Messaging privacy policy

Who we are

The HighImpct messaging service is provided by HighImpct LLC ("HighImpct", "we"). It lets a business connect its own WhatsApp Business number (and, where offered, other messaging channels) and read and reply to its customers' messages from an inbox. This policy covers that service only. Our agency website and services have their own terms.

Our role

For the messages a business sends and receives through the service, the business decides what is collected and why, and is responsible for its customers' data. We process those messages on the business's behalf, only to provide the service. For the business's own account details (who signed up, billing, settings) we are responsible.

What we process

• Business account details: name, email, the WhatsApp Business Account and phone number IDs the business connects, the access token Meta issues for that connection, settings, and billing records.
• Messages: the messages exchanged between the business and its customers through the service, with the customer's WhatsApp number, profile name, message times and delivery status.
• Templates: the message templates a business creates and their review status at Meta.
• Technical data: logs needed to run, secure and fix the service, kept short and without message content where possible.

Why we process it

• To show a business's messages in its inbox and send the replies and templates its team chooses.
• To connect and manage the business's WhatsApp account through Meta's platform, as the business asks.
• To keep the service secure, prevent abuse, and meet our legal obligations.

We do not sell personal data, use message content for advertising, or use one business's data for another business.

Who we share it with

• Meta Platforms (WhatsApp Business Platform), which carries the messages and the account connection.
• Cloudflare, which hosts the service and its database.
• Our email provider, for account and security emails to the business's team.
• Authorities, only when the law requires it, and only the minimum.

How long we keep it

Messages and account data are kept while the business uses the service. When a business disconnects or closes its account, we delete its messages and access tokens within 30 days, except records the law requires us to keep (for example billing). A business can ask us to delete specific data sooner.

Security

Data is encrypted in transit, access tokens are never shown in the interface, staff access is limited and logged, and each business sees only its own data.

Your choices and rights

A business can export or delete its data at any time. A customer who messaged a business should first contact that business, which controls their messages; we will help the business with any request. You can also ask us directly, as explained on our data deletion page.

Changes

We will post any change to this policy on this page with a new date, and tell connected businesses by email before a material change takes effect.

Contact

HighImpct LLC, support@highimpct.com.

Last updated 28 October 2026. Related: Messaging privacy policy, Messaging terms of service, Data deletion.