Privacy Policy

1. Who we are

EverCore Cloud ("EverCore", "we", "us") provides a WhatsApp messaging dashboard that lets merchants communicate with their customers using Meta's official WhatsApp Business Platform (Cloud API). This policy explains what data we collect, how we use it, and the choices available to merchants and their customers.

2. Data we collect

• Merchant account data: business name, email address, and password hash used to operate your EverCore account.
• WhatsApp Business Account data: the WhatsApp Business Account ID, phone number ID, and access token issued by Meta when you connect your number through Embedded Signup. Access tokens are encrypted at rest and are never exposed in our client application.
• Customer contact data: phone numbers, names, and opt-out status for the customers your business messages.
• Message data: message content, direction, delivery status, and Meta's per-message pricing category, needed to show your inbox and calculate spend.
• Template and broadcast data: message templates you submit to Meta for approval, and the broadcasts you send using them.

3. How we use data

We use this data solely to operate the EverCore dashboard: sending and receiving WhatsApp messages on your behalf, keeping your inbox and contact list current, tracking template approval status, and running the broadcasts you schedule. We do not sell customer data, and we do not use message content for advertising.

4. Data sharing

Message data is sent to and received from Meta as the operator of the WhatsApp Business Platform, in accordance with the WhatsApp Business Solution Terms and Meta Platform Terms. We do not share your data with any other third party except infrastructure providers (database and job queue hosting) strictly necessary to run the service, under contracts that prohibit them from using your data for their own purposes.

5. Customer opt-out

A customer can stop receiving messages from a merchant at any time by replying STOP, UNSUBSCRIBE, ARRET, or TAWQIF. This is recorded immediately and the contact is excluded from all future broadcasts and automated messages.

6. Data retention and deletion

We retain account and message data for as long as your EverCore account is active, or as required to comply with legal obligations. Merchants can request deletion of their account and associated data at any time by contacting us at privacy@evercore.cloud. Deletion requests initiated through Facebook Login are handled automatically at our data deletion endpoint, as required by Meta Platform Terms.

7. Security

WhatsApp access tokens are encrypted at rest with AES-256-GCM. All webhook traffic from Meta is verified against its HMAC-SHA256 signature before processing. Access to the dashboard requires an authenticated session.

8. Contact

Questions about this policy can be sent to privacy@evercore.cloud.