1. Controller and scope

The data controller is Nubea, operating in Buenos Aires, Argentina. For privacy questions, contact info@nubea.com.ar.

This policy applies to the public website, console, and API of the Wapo instance operated by Nubea. Wapo can also be installed by third parties: each independent operator is responsible for their own practices and must publish their own policy.

2. Data we process

• Account data: name, email address, role, assigned projects, and protected authentication data.
• Customer and contact data: identifiers, name, phone number, email, marketing preferences, and properties added by authorized users.
• Communications: content, files, templates, status, and metadata of messages sent or received through WhatsApp.
• Integration data: WhatsApp Business account and phone number identifiers, webhook configuration, and encrypted credentials.
• Technical data: IP address, request identifier, route, date, duration, response code, events, and security logs. We do not store the full body of every request in access logs.

3. How we use data

• Provide, maintain, and protect Wapo and its integrations.
• Send and receive communications requested by our customers.
• Manage accounts, permissions, connections, templates, and webhooks.
• Diagnose errors, prevent abuse, and maintain operational records.
• Send operational notices and respond to support requests.
• Comply with legal obligations and enforce applicable agreements.

We do not sell personal data or use it to build our own advertising profiles.

4. Roles and legal bases

For data relating to organizations that subscribe to or administer Wapo, we process information to deliver the requested service, pursue legitimate security interests, and comply with legal obligations. For contacts and recipients added by a customer, we normally act as a processor and follow that customer’s instructions. The customer must have a legal basis and any necessary consents.

5. Providers and transfers

We share data only when necessary with infrastructure, email, and messaging providers engaged to operate the service, subject to confidentiality and security obligations. WhatsApp communications are also processed through Meta Platforms and its affiliates under their terms and policies.

Some providers may process data outside Argentina. In those cases, we seek to apply contractual and security safeguards appropriate to applicable law.

6. Retention

We retain data while the account or project remains active and for as long as needed to provide the service, resolve disputes, and meet our obligations. Successful API logs and completed jobs are retained for up to 30 days; audit logs and failed deliveries for up to 90 days. Messages, contacts, and other operational data remain until the customer deletes them, ends the service, or requests erasure, unless retention is required by law.

7. Security

We apply reasonable technical and organizational controls, including credential encryption, HTTPS connections in production, role-based permissions, project isolation, revocable sessions, and audit logs. No system is completely infallible; if we detect a significant incident, we will respond and provide notifications as required by applicable law.

8. Your rights

You may request access to, updating, correction, or erasure of your data, or ask about its processing, by emailing info@nubea.com.ar. We may need to verify your identity and, where the data was added by a customer organization, refer the request to that organization.

You can also follow our data deletion instructions. In Argentina, the Agency for Access to Public Information is the supervisory authority for Law 25,326 and receives complaints and claims.

Data deletion instructions ↗

9. Cookies and analytics

This landing page does not install advertising cookies or third-party analytics tools. The console may use browser storage to maintain a signed-in session and remember interface preferences. If we introduce non-essential technologies, we will update this policy and request the appropriate consent.

10. Changes and contact

We may update this policy to reflect legal, technical, or service changes. We will publish the new date on this page and notify you of material changes where appropriate.