Skip to content
IVATEC
en
Contact

Privacy

Privacy Policy — IVATEC Messaging Platform

Last updated: October 13, 2026

This policy explains which data the IVATEC Messaging Platform handles, why, who it is shared with, how long it is kept and how to exercise your rights.

1. Who is responsible

The IVATEC Messaging Platform is provided by IVATEC CONSULTORIA DE NEGOCIOS E T.I. LTDA, Brazilian company registration (CNPJ) 00.504.288/0001-31, at ST SCN Quadra 4, Bloco B, Sala 702, Asa Norte, Brasília – DF, 70.714-020, Brazil.

Privacy contact: [email protected].

2. What the IVATEC Messaging Platform is

The IVATEC Messaging Platform connects the products of the IVATEC ecosystem to Meta's WhatsApp Business platform to send authorized transactional messages. Veetz, a management system for veterinary clinics, is one of the products that use it.

Messages are transactional and tied to an existing service, such as appointment reminders and notices that an exam result is available. Each customer chooses which kinds of notice are active. The platform does not send marketing messages.

Each product's own terms and privacy policy still apply to the use of that product. For Veetz, see the Veetz Privacy Statement.

Veetz Privacy Statement

3. Data we handle

To run the service, we may handle:

  • Data of the WhatsApp Business account the customer authorized: the business ID at Meta, the WhatsApp Business account ID, the phone number ID and displayed number, the verified name, and the access credential granted by Meta.
  • Phone numbers of the message recipients.
  • Consent evidence: the record that the recipient agreed to receive the messages, with the date of consent and, if any, the date it was withdrawn.
  • Information needed for the notice, such as the kind of notice, the language, the message template and the details of the service it refers to.
  • Sending and delivery records: date, attempts, the message ID at Meta, status (sent, delivered, read or failed) and the error code, if any.

4. Data received from Meta

From Meta, the integration only uses the account and phone number IDs, the verified name, the access credential and the status updates of the messages sent (sent, delivered, read or failed).

Replies written by recipients are neither read nor stored by the integration.

5. Why we use the data

  • To connect the customer's WhatsApp Business account and keep the connection working.
  • To send the transactional notices the customer turned on, only to recipients who agreed to receive them.
  • To confirm delivery, avoid duplicate messages and diagnose failures.
  • To support the customer and show that each message was authorized.

6. Who we share data with

We do not sell personal data. We only share what the service needs:

  • Meta/WhatsApp: receives the recipient's number and the message content to deliver it. Meta's processing is also subject to the terms and policies of its services.
  • Hostinger: hosting of the servers where the integration and its database run.
  • Cloudflare: DNS and traffic proxy services for IVATEC's addresses.
  • Public authorities, when required by law.

7. Where data is kept and how we protect it

Data is kept on servers contracted from Hostinger and administered by IVATEC. The authentication, queue and monitoring components are operated by IVATEC itself.

All communication with Meta and with IVATEC's products uses encrypted connections (HTTPS/TLS). Connection credentials stay on IVATEC's servers only and are never sent to the browser. Access to the data is limited to the people who need it to run the service.

8. How long we keep data

  • Active consent: while the authorization is valid and needed for the service.
  • Minimum evidence of a consent that was used: up to 2 years after the last authorized message, with restricted access.
  • Sending records and delivery receipts: 90 days, for support, reconciliation and diagnosis.
  • Backups containing data already deleted: expire within 30 days.
  • A deletion request may lead to deletion before these periods, unless the law allows or requires the data to be kept.

9. How to disconnect and withdraw authorization

The customer can ask to disconnect the integration at any time at [email protected]. The integration can also be removed in the account settings at Meta.

On disconnection, new messages are blocked immediately and the connection credential is deleted. The operational data of the integration, including consents that were never used, is deleted within 30 days. We only keep the minimum evidence whose retention has a documented justification, and the technical controls that prevent old requests from being sent again.

Disconnecting and deleting data are separate operations: disconnecting does not delete the customer's WhatsApp Business account or number at Meta.

Recipients can stop receiving messages by asking the business that sends them or by writing to the privacy contact.

10. Your rights

You can ask for confirmation of processing, access, correction, anonymization, portability or deletion of your personal data, and withdraw consent, under Brazil's General Data Protection Law (Law No. 13,709/2018). Send your request to [email protected]. We may ask for information to confirm your identity first.

11. Changes to this policy

When this policy changes, we will publish the new version on this page with its update date.