This addendum explains the data processing structure Buddy should cover for customer personal data, including roles, instructions, subprocessors, transfers, security, retention, and deletion.
Permission-based. Built on the official WhatsApp Business Platform.
Today
Hi Ada, the new set is live
You asked us to tell you first: 20% off until midnight. Want the code?
9:41 AM
Yes, send it
9:41 AM
Scope
Processing may include subscriber, consent, campaign, message, event, engagement, workspace, integration, support, and billing-related data.
Processing terms
Customer instructions
Customers control the personal data they add to Buddy and are responsible for having the right permissions and lawful basis to use it.
Security measures
Buddy should describe technical and organizational measures for access control, encryption, logging, tenant isolation, incident handling, and vendor management.
Subprocessors
Buddy may use providers to host, secure, operate, analyze, and support the product. The Subprocessors page should list exact providers before launch.
Retention and deletion
The DPA should explain how customer data is retained, exported, deleted, or returned when requested or when an account ends.