Last updated: 2026-08-08
Balasa processes WhatsApp messages solely to generate AI-powered draft replies for customer service agents. All message content is encrypted using AES-256-GCM. Balasa does not sell, share, or use customer message data for training or marketing purposes.
Encrypted message content is retained for 365 days by default. Metadata (timestamps, direction, channel) is retained for analytics and reporting. All data is stored in ISO 27001-compliant cloud infrastructure.
End users may request access, correction, or deletion of their data by contacting the business that uses Balasa. Balasa processes data as a data processor on behalf of businesses.
All message content is encrypted at rest (AES-256-GCM) and in transit (TLS 1.3). Access to decrypted content requires multi-factor authentication and is fully audited.
Email: privacy@balasa.ai