, and every request is checked against the signed-in user’s membership of that workspace — one business cannot see another’s numbers, contacts or messages.

Sharing

Data is shared with Meta Platforms as necessary to operate WhatsApp Business services, and with our infrastructure providers listed above. We do not share it with anyone else.

Your rights and deletion

You may request access to, correction of, or deletion of your data at any time — see the data deletion page or contact us via qelo.co.za. This service is operated from South Africa and is subject to the Protection of Personal Information Act (POPIA).