← Início

Data Usage Disclosure (Meta App Review)

Last updated: June 16, 2026 — for Meta App Review reviewers

About HypeAi

HypeAi (legal entity: GLOBAL TREINAMENTOS E DESENVOLVIMENTO, CNPJ 40.319.257/0001-25) is a WhatsApp Business Solution Provider. Businesses connect their own WhatsApp Business Account (WABA) to our platform via the Meta Embedded Signup so they can send and receive WhatsApp messages through their phone number using our API gateway and webhook fan-out.

Why we request business_management

We use this permission to:

  1. Read the list of WhatsApp Business Accounts under the user's Business Manager so we can link the correct WABA to the business's account in our platform.
  2. Read the phone numbers attached to that WABA and display them in the business owner's dashboard.
  3. Read approved message templates from the WABA so the business can pick which template to send.
  4. Read aggregated, anonymized messaging insights (conversation counts by category) to display usage analytics to the business owner.

What we do NOT do

  • We do not use business_management to manage ad accounts or run advertising campaigns.
  • We do not use it to build audiences, retarget, or perform marketing automation.
  • We do not claim or transfer ownership of any commercial asset from the user's Business Manager.
  • We do not share business_management data with third parties.
  • We do not use this permission for any purpose unrelated to WhatsApp messaging operations.

For completeness, and to avoid any ambiguity: our own marketing website and sign-up funnel do use standard advertising measurement (a Google Ads tag) to learn which of our ads bringus customers. That is entirely separate from this permission and from any data obtained through it. No Meta Platform Data — and no end-customer data of any kind — is ever sent to that measurement, and the pages seen by our clients' own end customers carry no such tag at all. Details in/privacidade, section 3.2.

Storage & access

Data is stored encrypted at rest in our backend (Supabase, AES-256) and in transit (TLS 1.2+). Access is restricted to (a) the business owner who connected the WABA, and (b) authorized HypeAi support administrators acting on a support ticket. Business owners can revoke access at any time by removing our app from their Business Manager, which immediately disables their connection in our platform.

WhatsApp coexistence history import (opt-in)

When a business connects an existing WhatsApp Business App number in coexistence mode and explicitly opts in, Meta delivers a one-time import of that business's own chat history (up to 180 days, text only). We hold this content in a temporary buffer end-to-end encrypted to the business's own public key (push_copy_encrypted: true — even the copy we forward is the sealed envelope, never plaintext). HypeAi does not hold the private key and cannot read this content — not even from backups or point-in-time recovery. Each record is deleted as soon as the business confirms receipt and, in any case, within24 hours. Contact-list import requires a separate explicit consent. After deletion, only operational metadata remains (counts, timestamps, identifiers — no content).

Contact

Reviewer questions: adm.mvglobal@gmail.com