Privacy Policy

1. Our role

For the accounts of Velo users (staff of our business customers), Microdata is the data controller.

For end-customer data that a business sends and receives through WhatsApp (conversation content, contact names and numbers), the business is the data controller and Microdata processes that data on the business’s instructions as a data processor.

2. Data we process

• Account data: name, email address, password (stored as a hash), role and workspace, and activity and sign-in logs for security.
• WhatsApp Business assets that a business shares with Velo through Meta Embedded Signup: WhatsApp Business Account (WABA) ID, business phone number and its ID, verified display name, quality rating and messaging limits, and message templates.
• The business’s Meta access token used to call the WhatsApp Cloud API. Tokens are stored encrypted and are never sent to the browser.
• Conversation data: content and media of incoming and outgoing messages, the WhatsApp profile name and number of the business’s customers, delivery statuses, and notes and labels added by agents.
• Billing data: subscription plan, wallet balance and transaction history in Velo.

3. Data from Meta and the permissions we use

Velo requests whatsapp_business_management to read and manage the WhatsApp Business assets that a business explicitly shares with Velo (account, phone numbers, webhook subscription, number registration and message templates), and whatsapp_business_messaging to send and receive WhatsApp messages on behalf of that business.

We do not store personal Facebook profile data (such as name, email, photo or Facebook user ID) of the person who completes Embedded Signup. We do not use data from Meta for advertising, do not sell it, and do not use it for anything other than providing Velo to the business concerned.

4. Purposes

• Providing Velo: shared inbox, sending messages and templates, broadcasts to customers who opted in, automation and reports.
• Managing accounts, roles and security (authentication, abuse prevention, auditing).
• Billing for Velo services.
• Complying with legal obligations and Meta platform policies.

5. Sharing

Messages are sent and received through the WhatsApp Business Platform operated by Meta Platforms, so message data is also processed by Meta under its terms. Data is stored on servers we manage through our infrastructure provider. We do not sell personal data, and we disclose data to others only when required by law or instructed by the business customer.

6. Security

• All traffic uses HTTPS.
• Meta access tokens are encrypted at rest.
• Access is limited by per-workspace roles; each workspace can only see its own data.
• Webhooks from Meta are signature-verified before processing.

7. Retention and deletion

Data is kept while the business’s account or workspace is active. When a business disconnects its WhatsApp channel, the access token for that channel is deleted. When a subscription ends, or on request, workspace data is deleted within 30 days unless the law requires us to keep it longer.

How to request deletion is described on the Data Deletion page (/data-deletion).

8. Your rights

You may access, correct, request deletion of, restrict the processing of, and withdraw consent for your personal data. Send requests to hallo@microdataindonesia.co.id. If you are a customer of a business that uses Velo, contact that business; we will help it fulfil your request.

9. Changes

We may update this policy. The effective date above will change, and material changes will be notified to workspace owners.

10. Contact

PT Micro Data Indonesia

Jl. Endro Suratmin No.52d, Way Dadi, Kec. Sukarame, Kota Bandar Lampung, Lampung 35131, Indonesia

hallo@microdataindonesia.co.id