Our customer relationship management and business communications platform ("we", "us", or "our") is developed and operated by An Info Systems. The platform enables businesses to streamline and manage conversations, customer interactions, and contact workflows through integrations with official communication channels, including the WhatsApp Business Platform and Meta Platform.
This Privacy Policy explains how An Info Systems collects, uses, processes, stores, and protects personal and business information when you use our software applications, visit our website at https://aninfosystems.com, or interact with our communication services.
This policy applies to:
- Business Customers: Organizations, businesses, and administrators who register for and subscribe to our services.
- Authorized Users: Team members, agents, and staff permitted by our business customers to access the workspace.
- End Customers and Contacts: Individuals who communicate with our business customers via WhatsApp channels connected to our platform.
- Website Visitors: Individuals who visit our public websites and informational portals.
We collect only the categories of personal and operational information necessary to provide, secure, and maintain our services. We do not process data that is unrelated to the authorized CRM and communication features requested by our customers.
2.1 Account and Registration Information
When business customers register or manage their account, we collect direct business contact details, including:
- Full name and job role of the primary administrator and team users.
- Business email address and business telephone number.
- Registered business or company name.
- Account credentials and internal user identifiers.
- Billing contact details and subscription metadata (payment card details are processed directly by certified third-party payment gateways; we do not store raw card numbers).
2.2 WhatsApp Business Platform and Meta Platform Data
When a business customer integrates our platform with the WhatsApp Business Platform or Meta Platform (via official WhatsApp Cloud API or Meta Graph API), we process data authorized through Meta's developer and business integration channels, which may include:
- WhatsApp Business Account ID (WABA ID) and WhatsApp Business Phone Number ID.
- Official business profile details registered within Meta Business Manager.
- Inbound and outbound message text, interactive buttons, and media attachments transmitted during active customer conversations.
- Message metadata, including timestamp, delivery status, read receipts, and system error codes.
- Approved WhatsApp message templates and language configurations.
- Webhook event data dispatched by Meta's Cloud API endpoints to deliver real-time messages and notifications.
2.3 End-Customer and Contact Data (Processed on Customer Behalf)
In our capacity as a CRM software provider, our business customers input or sync contact records into their workspace. This information may include:
- End-customer contact names, aliases, and display names.
- Phone numbers utilized to send or receive WhatsApp communications.
- Customer conversation histories and communication logs.
- Customer tags, custom field attributes, and internal support notes created by business users.
2.4 Technical, Device, and Security Log Data
When accessing our web interfaces and APIs, our servers automatically log technical parameters for security, diagnostics, and performance monitoring:
- Internet Protocol (IP) address and approximate regional geolocation.
- Browser type, browser version, operating system, and client device attributes.
- System access logs, authenticated session timestamps, and referrers.
- Application performance metrics and error diagnostic reports.
We use collected information strictly to fulfill legitimate business operations, provide CRM capabilities, and comply with contractual and statutory mandates. Specifically, we use information for:
- Delivering Core CRM Functionality: Creating and managing customer accounts, managing customer profiles, and synchronizing customer interaction histories.
- WhatsApp Business Integration: Connecting business accounts to the Meta WhatsApp Cloud API to send, receive, route, and display business communications in real time.
- Conversation and Ticket Management: Enabling business support teams to reply to inquiries, assign conversations, and monitor customer service response times.
- Notification and Status Updates: Relaying message delivery status, read receipts, and system alerts to authorized users.
- Customer Support and Technical Assistance: Troubleshooting platform bugs, answering inquiries, and delivering administrative announcements.
- Platform Reliability and Optimization: Monitoring server load, tracking API latency, diagnosing connectivity errors, and improving platform resilience.
- Security and Fraud Prevention: Detecting suspicious login activity, preventing unauthorized access, defending against abuse, and enforcing platform terms.
- Legal and Regulatory Compliance: Upholding applicable laws, maintaining tax and transaction records, and cooperating with lawful regulatory inquiries.
Because our platform connects to the WhatsApp Business Platform via Meta APIs, we enforce strict controls regarding the handling and governance of Meta Platform Data.
- Authorized API Access Only: We access Meta APIs exclusively through authorized developer endpoints, using access tokens granted through customer-approved authentication workflows.
- Feature-Bound Processing: Meta Platform Data is processed exclusively to provide the specific CRM, communication, and messaging features explicitly requested and configured by the business customer.
- No Sale of Meta Platform Data: We never sell, lease, monetize, or trade Meta Platform Data or WhatsApp customer conversation data to third parties, brokers, or external entities.
- No Unrelated Advertising or Profiling: Meta Platform Data and customer WhatsApp message histories are never used to serve targeted advertisements, track users across third-party websites, or build marketing profiles.
- No Generalized AI Model Training: We do not utilize customer conversation contents, WhatsApp message payloads, or Meta Platform Data to train generalized, publicly accessible, or third-party artificial intelligence models.
- Strict Role-Based Access Controls: Access to API credentials, message payloads, and server logs is restricted to authorized personnel who require access for infrastructure maintenance, debugging, or lawful obligations.
- Vetted Service Providers: Any hosting, infrastructure, or operational vendor engaged by our organization to transmit or store data must adhere to rigorous confidentiality and security standards consistent with Meta developer terms.
Depending on the applicable data protection framework (such as the GDPR, UK Data Protection Act, or relevant regional privacy legislation), we process personal information under the following recognized legal bases:
- Performance of a Contract: Processing is necessary to deliver our software services, manage customer accounts, and fulfill obligations specified in our service agreements.
- Legitimate Business Interests: Processing is conducted to maintain infrastructure integrity, safeguard system security, prevent fraud, optimize platform performance, and support business operations, provided such interests do not override your fundamental rights.
- Consent: Where required by applicable privacy laws, we process specific categories of data based on your explicit consent (e.g., optional integrations or elective communication preferences). You retain the right to withdraw consent at any time.
- Compliance with Legal Obligations: Processing is carried out to meet statutory recordkeeping, financial reporting, anti-fraud, or valid legal disclosure mandates.
We treat all customer data with confidentiality. We disclose information only to the categories of recipients described below, strictly for the operational purposes detailed in this policy:
- Meta Platforms, Inc. and Affiliates: When you connect the WhatsApp Business Platform, message payloads, templates, phone numbers, and API calls are transmitted through Meta's Cloud API infrastructure to deliver communications to WhatsApp recipients.
- Cloud Hosting and Data Center Providers: We partner with established cloud hosting providers to host application servers, operational databases, and encrypted storage facilities.
- Infrastructure and Delivery Services: We utilize vetted providers for critical support functions, such as transactional email delivery, system error monitoring, and uptime monitoring.
- Professional Advisors and Legal Authorities: We may disclose data if required in response to lawful subpoenas, court orders, or governmental regulations, or to protect the vital rights, safety, and property of our company, our users, or the public.
We retain personal data only for as long as necessary to fulfill the business purposes for which it was originally collected, including the provision of our platform services, resolving disputes, and adhering to applicable legal, tax, or regulatory standards.
Retention periods are determined by practical operational criteria:
- Customer Account Data: Maintained for the duration of an active business relationship, and for a reasonable statutory period following account closure to satisfy financial, audit, and tax requirements.
- Customer Conversation and WhatsApp Messages: Stored in accordance with the retention rules, subscription parameters, or explicit deletion commands configured by the business customer within their workspace.
- Technical and Security Logs: Retained for a limited operational window to facilitate diagnostic analysis, anomaly investigation, and platform security defenses, after which they are purged or anonymized.
When data is no longer required for authorized purposes or upon receipt of a validated deletion request, we securely delete or anonymize the information using industry-standard disposal procedures.
We implement technical and organizational security measures designed to protect personal and business information against unauthorized access, destruction, loss, alteration, or disclosure:
- Encryption in Transit: Data transmitted between your browser, our servers, and Meta's API endpoints is protected using Transport Layer Security (TLS 1.2 or higher) cryptographic protocols.
- Authentication and Access Controls: Access to customer workspaces and administrative controls requires authenticated credentials. System-level access is restricted to authorized engineers on a least-privilege, need-to-know basis.
- Secure Infrastructure: Operational servers and databases are deployed in protected environments guarded by firewalls, network isolation, and continuous security monitoring.
- Monitoring and Anomaly Logging: Automated monitoring tools track system health, anomalous access attempts, and API communication performance to identify security threats promptly.
- Data Backups and Disaster Recovery: Regular encrypted backups are created to safeguard business continuity against unexpected hardware or system failures.
- Incident Handling: We maintain procedures to investigate, mitigate, and remediate potential security incidents, notifying affected parties where mandated by applicable law.
Depending on your location and governing data protection regulations, you may possess specific rights regarding your personal information:
- Right to Access: You may request confirmation as to whether we process your personal data and receive a copy of that information.
- Right to Rectification: You may request the correction of inaccurate, incomplete, or out-of-date personal information.
- Right to Erasure (Right to Be Forgotten): You may request the deletion of your personal data where grounds for continued processing no longer exist.
- Right to Restrict Processing: You may request the restriction of data processing under specific statutory conditions.
- Right to Data Portability: You may request a structured, machine-readable export of personal data you provided to us directly.
- Right to Object: You may object to data processing conducted on the basis of legitimate interests.
- Right to Withdraw Consent: Where processing relies on consent, you may revoke your consent at any time without impacting prior lawful processing.
To exercise any of these rights, contact us at privacy@aninfosystems.com. If you are an end-customer who interacts with a business that uses our services, please direct your privacy request to the business that holds your direct relationship, as they are the primary Data Controller.
In compliance with Meta Platform Terms, WhatsApp Business Platform policies, and international privacy laws, we provide a clear, direct, and accessible process for users and business customers to request the deletion of their personal data, account information, and connected Meta integration records.
Follow the steps below to submit a formal data deletion request:
Step-by-Step Data Deletion Procedure
- Step 1 — Email Notification: Send an email directly to our designated privacy mailbox: privacy@aninfosystems.com with the subject line "Data Deletion Request".
- Step 2 — Identify Your Account: In your email, include your registered business email address, business name, and any relevant identifiers associated with your account or WhatsApp integration.
- Step 3 — Specify the Scope: State clearly whether you are requesting the deletion of your entire account, specific user records, WhatsApp message records, or all associated integration data.
- Step 4 — Request Verification: To safeguard customer security and prevent unauthorized erasure, our compliance team will verify your identity and authorization to submit requests for the specified account.
- Step 5 — Processing and Confirmation: Upon successful verification, our team will execute the deletion of applicable records across active production databases within statutory timeframes (typically within 30 days). A written confirmation email will be issued once the deletion is finalized.
- Step 6 — Legal Exceptions: Information that must be retained for legitimate legal compliance, ongoing statutory investigations, resolving disputes, tax records, or enforcing our agreements will be securely retained only as permitted or required by law.
Disconnecting Applications from Meta Business Manager
If you are a business customer who wishes to revoke integration access to your WhatsApp Business Account or Meta assets directly from Meta's management interface, follow these steps:
- Log in to your Meta Business Manager (https://business.facebook.com/).
- Navigate to Business Settings > System Users or Integrations > Connected Apps.
- Locate the authorized application integration entry and select Remove / Disconnect.
- Optionally, open WhatsApp Manager > Phone Numbers and verify that third-party webhook subscriptions are disconnected.
An Info Systems operates with the support of global hosting and technology partners. Your information may be transmitted to, stored, and processed in servers located outside your country or territory of residence.
When data is transferred across international borders, we ensure that appropriate technical, operational, and legal safeguards—such as Standard Contractual Clauses (SCCs), data processing agreements, and strong transit encryption—are maintained to safeguard your rights under applicable privacy legislation.
Our platform is an enterprise and business-to-business (B2B) software service designed exclusively for business organizations and professional users. Our services are not directed to, marketed toward, or intended for use by children under the age of 16 (or under the applicable age of digital consent in your territory).
We do not knowingly collect or solicit personal information from children. If we become aware that personal information relating to a minor has been collected without verified parental or legal guardian consent, we take prompt measures to delete such data from our systems.
We may periodically update this Privacy Policy to reflect modifications in our software features, evolution in Meta Platform terms, statutory requirements, or organizational data processing practices.
When changes occur, we will post the revised document on this webpage and update the "Last Updated" timestamp at the top of the policy. Material revisions that significantly impact your rights will be communicated through appropriate channels, such as email notices or announcements within the platform.
We encourage you to review this page periodically to remain informed about our data protection commitments.
If you have questions, inquiries, concerns, or requests regarding this Privacy Policy, your personal data, or our compliance with Meta Platform policies, contact our data protection team:
- Company / Operating Entity: An Info Systems
- Platform Service: CRM & Messaging Platform
- Privacy & Compliance Email: privacy@aninfosystems.com
- Website: https://aninfosystems.com
We are committed to addressing your inquiries promptly and working cooperatively to resolve any concerns regarding your privacy.