Scope
This policy applies to Hectacore Systems websites and products, including ConnectDesk. It covers information processed when a business connects Facebook, Messenger, Instagram, or WhatsApp.
Information we process
We process information provided by customers, authorized users, connected services, and people who communicate with a connected business.
- Business and account details, including names, email addresses, roles, and organization information.
- Meta business, Page, Instagram account, WhatsApp account, and phone number identifiers.
- Contact and profile information made available through the connected Meta service.
- Messages, media, comments, mentions, templates, delivery states, read states, and timestamps.
- Connection credentials, permission status, webhook events, security records, and service logs.
ConnectDesk uses Meta authorization. We do not ask customers for their Facebook, Instagram, or WhatsApp passwords.
How we use information
- Connect and operate authorized communication channels.
- Show conversations and customer context in a shared inbox.
- Send replies, templates, service messages, and approved campaigns.
- Route work, manage leads, measure service, and maintain conversation history.
- Protect accounts, investigate errors, prevent misuse, and support customers.
- Meet legal obligations and enforce our terms.
How information is shared
Information may be shared with Meta when an authorized user sends a message or manages a connected channel. It may also be available to authorized members of the customer organization and to service providers that help us host, secure, and operate the service.
We do not sell personal information or use connected Meta data for third party advertising.
Retention
We retain information while an account is active and for as long as it is needed to provide the service, maintain business records, resolve disputes, meet legal obligations, and protect the service. Removing a channel stops new activity, but conversation history may remain until the customer requests deletion or its retention period ends.
When deletion is required, information is deleted or deidentified without undue delay. Limited records may remain in backups until they expire through the normal backup cycle, or where retention is required for legal or security reasons.
Security
We use access controls, encrypted credential storage, audit records, and operational safeguards appropriate to the information we process. No system can guarantee absolute security.
Your choices
A customer administrator can remove a Meta channel in ConnectDesk under Settings, then Channel accounts. Access can also be revoked through Meta Business Integrations. A removal stops future channel activity.
To request access, correction, or deletion, follow our Meta data deletion instructions or email support@hectacore.com. We may verify the requester and the business relationship before acting.
International processing
Our customers, providers, and connected platforms may operate in different countries. Information may therefore be processed outside the country where it originated, subject to applicable safeguards.
Children
Our services are built for businesses and are not directed to children.
Changes and contact
We may update this policy as our products or legal obligations change. The effective date above identifies the latest version.
For privacy questions, contact Hectacore Systems at support@hectacore.com.