Privacy Policy

1. Who We Are

This Privacy Policy applies to Stormfin, a software platform operated by Storm Tecnologia - Stormtech Sistemas LTDA, available at chat.stormfin.com.br. Stormfin is a customer communication and support tool that integrates with Meta/Facebook APIs, the WhatsApp Business Platform, and Instagram Business Login / Instagram Messaging APIs so that business users can manage their customer conversations from a single platform.

2. Data We Collect

We collect data provided directly by users of the platform, such as:

• Name, email address, phone number, company, and role;
• Login and account data;
• Support messages and requests;
• Website and platform navigation data;
• Meta profile information of the person who authorizes the connection, such as name, profile picture, and Meta profile identifier (public profile).

We also process data through the Meta/WhatsApp Business Platform integrations, such as:

• WhatsApp phone numbers;
• Customer messages and conversation content;
• Conversation metadata;
• Approved message templates;
• WhatsApp Business Account (WABA) information;
• Meta Business account information, including the business identifier (business_id);
• Access credentials and tokens provided by Meta, stored securely and used solely to operate the connection on the business user's behalf;
• Message delivery and status information, when available through Meta APIs.

For business users who connect an Instagram account through Instagram Business Login and the Instagram Messaging APIs, we also process:

• Instagram professional/business account information;
• Instagram business profile information;
• Instagram direct messages and conversation content;
• Instagram conversation metadata;
• Instagram message delivery, read, or status information when available;
• Meta profile information of the user who authorizes the connection;
• Access credentials and tokens provided by Meta, stored securely and used only to operate the integration.

3. How We Use Data

We use the data described above to:

• Provide customer support tools to business users;
• Manage WhatsApp Business conversations;
• Display approved message templates;
• Send approved and customer-initiated WhatsApp messages;
• Manage Instagram direct message conversations;
• Allow business users and support agents to respond to Instagram customer inquiries;
• Operate Instagram Business Login and Instagram Messaging integrations;
• Maintain customer support history and conversation context;
• Support Human Agent responses where permitted by Meta policies;
• Provide support and respond to requests;
• Improve the platform and its features;
• Maintain the security and integrity of the platform;
• Comply with legal and regulatory obligations.

4. Meta, WhatsApp and Instagram Platform Data

Stormfin uses Meta/Facebook APIs, the WhatsApp Business Platform, and Instagram Business Login / Instagram Messaging APIs to allow business users to manage their customer communications, including WhatsApp Business conversations, approved message templates, Instagram direct messages, and customer support interactions.

Stormfin uses data obtained through Meta APIs only to provide the functionality requested by the business user. WhatsApp and Instagram data is used to operate conversations, customer support, and the integrations authorized by the business user.

Stormfin does not sell data obtained from Meta. Stormfin does not use data obtained from Meta for its own advertising or for any purpose unrelated to the service contracted by the business user. Processing occurs on behalf of and under the instruction of the business user who connected the account, in accordance with the Meta Platform Terms and applicable policies.

When the Human Agent feature is used, Stormfin may allow authorized human support agents to continue customer conversations within the time window permitted by Meta policies. This feature is used for customer support purposes and is not used for promotional or automated messaging outside the allowed messaging window.

5. Sharing of Data

We do not sell data. Data may be shared only in limited circumstances, namely:

• With service providers and processors that are necessary to operate the platform and that act solely on our behalf and at our direction;
• When required to comply with applicable law or legal requests;
• To protect the rights, property, or security of users and third parties;
• To provide the services contracted by the business user.

Data obtained from Meta, including WhatsApp and Instagram data, is not sold and is not shared for advertising, data brokerage, or any independent purpose unrelated to operating the platform and providing the contracted service.

6. Data Storage and Security

Data is stored securely. Access is restricted to authorized personnel, and we use reasonable technical and organizational safeguards designed to protect data against unauthorized access, loss, alteration, or disclosure.

7. Data Retention and Deletion

We retain data only for as long as necessary for the purposes described in this Privacy Policy, to comply with legal obligations, or to provide contracted services.

Users and customers can request the deletion of their data by contacting us at contato@stormtech.com.br.

This section also serves as data deletion instructions for users who remove the Meta, Instagram, or WhatsApp integration. When a business user disconnects a Meta, Instagram, or WhatsApp account, or requests deletion by email at contato@stormtech.com.br, we will delete the related data obtained through those integrations, except where retention is required to comply with legal obligations.

8. User Rights

Under the Brazilian General Data Protection Law (LGPD), where applicable, users have the right to:

• Access their personal data;
• Request correction of incomplete, inaccurate, or outdated data;
• Request deletion or anonymization of their data;
• Request data portability, where applicable;
• Obtain information about how their data is shared;
• Revoke consent where processing is based on consent.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Relevant changes will be communicated through our official channels. Continued use of the platform after an update constitutes acceptance of the revised policy.

10. Contact

If you have any questions about this Privacy Policy or about how we process data, please contact us at contato@stormtech.com.br.