Privacy policy

Last updated: September 2026

Salvo ("we", "us") provides a shared WhatsApp inbox for businesses at app.salvobulk.com. This policy explains what data we handle, why, and what control you have over it. It covers two groups of people: our customers (the businesses that use Salvo and their team members), and their customers (the people who message those businesses on WhatsApp).

Our role

For conversations and customer records, the business using Salvo decides what is collected and why. It is the data controller, and we process that data on its behalf and on its instructions. For the business's own account details (logins, team members, billing contacts), we are the controller.

Data we handle

• Conversation data. Messages exchanged through the WhatsApp numbers a business connects to Salvo, including text, photos, voice notes and documents, plus timestamps and delivery status.
• End-customer contact details. The WhatsApp phone number or identifier of each person who writes in, and any customer records (names, codes and other fields) the business imports or adds. Phone numbers are hidden from agents inside the inbox.
• Account data. Names, usernames and hashed passwords of managers and agents, their roles and permissions, and records of who handled, assigned or resolved each conversation.
• Technical data. Log data such as IP address, browser type and error logs, used to operate and secure the service.

How we use it

• To deliver the service: receiving and sending WhatsApp messages, routing conversations to agents, and showing history and reports to the business.
• To keep the service secure, to investigate abuse, and to fix problems.
• To communicate with our customers about their account, the service and billing.

We do not sell personal data, and we do not use conversation content for advertising.

Sharing

Messages are carried over WhatsApp's network and are also subject to WhatsApp's own terms and privacy policy. We use hosting and infrastructure providers to run Salvo, and they process data only as needed to provide their services to us. We may disclose data if the law requires it.

Retention

Conversation data and customer records are kept for as long as the business keeps its Salvo account, or until the business deletes them. After an account is closed, we delete its data from active systems within a reasonable period. Encrypted backups are kept for a short, limited time and then overwritten.

Security

Access to Salvo requires authentication, and permissions are set per role. Data is encrypted in transit, and backups are encrypted. Agents cannot see end-customers' phone numbers. No system is perfectly secure, but we work to protect the data we hold.

Your rights

If you message a business that uses Salvo, please contact that business first. It controls your data and can access, correct or delete it. We will help it respond. Businesses and their team members can contact us directly about their account data.

Changes

We may update this policy. The date at the top shows the latest version.

Contact

For privacy questions or requests, contact us on Telegram at t.me/salvobulk.