Privacy Policy

1. Who we are

ITL Global Technologies, Inc. ("ITL", "we", "us") is located at 3753 Howard Hughes Parkway, Suite 200, Las Vegas, NV 89169, United States. For privacy questions, contact [email protected].

2. Scope and roles

This policy applies to our website, forms, support, professional services, and solutions that connect business systems with messaging channels. When we process data under a business customer's documented instructions, we generally act as its service provider or processor; that customer determines the essential purposes and means of processing. We act as controller for our own website, support, and business relationship activities.

3. Data we may process

• Contact and account data, such as name, company, role, email, and telephone number.
• Business customer, authorized-user, configuration, permission, and protected technical credential data.
• Messaging data, such as phone numbers, WhatsApp Business identifiers, templates, message content and attachments, delivery events, consent, and preferences.
• Operations and support data, such as tickets, technical logs, IP address, device, browser, timestamps, errors, and audit data.
• Commercial, contractual, billing, and payment information. We do not store full card numbers when payment is handled by an authorized processor.
• Cookies and similar technologies needed to operate, secure, and analyze the website.

4. How we use data

• Provide, configure, secure, and maintain services.
• Authenticate users, administer permissions, and prevent fraud or abuse.
• Deliver requested communications, operate WhatsApp Business workflows, and provide support.
• Measure performance, diagnose failures, and improve products and processes.
• Manage contracts, billing, and permitted business communications.
• Meet legal, regulatory, and contractual obligations and protect our rights.

We do not sell personal data.

5. WhatsApp Business and third parties

Messaging solutions may require us to share data with the relevant business customer and providers needed to deliver the service, including Meta Platforms/WhatsApp, Gupshup/OneDirect, Odoo, and cloud, telecommunications, security, support, and payment providers. Each third party processes data under its own terms and policies or applicable contractual obligations. Customers must have a valid legal basis and required consent to contact their users and must comply with WhatsApp policies and applicable law.

6. Legal bases

Depending on the context and applicable law, we process data to perform a contract or answer a request, comply with law, pursue legitimate interests involving security and operations, or based on consent where required. Consent may be withdrawn without affecting processing that was lawful before withdrawal.

7. Retention

We retain data only as long as necessary to deliver services, fulfill contracts and documented customer instructions, resolve disputes, and meet legal, accounting, and security obligations. Specific periods depend on the contracted service and configuration. When deletion applies, data is deleted or de-identified in active systems; protected backups expire under their normal cycles and are not restored for routine use.

8. Security

We use reasonable administrative, technical, and organizational safeguards, including access controls, authentication, encryption where appropriate, logging, backups, and incident management. No system is completely secure, and customers must also protect their accounts, devices, keys, and users.

9. International transfers

ITL and its providers may process data in the United States, Mexico, Brazil, and other countries where our providers operate. We use contractual safeguards and appropriate measures where required by law.

10. Rights and deletion

Subject to applicable law, you may request access, correction, deletion, portability, restriction, or objection and may withdraw consent. If a request concerns data controlled by an ITL customer, we may refer the request to that customer. See our data deletion instructions or email [email protected]. We verify identity before fulfilling requests that could affect another person's data.

11. Children

Our business services are not directed to children, and we do not knowingly collect their data without appropriate legal authorization.

12. Changes

We may update this policy to reflect legal, technical, or operational changes. We will post the current version and effective date on this page.