Messivo

Privacy policy

Last updated: September 3, 2026

This policy describes how personal data is processed within Messivo, the WhatsApp Business Cloud API management platform developed and operated by Key Interactive.

Data controller

Key Interactive — sole proprietorship
Via Aldo Moro 45, int. 122, 30020 Quarto d'Altino (VE), Italia
VAT number 04987210277
Email: info@keyinteractive.it

Data we process

For account access and management, we process:

• Identifying data of the Key Interactive (KI Accounts) account you sign in with — display name, email, account identifier.
• Tenant data (your business/workspace): company name, subscription status, connected WhatsApp number.
• Technical connection data (IP address, device information used to sign in) required for authentication and access security.

For the service to work, we also process data that you (or whoever uses your account) enter or that passes through the platform:

• The contact list managed through Messivo: phone number, first name, last name, address and notes you choose to record.
• WhatsApp conversation content: text, media (images, documents) and related metadata (delivery/read status, timestamps) exchanged through the connected number.
• Message templates created for sending via WhatsApp.

Purposes and legal bases

Data is processed to provide the service (managing access, the WhatsApp integration, conversations and templates), to ensure the security and correct operation of the platform, and to comply with legal obligations. Processing is based on the performance of the service contract, compliance with legal obligations, and, where applicable, consent.

Third parties involved

To provide the service we rely on the following third parties, each within the scope of their own purposes:

• Meta Platforms Ireland Limited — receives and delivers messages through the WhatsApp Business Cloud API; Meta's processing of data is governed by Meta's own terms and privacy notices.
• Key Interactive (KI Accounts) — manages your account's identity and authentication.
• Hosting and technical infrastructure providers responsible for the maintenance and security of our systems, to the extent necessary to provide the service.

Data retention

We keep data for the duration of the subscription and for 12 months after the service ends, unless a different period is required by legal, security or dispute-handling obligations. You can request early deletion of specific data at any time — see the Data deletion page.

Your rights

You can request access, rectification, erasure, restriction, objection and portability of your data at any time by writing to info@keyinteractive.it. You also have the right to lodge a complaint with the competent data protection authority.

Security

We adopt appropriate technical and organizational measures to protect the data we process, including keeping each client company's data isolated from every other's.

Changes to this policy

We may update this policy from time to time. The "last updated" date at the top of the page reflects the current version.

This page is an operational draft and must be reviewed by the controller or a legal/privacy advisor before final publication.