Privacy Policy

Bigsystems · AMEDIA AUTOMAÇÕES DE MARKETING LTDA · Brazilian company registration (CNPJ) 35.074.231/0001-24 · Last updated: November 5, 2026

1. Who we are

Bigsystems provides messaging services on the WhatsApp Business Platform (Meta Cloud API) to businesses. We connect a client business's WhatsApp number to our application to send Meta-approved messages, receive replies and report campaign results. We do not provide services to consumers directly.

2. Data we process

• Client business data received when the business connects through Meta Embedded Signup: business name, WhatsApp Business account and phone number identifiers, and the access token granted to our application.
• Client contacts provided by the client business: name, phone number and the fields needed for the campaign, such as company name and city.
• Messages and events: content of messages sent and received, quick-reply button clicks, delivery and read status, and timestamps.

3. How we use data

We use this data only to provide the service the client business hired: sending messages, stopping messages to people who replied or opted out, routing conversations to the business's team, and reporting campaign results. We do not sell data and do not use it for our own advertising.

4. Roles under data protection law

The client business is the data controller for its contacts and decides who receives messages. Bigsystems acts as a data processor and follows the client business's instructions, in line with Brazil's General Data Protection Law (LGPD). The client business is responsible for having a legal basis to contact each person on its list.

5. Sharing

We share data only with Meta Platforms, to deliver messages through WhatsApp, and with the infrastructure providers that host our application. We may disclose data when required by law or court order.

6. Retention

We keep data for the duration of the contract with the client business and for up to 90 days afterwards for reporting, unless the law requires a longer period. Opt-out requests are kept so that the person does not receive further messages.

7. Security

Access tokens are stored with restricted access on our servers, all traffic uses HTTPS, and access to data is limited to the people who operate the service.

8. Your rights

You may request confirmation of processing, access, correction, anonymization or deletion of your data, and information about sharing. If you received a message from one of our client businesses, you can also reply "Não quero receber" (stop) in the conversation at any time.

9. Data deletion

To delete your data, email luc@bigsystems.co with the subject "Data deletion" and the phone number or business involved. We reply within 15 days. Client businesses can also disconnect their number in the WhatsApp Business app or in Meta Business settings, which ends our application's access to their account.

10. Contact

Questions about this policy: luc@bigsystems.co.