Privacy Policy
B-Connect (the "Service") is a business messaging platform operated by B.HOSP, Lebanon ("we", "us"). It lets businesses (our "Clients") send and receive WhatsApp messages with their own customers through the WhatsApp Business Platform, from a web portal and from their own systems. This policy explains what personal data the Service processes, why, and the choices available.
1. Our role
For the messages a Client exchanges with its customers, the Client is the data controller and B.HOSP acts as its data processor: we process that data only to provide the Service, on the Client's instructions and under our agreement with the Client. For the accounts of our Clients' staff who use the portal, B.HOSP is the controller.
2. Data we process
- Client account data: business name, user names, contact email, WhatsApp business phone number, WhatsApp Business Account and phone number identifiers, balance and billing records, sign-in and security logs.
- Message data: the phone numbers and WhatsApp profile names of the people a Client communicates with, names given by the Client, the content of messages and files sent and received, message templates, and delivery and read statuses.
- Technical data: IP addresses, browser information and request logs, used to run and secure the Service.
- Requests from Meta: when someone removes the B-Connect app or asks Facebook to delete their data, Meta sends us the app-scoped user identifier of that person; we keep it with the date and the confirmation code of the request, only to handle it and show its status.
We do not process data of Facebook or Instagram users other than what the WhatsApp Business Platform provides for the messaging described above and the requests from Meta listed above. We use the data we receive from Meta only to provide the Service to the Client it belongs to: we do not sell, license or share it for advertising, we do not use it to build profiles of people, for surveillance or to make decisions about eligibility (such as credit, housing or employment), and we do not use it to train artificial intelligence models. The Service is for businesses and is not directed at children.
3. Why we process it
- To send and receive WhatsApp messages on behalf of our Clients and show them in the Client's portal.
- To manage Clients' subscriptions and keep the record of their payments.
- To secure the Service, prevent abuse, and meet legal obligations.
We never sell personal data, and we do not use message content for any purpose other than delivering the Service.
4. Who we share it with
- Meta Platforms (WhatsApp), which carries the messages through the WhatsApp Business Platform, under WhatsApp's own terms and policies.
- Hosting providers that store and run the Service on our behalf (Hostinger International Ltd.).
- When a Client enables it, an SMS gateway used to notify a recipient whose WhatsApp message could not be delivered (the recipient's phone number and the notification text only).
- Authorities, when required by law.
These providers process the data only on our instructions and under confidentiality and security obligations. The data may be stored on servers outside Lebanon, including in the European Union.
5. How long we keep it
- Files attached to messages are deleted automatically after 30 days (or the period agreed with the Client).
- Messages and their statuses are kept while the Client's account is active, so the Client can see its history, and are deleted at the Client's request or when the account is closed.
- Technical request logs, which can include phone numbers and message content, are deleted automatically after 30 days.
- Billing records are kept as long as required by law.
- The record of a deletion or removal request from Meta (identifier, dates, confirmation code) is kept as proof that the request was handled.
6. Security
Data is transmitted over encrypted connections (HTTPS). Access to the portal requires a password; API secrets and passwords are stored only in hashed form; the credentials of the WhatsApp Business Platform are kept as server secrets and never shown in the portal; access to the platform's systems is limited to authorised staff.
7. Your rights
If you exchanged messages with a business that uses the Service, please contact that business first: it decides how your data is used. You can also contact us, and we will forward your request to the business concerned or act on it where we are responsible. You may ask to access, correct or delete your personal data, subject to applicable law, including Lebanese Law No. 81/2018 on electronic transactions and personal data. See also our data deletion instructions.
8. Contact
B.HOSP, Lebanon · Email: privacy@bhosp.com · Website: bhosp.com
9. Changes
We may update this policy. The date at the top shows the latest version.