Privacy policy

Who we are and what this covers

HeyLevo (formerly Levo.so) runs a WhatsApp messaging service at wa.heylevo.com. Businesses use it to send and receive WhatsApp messages through Meta's WhatsApp Business Platform. This policy covers that service, and the details you send us through this website when you ask to talk to us.

Whose information this is

• Businesses that connect a WhatsApp number to HeyLevo, and the people on their team who log in.
• People who exchange WhatsApp messages with those businesses through HeyLevo.
• Visitors who send us their details through this website.

What we collect from businesses

When a business connects a number by logging in with Facebook, we receive:

• The IDs of the WhatsApp Business account and phone number it chooses, its display name and its business portfolio ID.
• An access token from Meta that lets HeyLevo send and receive messages for that number. We store it encrypted.

We never receive Facebook passwords, and we do not read Facebook profiles, friends, posts or advertising data.

What we collect about people who message a business

• Their WhatsApp number, the WhatsApp user ID and username Meta gives the business, and their WhatsApp profile name.
• Details the business adds to personalise messages, such as a first name or company.
• The business's record of when and where the person agreed to receive messages, and whether they have stopped marketing messages.
• The messages sent and received through HeyLevo, and Meta's delivery status for each one (sent, delivered, read or failed), with the time.

What we collect from website visitors

If you ask to talk to us, we receive what you type into the form: your name, work email, company, team size and message.

How we use it

• To send the messages a business asks us to send, and to show it the replies and delivery reports.
• To respect opt-outs and WhatsApp's rules before anything is sent. Someone who replied STOP does not get marketing messages.
• To reply to people who contact us.
• To keep the service secure and fix problems.

We do not sell personal information. We do not use message content for advertising or to train AI models.

Who we share it with

• Meta (WhatsApp), which delivers the messages under WhatsApp's own terms and privacy policy.
• Our hosting provider, which runs our servers in the United States.
• Authorities, only when the law requires it.

How long we keep it

• Raw data Meta sends us about messages is deleted automatically after 30 days.
• Message history, delivery reports, contacts and contact lists are kept while the business uses HeyLevo, and deleted when the business or the person asks.
• A business's access token stops working when it disconnects its number, and we delete it from our servers when the business asks.

Your choices

• To stop marketing messages from a business, reply STOP to it, or block it in WhatsApp.
• To see or delete what we hold about you, follow our data deletion instructions or email support@heylevo.com. If you are on a business's contact list, we act on your request together with that business.

Security

HeyLevo runs over HTTPS only. Access tokens are encrypted when stored, the dashboard needs a login, and we check Meta's signature on every message update before we use it.

Changes and contact

If this policy changes, we update this page and its date. For any question, email support@heylevo.com.