Privacy Policy
Last updated: October 23, 2026
Crécima Inbox is a service provided by Agencia Crécima SRL that lets businesses manage their WhatsApp Business account from an inbox shared by their team. This policy explains what data we process, why, and how you can exercise your rights. If you received a message from a business that uses Crécima Inbox, see the section "If you received a message from a business".
Data we process
- Customer business and user data: name, email, role and password (stored encrypted).
- WhatsApp Business account data: account (WABA) and phone number identifiers, and the access token granted by Meta (stored encrypted).
- Conversations: contacts' phone numbers and profile names, messages, files sent and received, and delivery statuses.
- Contact data the customer business uploads: name, WhatsApp number, email, CUIT (tax ID), custom fields and lists.
- Campaign data: each contact's promotion subscription status, with its history (date, source and evidence declared by the business), and send results.
- Records of acceptance of the terms and of campaign declarations: user, date, IP address, browser and version of the text.
- Technical data: IP address, activity and error logs needed for security and to run the service.
How we use it
We use data only to provide the service: receiving and sending WhatsApp messages, showing them to the business's team, providing support, keeping the service secure and meeting legal obligations.
We do not sell personal data or use message content for advertising.
Who is responsible for each piece of data
Each customer business is responsible for its own contacts' data and for having their consent to communicate with them and send them promotions. Agencia Crécima SRL processes that data on the business's behalf, only to provide the service, under the Data Processing Agreement (https://crecimainbox.com.ar/tratamiento-de-datos?lang=en).
Who we share it with
- Meta Platforms (WhatsApp Business Platform), which carries the messages.
- Infrastructure providers: servers, database and file storage.
- Integrations the customer business chooses to enable, such as its online store or an automated assistant.
We do not share data with other third parties unless required by a competent authority.
How long we keep it
For as long as the business account is active. If the business cancels or requests deletion, we delete its data within 30 days, except what we must keep by law (for example, billing records).
Records of acceptance of the terms and of campaign declarations are kept for up to five years after cancellation, so they can be proven in a claim or before an authority.
Security
Data is encrypted in transit (HTTPS), tokens and passwords are stored encrypted, each business's information is isolated from the others, and each user's access depends on their role.
Your rights
You can request access to, correction of, or deletion of your data by writing to [email protected]. For deletion, follow the steps at https://crecimainbox.com.ar/eliminacion-de-datos?lang=en.
The Argentine Agency for Access to Public Information (AAIP), the supervisory authority under Personal Data Protection Law 25,326, handles complaints about breaches of personal data protection rules.
If you received a message from a business
The business that wrote to you is responsible for your data and for having asked your permission. To stop receiving its promotions, reply 'BAJA' in that chat. To access your data, correct it or ask for it to be deleted, write to that business; if it does not reply, write to us at [email protected] and we will pass the request on.
Changes to this policy
If we change this policy, we will publish the new version on this page with its update date.