Privacy Policy

Utopy is a business-to-business tool. Each customer (a “workspace” or “tenant”) uses Utopy to manage its own contacts, conversations, campaigns, and leads. Data belonging to one workspace is isolated from every other workspace.

Account data. Name and email of the people you invite to your workspace, used for sign-in and access control.

CRM data. Contact records (name, email, phone, tags, custom fields), conversations, opportunities, and campaign data that you or your leads provide.

Facebook / Meta data. When you connect a Facebook Page, we access, on your behalf and with your authorization, your list of Pages and the lead information submitted through your Lead Ads instant forms (name, email, phone, and the answers to your form fields). We store a Page access token to keep this connection working.

WhatsApp data. If you connect WhatsApp, the messages and phone numbers exchanged with your leads, to power your inbox and automations.

Usage data. Basic technical logs (IP address, browser type, timestamps) needed to operate and secure the service.

We use the data solely to provide the service you asked for: importing your leads into your CRM, sending your campaigns, powering your conversations and automations, and securing your account. We do not sell your data, and we do not use Meta Platform Data for any purpose other than delivering the features you enabled inside your workspace.

Utopy is a Meta Tech Provider: we give our business customers access to the WhatsApp Business Platform so they can message their own leads and customers. When a customer connects a WhatsApp number, Utopy processes the messages, phone numbers, and profile names exchanged on that number on behalf of that customer, solely to deliver the inbox, replies, and automations they enabled.

We use WhatsApp data only to provide these features. We do not use it for advertising, we do not sell it, and we do not share it with third parties other than the subprocessors listed below that help us run the service. Our use of the WhatsApp Business Platform complies with Meta’s WhatsApp Business Terms and Messaging Policy.

We rely on a small set of subprocessors to run Utopy: Supabase (database and authentication), Railway (hosting), Resend (email delivery), and Meta (Facebook/Instagram/WhatsApp integrations). Each processes data only to provide its service to us.

We keep your data for as long as your workspace is active. You can delete individual records at any time from the app. When a workspace is closed, its data is deleted. See Data Deletion for how to request removal.

You can access, correct, export, or delete your data from within the app, or by emailing us. You can disconnect Facebook at any time from your workspace settings or from your Facebook account’s Business Integrations settings, which revokes our access immediately.

Access to each workspace’s data is enforced at the database level (row-level security), so a workspace can only ever read or write its own data. Access tokens are stored server-side and never exposed to other workspaces.

We may update this policy as the product evolves. Material changes will be reflected here with a new “last updated” date.

Wilecom — Utopy Platform. wilcampg@gmail.com