Privacy Policy

YeboLink is a communications platform that lets businesses send SMS, WhatsApp, and email messages to their customers through a single API and dashboard. For the purposes of data-protection law, our role depends on the data in question:

• As a controller — for account data about the businesses that sign up to YeboLink (your name, work email, company details, billing information).
• As a processor — for the recipient contact data and message content you upload or send through the platform. You (our customer) remain the controller of that data and are responsible for having a lawful basis to message your recipients.

You can reach our data team at [email protected].

Account & billing data. Name, work email address, phone number, company name, password (stored hashed), API keys, and payment/billing records needed to operate your account.

Recipient & message data. To deliver your messages we process the recipient identifiers you provide — phone numbers and email addresses — together with the message content, scheduled send times, and delivery metadata (delivery receipts, opens where applicable, failure codes).

Usage & technical data. Log data such as IP address, browser type, API request timestamps, and dashboard activity, used to secure the service, debug issues, and prevent abuse.

• To deliver the messages you send and report their delivery status back to you.
• To operate, secure, and maintain your account and our infrastructure.
• To bill you accurately and prevent fraud or abuse of the platform.
• To provide customer support when you contact us.
• To comply with legal obligations, including telecom and anti-spam regulations.

We do not sell personal data, and we do not use the recipient contact data you upload for our own marketing.

To route messages across networks we rely on telecommunications carriers and messaging providers (for example, network operators and channel providers such as Twilio and WhatsApp). These sub-processors receive only the data required to deliver the relevant message. We also use infrastructure providers for hosting, data storage, and analytics. Every sub-processor is bound by contract to protect the data and to process it only on our instructions.

We may disclose data where required by law, court order, or a valid request from a competent authority.

Because messaging networks are global, recipient data may be transmitted to carriers and providers located outside your country in order to complete delivery. Where data crosses borders, we rely on appropriate safeguards (such as standard contractual clauses or equivalent mechanisms) with the providers involved.

Account data is retained for as long as your account is active and for a reasonable period afterwards to meet legal, tax, and accounting obligations. Message content and recipient identifiers are retained only as long as needed to deliver the message and provide delivery reporting, after which they are deleted or anonymised in line with your account settings and applicable law. You can request deletion of your data as described below.

We protect data with encryption in transit (TLS), access controls, hashed credentials, scoped API keys, and monitoring for abuse. No system is perfectly secure, but we work to limit risk and will notify affected customers and authorities of a qualifying data breach as required by law.

Subject to applicable law, you may have the right to access, correct, export, or delete your personal data, to object to or restrict certain processing, and to withdraw consent. If you are a message recipient who wants your data removed, please contact the business that messaged you (the controller); we will assist that business in fulfilling your request. To exercise any right with us directly, email [email protected].

YeboLink is a business tool and is not directed at children. We do not knowingly collect personal data from children.

When an account owner connects a Facebook Page or supported professional social account, we process the platform account and authorizing-user identifiers, account names, granted permissions, authorization credentials, connection health, and content the customer chooses to publish. We use this information to connect the selected destination, publish or schedule that content, verify publication, and report delivery errors. Connection ownership and access are scoped to the customer's YeboLink workspace.

To carry out an authorized publication, we send the selected media, caption, and supported publishing options to the relevant platform, such as Meta. Published content may be public. The platform handles that content under its own policies; its processing is separate from the messaging sub-processors described above.

Authorization credentials are encrypted while stored. Disconnecting a channel in YeboLink removes its stored credentials and temporary authorization data and cancels jobs that have not reached submission. Already-submitted jobs may still finish on the platform. Disconnecting does not delete platform posts or erase delivery history. We retain connection identifiers and publication job records, including captions, media references and hashes, publishing options, schedules, source-review references, and delivery status, for reporting and reconciliation. You can also revoke the app's access in the platform's account settings and request access to or deletion of your YeboLink data at [email protected].

We may update this Privacy Policy from time to time. Material changes will be communicated through the dashboard or by email, and the "Last updated" date above will reflect the latest revision.