1. Overview
This Privacy Policy explains how [Company Name], operating Reluma (the Service), processes personal data. We aim to process the minimum necessary and to keep as much as possible under our own control.
2. Data We Process
- message content and metadata (text, voice, timestamps, delivery status);
- phone numbers of you and your contacts;
- your access key and usage and security logs.
3. Purposes and Legal Basis
- to deliver the messaging service (performance of a contract);
- to provide translation and speech-to-text (performance of a contract);
- to secure the Service and prevent abuse (legitimate interest);
- to comply with legal obligations.
4. Sub-Processors
- Meta Platforms (WhatsApp Business Platform): message delivery. Important: message content is transmitted through and processed by Meta and is not end-to-end encrypted on the business side.
- Translation and speech-to-text provider [Groq], or a self-hosted engine where configured.
- Our hosting provider [provider, region].
5. Retention
We retain message data for [retention period] and delete or anonymise it thereafter, unless a longer period is required by law.
6. Your Rights
Subject to applicable law (including the GDPR), you may request access, rectification, erasure, restriction, portability, and you may object to certain processing. To exercise these rights, contact [[email protected]].
7. International Transfers
Where data is transferred outside your region, we rely on appropriate safeguards as required by applicable law.
8. Contact
Privacy questions and data-subject requests: [[email protected]].