Privacy Policy
1. Who we are
Eduardo Rodriguez Macias ("Rumbo CS"), Mexican tax ID (RFC) ROME8310139V8, registered address Calle Altavista Poniente 303, Int. 119-B, Col. Altavista Residencial, C.P. 45133, Zapopan, Jalisco, México, is the data controller for personal data collected through Rumbo Connect (https://app.rumbocs.com), under Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP) and, where applicable, other data protection laws. Privacy contact: privacidad@rumbocs.com.
Rumbo Connect is Rumbo CS's tool for connecting WhatsApp Business accounts to Meta's official platform (WhatsApp Business Platform, Cloud API). Messages and connections are operated on WhatsSells, the messaging platform built and operated by Rumbo CS.
2. Our role
- We are the controller of the data of the businesses that use Rumbo Connect and of the people who represent them (account and contact data).
- We are a processor of the data of those businesses' end customers (phone numbers and message content): we process it only on the business's instructions and for its benefit.
- Meta Platforms and WhatsApp process data as an independent platform, under their own policies.
3. Data we process
| Category | Examples |
|---|---|
| Account and contact | Name, email, phone, business name. |
| Data Meta provides when you connect your account (Facebook Login for Business / Embedded Signup) | App-scoped user ID, business portfolio ID, WhatsApp Business Account (WABA) ID, phone number ID, the number's display name, and the permissions granted (whatsapp_business_management, whatsapp_business_messaging). |
| Integration credentials | The business integration access token. It is stored encrypted and is never shown in the browser. |
| Messaging | Message templates, content and metadata of messages sent and received, recipients' phone numbers, delivery statuses. |
| Technical | Security and operational logs, IP address, access date and time. |
We do not intentionally collect sensitive personal data.
4. How we use it
- To connect your WhatsApp Business account and keep that connection working.
- To send and receive messages and manage templates on your business's behalf.
- To provide support, prevent fraud and abuse, and keep the service secure.
- To meet legal and tax obligations.
We do not sell data, do not use it for advertising and do not profile end customers.
5. Artificial intelligence
If your business turns on automated replies, conversation content is processed by artificial intelligence providers only to generate the replies for those conversations. Data obtained through WhatsApp is not used to train, develop or improve artificial intelligence models.
6. Who we share data with
- Meta / WhatsApp, to deliver messages.
- Cloud infrastructure providers that host the service.
- Artificial intelligence providers, only if your business turns on automated replies.
- Systems your own business configures (for example, a webhook).
- Authorities, when required by law or a valid order.
Providers act under contract and only on our instructions. Some may be located outside Mexico; in that case transfers are made with the contractual safeguards the law requires. One customer's data is never shared with another customer.
7. Retention
- Account and connection data: while the account is active.
- Access tokens: deleted when the account is disconnected or access is removed in Meta.
- Messages and logs: as long as needed to provide the service and resolve incidents.
- Tax and billing records: for the period Mexican law requires.
8. Security
Encryption in transit (HTTPS) and encryption of credentials at rest, per-customer isolation, and least-privilege access for staff.
9. Your rights
You may request access, correction, deletion or objection to the processing of your data (Mexico's "ARCO" rights), and withdraw your consent, by writing to privacidad@rumbocs.com with your name, the data or right concerned, and a way to verify your identity. We respond within 20 business days.
10. How to delete your data
See the data deletion instructions.
11. If you are an end customer of a business
If you received messages from a business that uses our service, that business is responsible for your data. Please contact it first; if you write to us, we will forward your request. You can also block or report the business from WhatsApp.
12. Cookies
We only use cookies needed to sign in and keep you signed in. We do not use advertising cookies or third-party trackers.
13. Minors
The service is for businesses and is not directed at minors.
14. Changes
We will publish any change on this page with its update date. For material changes we will also notify the businesses that use the service by email.