← Back to site Legal document

Privacy Policy

Last updated: May 3, 2026 · Compliant with Brazilian LGPD (Law 13.709/2018) · Versão em português

This Privacy Policy describes how whatsbtx24 — listed in the Bitrix24 Marketplace and installed inside Bitrix24 under the application name "WhatsApp Web on Bitrix24" — collects, uses, stores, and protects personal data in the context of providing the WhatsApp + Bitrix24 CRM integration service.

By using whatsbtx24, you declare that you have read and agree to this Policy.

1. Who we are

whatsbtx24 (published in the Bitrix24 Marketplace and installed inside Bitrix24 as "WhatsApp Web on Bitrix24") is an application installable in Bitrix24 that centralizes WhatsApp customer service directly inside the CRM.

For purposes of the Brazilian General Data Protection Law (Law 13.709/2018 — LGPD), and aligned with similar frameworks (GDPR):

  • The contracting customer is the Data Controller
  • whatsbtx24 acts as Data Processor, processing data per the customer's instructions

2. Data collected

whatsbtx24 may process the following data:

2.1 Data from Bitrix24

  • Contact and company names
  • Phone numbers and emails
  • Deal data
  • Pipelines and stages
  • Users and permissions

2.2 Data from WhatsApp

  • Message content (text, audio, media)
  • Phone number
  • Contact name (when available)
  • Conversation history

2.3 Technical data

  • IP address
  • Access and usage logs
  • Session information
  • Internal system identifiers

3. Purpose of processing

Data is processed exclusively to:

  • Operate the WhatsApp + Bitrix24 integration
  • Create and update records in the CRM
  • Enable communication between users and end customers
  • Manage customer service distribution
  • Record history and audit trail
  • Provide technical support
  • Improve the service

4. Integrations used

4.1 Bitrix24

whatsbtx24 integrates with Bitrix24 via authorization (OAuth), accessing data per the permissions granted by the customer.

4.2 WhatsApp

The connection with WhatsApp is established via WhatsApp Web–compatible technology, using QR Code authentication.

  • We do not store WhatsApp passwords or credentials
  • Each connection is isolated per customer

5. Data storage

Data is stored in:

  • Servers located in Brazil
  • VPS infrastructure (Hostinger)
  • PostgreSQL database

Data is organized in isolation per customer (multi-tenant with logical segregation).

6. Access to messages

whatsbtx24:

  • Does not access message content for commercial purposes
  • May access data only when necessary for technical support, upon customer request or authorization

Access to conversations inside the platform is controlled by permissions defined by the customer.

7. Data sharing

whatsbtx24 may share data only when necessary for service operation with:

  • Infrastructure providers (e.g., hosting)
  • The Bitrix24 platform
  • Services related to technical operation

We never sell, rent, or commercialize personal data.

8. Information security

We adopt technical and organizational measures to protect data, including:

  • Encryption in transit (HTTPS)
  • Per-user access control (RBAC)
  • Logical data isolation per customer
  • Activity monitoring

Despite this, no system is completely immune to risk.

9. Data retention

Data is stored:

  • During the period of active service use
  • For a limited additional period after cancellation, for security and audit purposes

After that period, data may be deleted or anonymized.

10. Data deletion

The customer may request:

  • Data deletion
  • Data correction
  • Data export

Requests must be made through official support channels.

11. Data subject rights (LGPD/GDPR)

Under the LGPD (and aligned with GDPR), data subjects have the right to:

  • Confirmation of processing
  • Access to their data
  • Correction of incomplete or outdated data
  • Deletion of data
  • Portability
  • Withdrawal of consent (when applicable)

The whatsbtx24 customer is responsible for handling requests from their own users and end customers.

12. Customer responsibilities

The customer declares that:

  • They have a legal basis to process their contacts' data
  • They use WhatsApp in compliance with its terms of service
  • They are responsible for managing access for their own users

13. WhatsApp use

WhatsApp use is subject to Meta Platforms' terms.

whatsbtx24 has no official affiliation with WhatsApp and is not liable for any restrictions or blocks resulting from platform use.

14. Changes to this policy

This Policy may be updated periodically.

We recommend regular review. Continued use of the service implies agreement with the current version.

15. Contact

For questions, requests, or privacy-related matters:

Data Processor

Growth24 — Ansuz Digital

Marketing Estratégico e Consultoria Ltda

CNPJ 47.607.805/0001-61

whatsbtx24@growth24.com.br

whatsbtx24 — WhatsApp inside Bitrix24, with full control of the operation.