Privacy Policy
01Who we are & scope
UCB is a customer-engagement and service platform operated by Tekera Corp (“Tekera Corp”, “we”, “us”), registered at 418 Broadway, Albany, NY, 11305.
UCB lets businesses (“Customers”) connect a WhatsApp Business number and communicate with the people who message them (“End Users”). This policy explains what personal data we handle, why, and your rights.
Our role depends on whose data it is:
- For the account data of our Customers and their staff, Tekera Corp is the data controller.
- For the personal data of End Users who message a Customer over WhatsApp, the Customer is the data controller and UCB acts as a data processor on that Customer’s behalf. If you are an End User wanting to exercise your rights, please contact the business you messaged; we will support them in responding.
02WhatsApp / Meta platform disclosure
UCB operates on the WhatsApp Business Platform using the Meta / WhatsApp Cloud API. Your use of WhatsApp is also governed by WhatsApp’s and Meta’s own terms and privacy policies.
03Data we collect
We collect and process the following categories of personal data. We keep this list specific, with examples, so it accurately reflects what UCB handles.
| Category | Examples | Source |
|---|---|---|
| WhatsApp identifiers | Phone number, WhatsApp profile name, WhatsApp user ID | Inbound WhatsApp messages |
| Message content | Text, images, documents, and other media sent to/from the business; timestamps; delivery/read status | WhatsApp Cloud API |
| WABA metadata | WhatsApp Business Account ID, phone number ID, display name, quality rating, business profile | Meta Graph API during onboarding |
| Customer account data | Name, email, role, organisation, login credentials of tenant staff | Sign-up / account use |
| Support records | Cases/tickets, conversation history, internal notes, CSAT responses | Generated in-product |
| Technical & usage data | IP address, device/browser info, log and diagnostic data, error reports | Automatic |
04How & why we use it
- To deliver the messaging service — route, send, and display WhatsApp messages between End Users and Customers.
- To provide support features — cases, queues, human handoff, SLA tracking, and satisfaction (CSAT) surveys.
- To provide AI-assisted replies and knowledge-base answers where the Customer enables them.
- To operate, secure, debug, and improve the platform.
- To comply with legal obligations and enforce our terms.
05Legal bases (GDPR)
- Contract — to provide the service our Customers signed up for.
- Legitimate interests — securing, debugging, and improving the platform, balanced against user rights.
- Consent — where required, e.g. an End User opting in to receive WhatsApp messages from a business; withdrawable at any time (reply STOP).
- Legal obligation — to meet applicable law.
07International data transfers
Data may be processed in the United States and other countries. Where required (for EU/UK data), transfers rely on Standard Contractual Clauses or another lawful transfer mechanism.
08Data retention
- The Meta Cloud API retains message content on Meta servers for a limited period (up to approximately 30 days) to provide the service.
- UCB retains conversation history and account data until the Customer requests deletion or closes the account, after which we delete or anonymise it (subject to any legal retention needs).
09Security
We use measures including encryption in transit and at rest, encryption of stored access tokens, two-factor authentication, role-based access control, and per-tenant data isolation. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
10Your rights
Depending on where you live, you may have the following rights over your personal data:
- GDPR / UK GDPR — access, rectification, erasure, restriction, portability, objection, withdraw consent, and complain to a supervisory authority.
- CCPA / CPRA (California) — know, delete, correct, opt out of sale/sharing (we do not sell), and non-discrimination.
- India DPDP — access, correction, erasure, grievance redressal, and nomination.
To exercise these rights, contact us through your UCB account portal (in-app support). If you are an End User, please contact the business you messaged (the controller of your data); we will support them in responding.
11Data deletion
You can request deletion of personal data we hold. See our Data Deletion Instructions for how to make a request.
12Children's data
UCB is not directed to children under 16 (or the age set by your local law), and we do not knowingly collect their personal data.
13Changes to this policy
We may update this policy from time to time. Material changes will be posted on this page.
14Contact us
Tekera Corp, 418 Broadway, Albany, NY, 11305. For privacy questions or to exercise your rights, contact us through your UCB account portal.