iStack Privacy Policy

Information we process

We process account and contact information, business and store settings, access permissions, orders and other records businesses enter into the platform. Technical records such as request details, authentication events and errors help operate and secure the service.

When a business connects WhatsApp through Meta, we process the selected business account and phone identifiers, display details, encrypted access credentials, message templates, message content and recipient details, incoming messages and delivery status updates.

How information is used

We use this information to authenticate users, operate stores, connect services selected by business administrators, send configured notifications, receive messages, report delivery status, provide support and protect the platform against abuse. Business administrators control their connected accounts and notification settings.

Businesses and their customers

Each business determines how it uses its customer information and is responsible for its customer notices and messaging permissions. If you are a customer of a store using iStack, contact that store about its orders, messages or use of your information. You may also contact us about information processed by the platform.

Sharing and service providers

Information is processed by the hosting, authentication and other service providers needed to operate the platform, and by integrations enabled for the business. WhatsApp messages and account operations are transmitted to Meta. Payment, email, delivery and other integrations receive the information needed for the operations requested through them. Those providers have their own privacy terms and may process information in other countries.

Information may also be disclosed where necessary to comply with applicable legal obligations or protect the security and rights of users and the service.

Storage and security

The platform uses tenant access controls and encrypted storage for integration credentials. Information is retained while needed to provide the service, resolve support and security issues, and meet applicable recordkeeping obligations. Disconnecting an integration stops future use of its saved access credentials; it does not automatically delete historical messages, orders or provider records. Backups and records required for security or legal obligations may remain after active records are removed.

Your choices and requests

Business administrators can pause WhatsApp notifications or disconnect WhatsApp in their store's WhatsApp settings, and can manage or revoke the app's access in Meta. Contact us to request access, correction or deletion of information, or to ask a privacy question. We may need to verify your identity and authority before acting. See our data-deletion instructions for the information to include in a request.

Contact

Send privacy questions and requests to admin@istack.co.za. Include the relevant business or store name. Do not send passwords, access tokens or identity documents unless a specific secure verification method has been agreed.