Privacy Policy
1Introduction
OneClick / The1.Click ("OneClick", "we", "our", or "us"), operated by OneClick Technology, provides a business-to-business (B2B) software-as-a-service platform for WhatsApp customer engagement, including campaign management, message templates, contact management, a shared inbox, and analytics. This Privacy Policy explains how we collect, use, and safeguard information when you use our services, including integrations with the WhatsApp Business Platform (provided by Meta) and optional Google integrations.
By using our services, you agree to the collection and use of information in accordance with this Privacy Policy.
2Data We Process
Depending on how you use the platform, we may process the following categories of data:
- Account data: Name, email address, phone number, password (hashed), and role.
- Tenant / business profile data: Business name, business details, workspace settings, and team membership.
- Contact data: Contacts uploaded, imported, or synced by you as our customer, including names, phone numbers, attributes, tags, and segments.
- WhatsApp Business Account data: Business ID, WhatsApp Business Account (WABA) IDs, and WhatsApp phone numbers linked to your business.
- Message templates: Template content, categories, languages, and approval statuses.
- Campaign data: Campaign configurations, audiences, schedules, and results.
- Message logs and delivery statuses: Sent, delivered, read, failed, click, and cost events.
- Webhook events: Events received from Meta / WhatsApp (such as inbound messages, status updates, and template status changes).
- Media metadata: Metadata about media files sent or received through the platform.
- Integration tokens and credentials: Access tokens for Meta / WhatsApp and optional Google integrations, stored encrypted.
- Google Sheets data: Contact fields you choose to import or sync when you connect Google Sheets (see Section 6).
- Billing data: Subscription, invoicing, and payment-related records, where applicable.
- Security, log, and audit data: IP address, browser type, access times, usage statistics, and audit trails of account activity.
- Cookies: We use cookies to operate the service (such as session cookies) and to enhance your experience. You can disable cookies in your browser, but some features may not function properly.
3How We Use Information
We use the collected data to:
- Deliver, secure, and improve our services.
- Verify and manage WhatsApp Business Accounts.
- Send, track, and analyze WhatsApp campaigns and conversations.
- Provide campaign performance reports and analytics.
- Enable integrations you explicitly authorize (e.g., Google Sheets).
- Provide billing, support, and account administration.
- Detect, investigate, and prevent abuse, fraud, and security incidents.
We do not use your data for unrelated advertising, profiling, or resale.
4Meta / WhatsApp Data Access and Use
Our platform integrates with the WhatsApp Business Platform provided by Meta. When you connect your WhatsApp Business Account, we may access and process the following:
- Business ID and WABA ID.
- WhatsApp phone numbers linked to your business.
- Message templates used for campaigns and their approval statuses.
- Messages sent and received through the platform, with delivery analytics (sent, delivered, read, clicked, cost).
- Webhook events delivered by Meta for your account.
Important Notes
- We do not collect personal Facebook data (friends, photos, posts, or profile details).
- Data is used only to verify WABA ownership, deliver and manage messaging, and generate analytics reports.
- All Meta access tokens are stored encrypted and access to them is restricted.
- WhatsApp and Meta-related data is shared only with the service providers needed to operate the service (see Section 8), with Meta itself as required to provide WhatsApp messaging, or when required by law.
5WhatsApp Messaging Consent
Businesses using OneClick are responsible for ensuring that every contact uploaded, imported, or messaged through the platform has provided valid opt-in consent to receive WhatsApp messages from that business. Customers must not use purchased, scraped, rented, harvested, or otherwise unauthorized contact lists.
As our customer, you are responsible for maintaining records of consent and for honoring opt-out, unsubscribe, block, deletion, and suppression requests from your contacts. See our WhatsApp Compliance page and Terms of Service for details.
6Google User Data Access
OneClick provides optional integrations with Google Sheets to import or sync contact data.
- We only access spreadsheets you explicitly select.
- If you import or sync contacts from Google Sheets into OneClick, we store the selected contact fields in your account to provide the service.
- We do not access unrelated Google Drive files.
- You may disconnect Google access at any time from your OneClick settings or your Google Account settings, and you may request deletion of imported data.
7Data Retention
We retain data for as long as it is needed to provide the service, as summarized below:
| Data Category | Retention |
|---|---|
| Account data | Retained while your account is active. |
| Contacts | Retained until deleted by you or until account closure. |
| Campaign and message logs | Retained for analytics, troubleshooting, audit, and compliance purposes, unless deleted or subject to a configured retention period. |
| Webhook events | Retained only as needed for processing, troubleshooting, security, and audit. |
| Meta / WhatsApp credentials and tokens | Retained until the integration is disconnected, rotated, expired, or your account is deleted. |
| Google Sheets data | Imported contact fields are stored in your account until you delete them, disconnect the integration and request deletion, or close your account. |
| Billing and legal records | Retained as required by applicable law. |
| Backups | Deleted according to our backup lifecycle. |
You may request deletion of your data by contacting support@the1.click, and we will respond within 30 days.
8Subprocessors and Service Providers
We rely on a limited set of service providers to operate the platform. Data is shared with them only as needed to provide the service, under appropriate safeguards:
- AWS (Amazon Web Services): Hosting, database, storage, and logs.
- Meta / WhatsApp: WhatsApp Business Platform messaging.
- Google: Optional Google Sheets integration, when you connect it.
- Email provider: Transactional and support emails, where used.
- Payment provider: Billing and payment processing, where used.
- Analytics / monitoring providers: Service performance and error monitoring, where used.
9Data Security
- All tokens and credentials from Meta and Google APIs are stored encrypted.
- Access to data is restricted to authorized systems and personnel.
- We maintain security and audit logs of account activity.
- While we apply industry-standard security measures, no method of storage or transmission over the internet is 100% secure.
10Data Sharing
We do not sell or rent your data. Data is shared only:
- With the service providers needed to operate the service (see Section 8), under appropriate safeguards.
- When required by applicable law, regulation, or valid legal process.
- With your explicit consent or at your direction.
11Your Rights and Controls
Subject to applicable law, you can:
- Access the data we hold about you and your account.
- Correct inaccurate data.
- Export your data.
- Delete contacts, campaigns, and other data from within the platform.
- Disconnect the Meta / WhatsApp integration.
- Disconnect the Google integration.
- Close your account.
- Request deletion of your data by emailing support@the1.click.
Where we process personal data of your contacts on your behalf, you act as the data controller (or "business") and OneClick acts as the data processor (or "service provider"). Requests from your contacts about their data should be directed to you as the responsible business; we will assist you in fulfilling them.
12Account and Integration Deletion
You can request account deletion by emailing support@the1.click from the email address associated with your account. When your account is deleted:
- Meta / WhatsApp credentials and tokens are deleted and the integration is disconnected.
- Google integration tokens are deleted and imported Google Sheets contact data is removed with your account data.
- Contacts, campaigns, templates, and message logs associated with your account are deleted, except where retention is required by law (e.g., billing records).
- Residual copies in backups are removed according to our backup lifecycle.
13Children's Privacy
Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal data from children. If we become aware of such data, it will be deleted immediately.
14Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised "Last Updated" date.