Privacy Policy
NextLead is a WhatsApp messaging platform operated by NextLead ("we", "us"). Businesses ("customers") use it to talk to their own clients on WhatsApp through the official WhatsApp Business Platform (Cloud API) provided by Meta. This policy explains what personal information is handled and why.
Two kinds of information
- Customer account information. When a business signs up, we hold the names, work email addresses and phone numbers of its team members, its billing details and its settings. For this information we are the controller.
- Messages and contacts. When a customer's clients message that customer on WhatsApp, the platform stores their name, WhatsApp number, messages, media, tags, notes and any details they share (for example preferences or bookings). For this information the customer is the controller and we process it only on the customer's instructions to provide the service.
How we use information
- To provide the service: deliver and receive WhatsApp messages, show conversations to the customer's team, run the chatbots, broadcasts and follow-ups the customer sets up, and send reports.
- To keep accounts secure: sign-in, two-step verification, password reset codes and audit logs.
- To bill customers and give support.
- To meet legal obligations.
We do not sell personal information and we do not use message content for advertising.
Who we share it with
- Meta Platforms (WhatsApp Business Platform), which carries the messages.
- Amazon Web Services, which hosts the service and sends system emails.
- Payment providers (such as Stripe) for customer billing.
- Systems a customer chooses to connect (for example its CRM), on that customer's instruction.
Where it is stored and for how long
Data is hosted on Amazon Web Services in the European Union. Messages and contacts are kept while the customer's account is active and for the retention period the customer sets, then deleted. When an account closes, its data is deleted within 30 days, except where the law requires us to keep it. Encrypted backups roll off within a further 30 days.
Security
Connections are encrypted (HTTPS). WhatsApp access tokens and other secrets are encrypted at rest. Each customer's data is kept separate, team access uses roles, and two-step verification is available.
Your rights
You can ask for access to, correction of or deletion of your personal information. If you are a client of one of our customers, please contact that business first, as it controls your data; you can also write to us and we will pass your request on. You may complain to your data protection authority (in the UK, the Information Commissioner's Office).
Contact
Email privacy@getnextlead.co.uk.