RealConnect CRM ("we," "our," or "us") is a WhatsApp Business CRM platform that enables businesses ("Clients") to manage customer communications, campaigns, contacts, and leads through the official Meta WhatsApp Business Platform (Cloud API).
Our platform supports WhatsApp Coexistence (simultaneous use of the WhatsApp Business App and Cloud API on the same number), Embedded Signup (Meta's official onboarding flow), Facebook/Instagram Lead Ads integration, and Meta Ads management.
This Privacy Policy describes how we collect, use, process, store, share, and protect personal data of our Clients, their end-users (consumers communicating via WhatsApp), and website visitors.
During registration: name, email address, phone number, company/business name, business address, and billing/payment details.
RealConnect CRM requests specific Meta permissions to deliver its features. Below is a complete list of each permission, the data it accesses, and how that data is used:
| Permission | Data Accessed & Purpose |
|---|---|
| public_profile | Accesses the Client's basic Facebook profile (name, profile picture) to identify the user during Embedded Signup and display their identity within RealConnect CRM. No profile data is shared with third parties or used for advertising. |
| whatsapp_business_messaging | Enables RealConnect CRM to send and receive WhatsApp messages on behalf of Clients via the Cloud API. This includes text, media (images, videos, documents), location, and contact messages. Used for real-time inbox, broadcast campaigns, template messages, and automated replies. |
| whatsapp_business_management | Enables management of the Client's WhatsApp Business Account (WABA), including: managing phone numbers, creating/editing/deleting message templates, subscribing to webhooks, reading WABA quality rating and messaging limits, and managing business profile settings. |
| whatsapp_business_manage_events | Enables subscription to WhatsApp Business webhook events, including: message received/sent/delivered/read status updates, Coexistence message echoes (smb_message_echoes), contact sync events (smb_app_state_sync), account quality updates, and template status changes. This is critical for real-time inbox functionality and Coexistence synchronization. |
| business_management | Enables management of the Client's Meta Business Portfolio (Business Manager) assets. Used to: list and verify business assets (WABAs, ad accounts, Pages) during Embedded Signup, manage system user access tokens, and verify business ownership for WABA connections. |
| pages_show_list | Retrieves a list of Facebook Pages the Client manages. Used during setup to let Clients select which Page to connect for Lead Ads integration and Click-to-WhatsApp (CTWA) ad campaigns. No Page content is read, modified, or published. |
| pages_read_engagement | Reads Page engagement metadata (Page name, category, ID) required to associate a Facebook Page with Lead Ad forms and CTWA campaigns. Used to display Page details in the CRM dashboard. No posts, comments, or visitor data is accessed. |
| pages_manage_ads | Enables management of ads linked to Facebook Pages. Used to: create and manage Click-to-WhatsApp (CTWA) ad campaigns that direct users to start a WhatsApp conversation, and connect Lead Ad forms to Pages for lead capture. |
| leads_retrieval | Enables real-time retrieval of leads submitted through Facebook/Instagram Lead Ad forms via webhooks. Lead data (name, email, phone number, and custom form fields) is captured and stored in RealConnect CRM for the Client to follow up via WhatsApp. Lead data is only used for the Client's own CRM operations and is never sold or shared. |
| ads_read | Reads ad campaign data (campaign name, status, performance metrics, ad set configuration) from the Client's connected Ad Account. Used to display ad performance analytics in the CRM dashboard alongside WhatsApp engagement data. |
| ads_management | Enables creating, editing, and managing ad campaigns in the Client's Ad Account. Used specifically for: creating Click-to-WhatsApp (CTWA) campaigns, managing Lead Ad campaigns, and pausing/resuming campaigns from within the CRM. RealConnect CRM only manages campaigns the Client explicitly creates through our platform. |
| Marketing API Access | Provides access to Meta's Marketing API for advanced ad campaign operations. Required for programmatic creation and management of CTWA and Lead Ad campaigns. Used in conjunction with ads_management and pages_manage_ads. |
When a Client enables WhatsApp Coexistence through RealConnect CRM, the following additional data is processed to maintain synchronization between the WhatsApp Business App and the Cloud API.
smb_message_echoes): Messages sent via the WhatsApp Business App are echoed to RealConnect CRM via Meta webhooks. This includes message content, sender/recipient phone numbers, timestamps, and media attachments.smb_app_state_sync): Contact information from the WhatsApp Business App (phone numbers, contact names) is synced to the CRM.We do not access or import historical chat data from the WhatsApp Business App. Synchronization begins only from the moment Coexistence is enabled.
When Clients onboard via Meta's Embedded Signup flow, we receive:
The Client explicitly grants these permissions during the Embedded Signup flow. No data is accessed without the Client's authorization.
IP addresses, browser type, device information, pages visited, features used, session duration, error logs, and performance metrics.
Meta Policy Requirement: All business-initiated WhatsApp messages sent through RealConnect CRM require prior, explicit opt-in consent from end-users.
We do not sell, rent, or trade personal data. We share data only as follows:
To be explicitly clear for Meta's review — RealConnect CRM does NOT:
leads_retrieval data for any purpose other than delivering leads to the Client who owns the Lead Ad form.Clients or end-users may also request data deletion by contacting privacy@realconnect.com.
Under applicable laws (GDPR, CCPA, Pakistan data protection regulations), individuals may:
Contact: privacy@realconnect.com (response within 30 days).
End-Users: If you communicated with a Client via WhatsApp, please contact that Client directly. RealConnect CRM processes end-user data as a Data Processor on behalf of the Client (Data Controller).
For end-user data processed via the WhatsApp Business Platform and Meta Lead Ads, RealConnect CRM acts as a Data Processor. We process data only as instructed by Clients and per our service agreement. Clients are responsible for their own lawful basis for collecting and processing end-user data.
Data may be transferred to and processed in countries outside your residence. We ensure appropriate safeguards including standard contractual clauses and data processing agreements.
Manage via browser settings. Disabling essential cookies may impair functionality.
RealConnect CRM is a B2B platform not intended for use by individuals under 18. We do not knowingly collect data from minors.
RealConnect CRM operates in full compliance with:
In compliance with Meta's platform requirements, RealConnect CRM provides a data deletion callback endpoint. When a user removes RealConnect CRM from their Facebook account, Meta sends a deletion request to our callback URL. Upon receiving this request, we initiate deletion of all data associated with that user within 30 days and provide a confirmation URL and tracking code to the user.
We may update this policy to reflect changes in practices, technology, legal requirements, or Meta policies. Material changes will be notified via email or in-platform notice at least 15 days before taking effect.
RealConnect CRM
Website: https://bharatthanani.github.io/realconnect