WhatsApp Business API Privacy Addendum

Xpert Group FZE-LLC

Effective Date: [Insert Date]

This WhatsApp Business API Privacy Addendum (“Addendum”) forms part of the Privacy Policy and Service Agreements of Xpert Group FZE-LLC (“Xpert Group”, “we”, “us”).

This Addendum applies to all communications conducted via WhatsApp Business Platform, including WhatsApp Cloud API, CRM integrations, automation tools, and messaging solutions provided by Xpert Group. Our Platform is working under brand name of Whatsell.ai with Web Application at https://app.whatsell.ai

1. Scope & Purpose

Xpert Group provides WhatsApp Business API solutions to enable businesses to communicate with customers for:

  • Customer support

  • Transactional notifications

  • Service updates

  • Compliance reminders

  • Marketing messages (where consent is obtained)

All WhatsApp communications are processed in accordance with:

  • UAE Personal Data Protection Law (PDPL)

  • WhatsApp Business Platform Policies

  • Applicable international data protection laws

2. Data Collected via WhatsApp

The following data may be processed:

  • Phone numbers (WhatsApp identifiers)

  • Profile name and metadata (as permitted by WhatsApp)

  • Message content (text, media, documents)

  • Delivery and read receipts

  • Interaction timestamps

Xpert Group does not access personal WhatsApp accounts and processes only business-related communications.

3. Consent & Lawful Use

  • Messages are sent only to users who have provided explicit opt-in consent

  • Users may opt out at any time by replying STOP or equivalent

  • Marketing templates are used strictly in line with WhatsApp approval rules

Xpert Group prohibits spam, cold messaging, or unauthorized communication.

4. Data Processing & Storage

  • Messages are transmitted using WhatsApp’s encrypted infrastructure

  • Data may be stored temporarily in secure systems for delivery, logging, and compliance

  • Message retention periods are minimized and aligned with business necessity

5. Data Sharing

WhatsApp data may be shared only with:

  • Meta Platforms, Inc. (WhatsApp service provider)

  • Authorized sub-processors (cloud hosting, CRM systems)

  • Regulators where legally required

No data is sold or shared for unauthorized purposes.

6. Security Measures

Xpert Group applies:

  • Role-based access controls

  • Secure APIs and authentication

  • Encrypted storage (where applicable)

  • Monitoring and audit logs

7. User Rights

WhatsApp users may:

  • Request access to their data

  • Request deletion of conversation history (subject to legal limits)

  • Withdraw consent for future communications

Requests may be sent to info@xpertgroup.me.

8. Compliance Statement

Xpert Group acts as a Data Processor, while the client remains the Data Controller for WhatsApp communications.