Privacy Policy

Last updated: 15 September 2026

Foundry Connect ("Connect") is a service operated by Technology Foundry (مسبك التكنولوجيا) ("Technology Foundry", "we", "us"). Connect lets businesses that use a Foundry product send and receive WhatsApp messages from their own WhatsApp Business Account through the WhatsApp Business Platform provided by Meta Platforms, Inc. ("Meta"). This policy explains what Connect processes and why.

Who this applies to

• Business customers: businesses that connect their WhatsApp Business Account to a Foundry product through Connect.
• End users: people who exchange WhatsApp messages with a business customer.

What we process

For business customers, Connect stores:

• Identifiers issued by Meta: WhatsApp Business Account ID, phone number ID, Business Portfolio ID, and the display phone number and verified business name.
• An access token that Meta grants to Connect for the business customer's WhatsApp Business Account. Tokens are encrypted at rest and are never shown in any interface or log.
• Account status information sent by Meta, such as quality rating, messaging limits, account review status, and template approval status.
• The name and internal identifier of the business customer as provided by the Foundry product they use.

For end users, Connect processes but does not store message content:

• When a message is sent or received, Connect passes it between Meta and the Foundry product that owns the business customer. Message bodies, media, and contact profile names are not written to Connect's database.
• Connect keeps only routing metadata: Meta's message ID, the phone number ID involved, the direction, delivery status, error codes, and timestamps.

Why we process it

• To connect a business customer's WhatsApp Business Account to a Foundry product.
• To deliver messages between end users and the business customer.
• To manage message templates on behalf of the business customer.
• To monitor account health and respond to enforcement notices from Meta.

Who we share it with

• Meta, to operate the WhatsApp Business Platform. Meta's handling of data is governed by its own terms and privacy policy.
• The Foundry product that the business customer uses (for example, Lotus or Escala). Message content is forwarded to that product, which is responsible for it under its own privacy policy.
• Infrastructure providers that host Connect (Convex and Vercel), under contracts that restrict them to processing data on our behalf.

We do not sell personal data and do not use it for advertising.

How long we keep it

• Business customer identifiers, tokens, and account status: for as long as the business customer's account remains connected, and up to 30 days after disconnection.
• Routing metadata for messages: up to 90 days.
• Message content: not stored.

Your rights

Depending on where you live, you may have the right to access, correct, delete, or restrict the processing of your personal data. End users should direct requests to the business they messaged, since Connect does not hold their message content. Business customers can disconnect their WhatsApp Business Account at any time from within their Foundry product or by removing the Foundry Connect app in Meta Business Manager. See our data deletion instructions.

Security

Access tokens are encrypted at rest. All traffic between Connect, Meta, and Foundry products uses HTTPS, and every webhook and event is cryptographically signed and verified.

Contact

Technology Foundry (مسبك التكنولوجيا)
seifallah@thefoundry.run

Changes

We may update this policy from time to time. The date at the top shows when it was last changed.