Privacy Policy

Last updated: 13 November 2026

Comzun (“we”, “us”) is a WhatsApp customer-messaging and team-inbox service operated by Ozzun Solutions, Pakistan. Businesses (“customers”) use it to talk to their own clients on WhatsApp through Meta’s official WhatsApp Business Platform (Cloud API). This policy explains what data we process and why.

1. Data we collect

• Account data: business name, the names, email addresses and phone numbers of workspace users, and a hashed password.
• Business profile: answers to the signup questionnaire (industry, company size, website, goals).
• WhatsApp connection data: when a business connects its number with “Connect with Facebook”, we receive its WhatsApp Business Account ID, phone number ID, display number and an access token from Meta. The token is stored encrypted (AES-256-GCM).
• Messaging data: contacts the business adds or imports (name, phone number, opt-in status, custom fields), WhatsApp messages and media sent and received through the business’s number, delivery and read statuses, message templates, campaign results and internal notes written by the business’s staff.
• Coexistence data: if a business keeps using the WhatsApp Business app on its phone, Meta shares the app’s contacts, recent chat history and messages sent from the app, so the business sees one complete inbox.
• Technical data: sign-in times and “last seen” presence of staff (used to assign chats to online agents), and standard server logs.

2. How we use it

• To provide the service: show the inbox, send and receive WhatsApp messages, run campaigns and auto-replies the business configures, and assign chats to its staff.
• To enforce WhatsApp rules, such as the 24-hour customer-service window and marketing opt-in.
• To manage the business’s plan, trial and usage limits, and to send account emails such as password resets.
• For security, abuse prevention and support.

We do not sell personal data, and we do not use message content for advertising.

2a. The Android app

• The Comzun Android app opens the same secure service (app.comzun.com); it stores your sign-in on the device so you stay logged in.
• Notifications: if you allow them, we send a push notification when a new customer message arrives. You can turn this off in Android settings.
• Camera, microphone, photos and files: used only when you choose to send a photo, document or voice note in a chat. Nothing is recorded or uploaded in the background.
• The app contains no advertising and no third-party analytics or tracking SDKs. Data is encrypted in transit (HTTPS).

3. Roles

For the messages and contacts of a business’s own clients, the business is the data controller and we act as its processor. Each business is responsible for having a lawful basis and opt-in to message its clients.

4. Who we share data with

• Meta Platforms — to deliver WhatsApp messages through the WhatsApp Business Platform. Meta’s own terms and privacy policy apply to WhatsApp.
• Cloudflare — hosting, database and file storage for the service.
• Email provider — only to send account emails such as password resets.
• Google Analytics — only on our marketing website comzun.com, and only after you accept the cookie banner, to count visits and clicks on buttons such as “Start free trial”. It is not used inside the Comzun app and never receives your chats or contacts.
• Authorities, if the law requires it.

5. Facebook / Meta data

When you use “Connect with Facebook” we only request the WhatsApp Business permissions needed to connect your WhatsApp number (whatsapp_business_management and whatsapp_business_messaging). We do not access your personal Facebook profile, friends or posts.

6. Security

Data is isolated per business workspace. Access tokens are encrypted at rest, passwords are hashed, and all traffic uses HTTPS. Staff of a business only see the chats their role allows.

7. Retention

We keep a workspace’s data while its account is active. Users can delete their account in the app (Settings → Delete account); a workspace admin deleting the workspace removes its data immediately, and any copies in logs or backups are cleared within 30 days, except where the law requires us to keep records longer.

8. Your rights

You can ask to see, correct or delete your personal data. If you are a client of a business that uses Comzun, please contact that business first; you can also email us and we will pass your request on. See Data deletion.

9. Changes

We may update this policy and will change the date above when we do.

Questions? Email ozzunsolutions@gmail.com.