Legal
Privacy Policy
How Youver collects, uses, protects, and deletes your data — including Meta, Facebook Login, and WhatsApp Business Platform integrations.
1. Introduction
Youver, Inc. ("Youver", "we", "us", or "our") operates the Youver platform, a WhatsApp Business management service that helps businesses automate messaging, manage conversations, run marketing campaigns, build flows, and analyze performance (the "Service").
This Privacy Policy explains how we collect, use, disclose, store, and protect personal information when you visit our website, create an account, connect a WhatsApp Business Account through Meta's Embedded Signup, or otherwise use the Service.
By using the Service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree, please do not use the Service.
Data controller: Youver, Inc.
Contact: privacy@youver.com
Privacy Policy URL: https://youver.com/privacy-policy
2. Information we collect
2.1 Information you provide directly
- Account registration details (name, email address, password, company name)
- Billing and subscription information (processed by our payment providers)
- Support requests, feedback, and communications with our team
- Configuration data for chatbots, templates, flows, and campaigns
- Team member invitations and role assignments within your workspace
2.2 Information collected through Meta / Facebook Login & Embedded Signup
When you connect your business through Meta's Facebook Login for Business or WhatsApp Embedded Signup, we may receive:
- Authorization codes and access tokens (stored securely on our servers only)
- WhatsApp Business Account (WABA) ID and business phone number ID
- Meta Business Portfolio / business asset identifiers
- Permissions granted to our application, including
whatsapp_business_managementandwhatsapp_business_messaging - Basic profile information associated with your Meta business account, as permitted by Meta and your authorization
We do not receive your Meta or Facebook password. Authentication is handled entirely by Meta. For information about how Meta processes your data, see Meta's Privacy Policy.
2.3 WhatsApp Business Platform data
When you use the Service to manage WhatsApp communications, we process data on your behalf as a service provider, which may include:
- Customer phone numbers and WhatsApp profile names
- Message content (inbound and outbound), media, and delivery status
- Template messages, quick replies, and flow responses
- Conversation metadata, timestamps, and agent assignment data
- Analytics such as delivery rates, read rates, and campaign performance
You are responsible for ensuring you have a lawful basis to collect and process your customers' data and for providing appropriate privacy notices to your end users.
2.4 Information collected automatically
- Device and browser type, operating system, and language preferences
- IP address, approximate location (derived from IP), and referral URLs
- Log data, including pages visited, features used, and error reports
- Cookies and similar technologies (see Section 2.5)
2.5 Cookies and similar technologies
We use essential cookies to operate the Service, remember preferences, and maintain security. We may use analytics cookies to understand usage and improve the platform. You can control non-essential cookies through your browser settings. Disabling cookies may limit certain features.
3. How we use information
We use personal information to:
- Provide, operate, maintain, and improve the Service
- Authenticate users and connect WhatsApp Business Accounts via Meta APIs
- Send, receive, route, and store WhatsApp messages on your instructions
- Process subscriptions, invoices, and account administration
- Provide customer support and respond to inquiries
- Monitor performance, detect fraud, abuse, and security incidents
- Comply with legal obligations and enforce our terms
- Send service-related communications (you may opt out of marketing emails)
Legal bases (EEA/UK users): We process personal data based on contract performance, legitimate interests (security, product improvement), consent where required, and legal obligation.
4. Meta, Facebook & WhatsApp disclosures
Youver integrates with Meta platforms as an official Meta Business Partner technology provider. This section is provided to meet Meta Platform Terms and WhatsApp Business Platform requirements.
- What we access: WhatsApp Business Account assets, phone numbers, message templates, messaging capabilities, and related business settings that you explicitly authorize through Embedded Signup or account connection.
- Why we access it: To deliver the Service you request — including inbox management, automation, campaigns, flows, analytics, and integrations.
- How we store it: Access tokens and credentials are stored using industry-standard encryption and are never exposed in client-side code or public responses.
- Revoking access: You may disconnect Youver from your Meta Business account at any time via Meta Business Settings or by following our data deletion instructions below.
Meta is an independent data controller for data processed through its own services. Our use of Meta APIs is subject to the Meta Platform Terms and WhatsApp Business Terms.
6. Data retention
We retain personal information for as long as your account is active or as needed to provide the Service. After account closure or a verified deletion request, we delete or anonymize personal data within 30 days, except where retention is required for:
- Legal, tax, or regulatory obligations
- Dispute resolution and enforcement of agreements
- Encrypted backup systems (purged within 90 days)
- Aggregated or de-identified analytics that cannot identify you
WhatsApp message data retention may be configurable within your workspace settings. You are responsible for configuring retention in accordance with your own legal obligations.
7. Security
We implement administrative, technical, and organizational measures designed to protect personal information, including:
- Encryption in transit (TLS) and at rest for sensitive credentials
- Role-based access controls and audit logging
- Server-side storage of Meta App Secret and access tokens
- Regular security reviews and vulnerability management
- Employee access limited to personnel with a legitimate need
No method of transmission or storage is 100% secure. If you believe your account has been compromised, contact us immediately at support@youver.com.
8. Your rights
Depending on your location, you may have the right to access, correct, delete, restrict, or object to processing of your personal information, and to data portability. You may also withdraw consent where processing is consent-based.
To exercise these rights, email privacy@youver.com with the subject line "Privacy Rights Request". We will verify your identity and respond within the timeframe required by applicable law (typically 30 days).
You may lodge a complaint with your local data protection authority if you believe our processing violates applicable law.
9. User data deletion instructions
This section satisfies Meta's requirement for a publicly accessible User Data Deletion policy. Data Deletion Instructions URL: https://youver.com/privacy-policy#user-data-deletion
9.1 Who can request deletion
Any individual whose personal data is processed by Youver may request deletion, including:
- Account holders and workspace administrators
- Team members added to a Youver workspace
- Users who connected a Meta / Facebook / WhatsApp Business account to our app
- End customers whose data was stored in your workspace (requests may be routed through the business that collected the data)
9.2 How to request deletion of your Youver account data
Choose one of the following methods:
Option A — Email request (recommended)
- Send an email to privacy@youver.com from the email address associated with your account.
- Use the subject line: "Data Deletion Request — Youver"
- Include: your full name, company name (if applicable), registered email, and WhatsApp Business phone number (if connected).
- We will confirm receipt within 3 business days and complete deletion within 30 days, unless a longer period is required by law.
Option B — In-product deletion
- Log in to your Youver account at app.youver.com
- Navigate to Settings → Account → Delete account
- Confirm deletion when prompted
If in-product deletion is not yet available for your account, use Option A.
9.3 How to remove Youver from your Meta / Facebook account
To revoke Youver's access to your Meta business assets and trigger deletion of Meta-derived tokens on our side:
- Go to Meta Business Settings
- Select Integrations or Connected apps
- Find Youver in your connected apps list
- Select Remove or Revoke access
- Email privacy@youver.com so we can complete deletion of associated tokens and cached Meta data from our systems
Alternatively, visit Facebook Apps and Websites settings to remove the app from your personal Facebook account if applicable.
9.4 What data will be deleted
Upon a verified deletion request, we will delete or anonymize:
- Your account profile, credentials, and workspace settings
- Meta / WhatsApp access tokens and authorization data
- Connected WABA IDs, phone number IDs, and integration configurations
- Chatbot, template, flow, and campaign configurations you created
- Conversation history and message content stored in your workspace
- Analytics and logs linked to your account (subject to backup retention below)
9.5 What may be retained
- Information required by law (e.g., billing records for tax purposes)
- De-identified or aggregated data that cannot reasonably identify you
- Data in encrypted backups for up to 90 days, then permanently purged
9.6 Deletion timeline & confirmation
- Acknowledgment: Within 3 business days of your request
- Primary deletion: Within 30 days of identity verification
- Backup purge: Within 90 days
- Confirmation: We will email you when deletion is complete, unless we are legally prohibited from doing so
9.7 End-customer data (your customers' WhatsApp users)
If you are an end user messaging a business that uses Youver, your personal data is controlled by that business. Please contact the business directly to request deletion. If you need assistance identifying the data controller, email privacy@youver.com and we will help route your request.
10. International transfers
We may process and store information in countries other than your own. Where required, we use appropriate safeguards such as Standard Contractual Clauses approved by the European Commission or equivalent mechanisms to protect cross-border transfers.
11. Children's privacy
The Service is not directed to individuals under 16 (or the minimum age in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have collected data from a child, contact privacy@youver.com and we will delete it promptly.
12. Regional privacy rights
12.1 European Economic Area (EEA) & United Kingdom
You have rights under the GDPR/UK GDPR as described in Section 8. Our legal bases for processing are listed in Section 3.
12.2 California (CCPA/CPRA)
California residents have the right to know, delete, correct, and opt out of the "sale" or "sharing" of personal information. We do not sell personal information. To submit a request, email privacy@youver.com with "California Privacy Request" in the subject line.
12.3 Other regions
We comply with applicable local privacy laws. Contact us to learn about rights specific to your jurisdiction.
13. Changes to this policy
We may update this Privacy Policy from time to time. We will post the revised version at https://youver.com/privacy-policy and update the "Last updated" date. Material changes will be notified via email or in-app notice where required by law. Continued use after changes constitutes acceptance.
14. Contact us
For privacy questions, data subject requests, or Meta app review inquiries, contact:
- Youver, Inc.
- Privacy & data deletion: privacy@youver.com
- General support: support@youver.com
- Privacy Policy: https://youver.com/privacy-policy
- Data Deletion Instructions: https://youver.com/privacy-policy#user-data-deletion