FusionWA

Privacy policy

Last updated: 17 October 2026

1. Data controller

FusionWA is a Fusionsoft product. The data controller is Fusion Media di Luca Gabriele Pantea, P.IVA 13148540969 (Italy). For any request about your data, contact us via the contact form at fusionsoft.it.

2. Data we process

  • Account: company name, email, password (stored only as a cryptographic hash), sign-up date.
  • Billing: payments are handled by Stripe. We store Stripe customer and payment-method identifiers, never card details.
  • WhatsApp connections: WhatsApp Business account identifiers, connected phone number and access tokens (encrypted). Messages pass through the platform to the customer's webhook and are not archived, except temporary copies of events that could not be delivered, kept for troubleshooting and redelivery.
  • Security and sign-up attribution: for every sign-up and login attempt we record IP address, user agent, browser language and time zone, referring page and campaign parameters (UTM), and the time taken to fill in the form.
  • Service usage: key account actions (e.g. creating an application, connecting a number, first message sent) for support and product improvement.
  • Server logs: IP address, requested page, date and user agent of each request, as with any website.
  • Site statistics: collected with Umami, hosted on our own servers, without cookies and without storing IP addresses.
  • Session recordings and heatmaps: only if you consent in the cookie banner. We record how you browse (movements, clicks, scrolling, pages) with form fields masked.

3. Purposes and legal bases

  • Providing the service and managing your account and payments: performance of a contract (Art. 6(1)(b) GDPR).
  • Tax and accounting obligations: legal obligation (Art. 6(1)(c)).
  • Security, prevention of abuse and automated sign-ups, anonymous statistics and acquisition-channel measurement: legitimate interest (Art. 6(1)(f)).
  • Session recordings and heatmaps: consent (Art. 6(1)(a)), which you can withdraw at any time from the cookie policy.

4. Who we share data with

  • Hostinger: provider of the servers running the service.
  • Stripe: payment processing.
  • Meta Platforms (WhatsApp Business Platform): when you connect a number and send or receive messages through the service.

Stripe and Meta may transfer data outside the European Union under the safeguards required by the GDPR (EU-US Data Privacy Framework or standard contractual clauses). We do not sell data to third parties.

5. Retention

  • Account data: as long as the account is active.
  • Tax records: 10 years, as required by law.
  • Security and sign-up attribution data, account activity history: 12 months.
  • Server logs: about 14 days.
  • Session recordings: 30 days.

6. End customers of our customers

For end-customer data that businesses manage through FusionWA (WhatsApp numbers and messages), the business is the controller and FusionWA acts as a processor on its behalf. A data processing agreement (DPA) is available on request.

7. Your rights

You can request access, rectification, erasure, restriction and portability of your data, and object to processing based on legitimate interest (Arts. 15-22 GDPR), via the contact form at fusionsoft.it. You can also lodge a complaint with your data protection authority (in Italy: Garante per la protezione dei dati personali, garanteprivacy.it).