Last updated: 4 November 2026
Who we are
Pipa Bookings is operated by SECLUDED VISION LTDA (CNPJ 65.080.976/0001-67), Rua São Paulo, 3366, Blumenau, Santa Catarina, 89030-000, Brazil. Contact: simon@secludedvision.com.
Pipa Bookings lets local businesses ("Businesses") take bookings and talk to their customers over WhatsApp. For the data of a Business's customers, the Business is the controller and we process it on its behalf. For the accounts of Business owners and staff, and for the data in this policy about Meta, we are the controller.
What data we process
- From Facebook Login for Business (Embedded Signup): when a Business owner connects WhatsApp, Meta gives us the IDs of the business portfolio, WhatsApp Business account and phone number they chose, and an access token for that account. We do not receive or store the owner's Facebook password, friends, posts or profile.
- Customers of a Business: phone number, WhatsApp profile name, the messages exchanged with the Business's WhatsApp number, bookings, and notes the Business adds.
- Business owners and staff: name, phone number, role, and a record of the changes they make.
- Technical data: sign-in sessions, delivery statuses of messages, and request logs used for security and troubleshooting.
How and why we use it
- To send and receive WhatsApp messages for the Business: replies, booking confirmations, reminders and sign-in codes.
- To answer customers with an AI assistant: the conversation and the Business's services and opening hours are sent to OpenAI to write a reply. OpenAI does not use this data to train its models.
- To show the Business its bookings and conversations in its admin.
- To keep the service secure, prevent abuse and fix problems.
We do not sell data, use it for advertising, or build profiles of people. We use data from Meta only to provide the WhatsApp connection the Business asked for.
How long we keep it
- WhatsApp access tokens: until the Business disconnects WhatsApp or leaves, then deleted at once.
- Request logs and AI call records: 90 days.
- Customer, booking and message data: for as long as the Business uses Pipa Bookings, unless the Business or the customer asks us to delete it sooner.
Your rights and deleting your data
You can ask to access, correct, export or delete your data, and you can withdraw consent, under the Brazilian General Data Protection Law (LGPD) and other laws that apply to you.
- Customers of a Business: ask the Business, or email us at simon@secludedvision.com with your phone number.
- Business owners: disconnecting WhatsApp deletes the access token. You can also remove Pipa Bookings in Facebook under Settings → Apps and Websites, or follow the steps on our data deletion page.
We answer within 15 days.
Security
Data is encrypted in transit. Access tokens are stored encrypted, and each Business can only see its own data.
Changes
We will update the date above when this policy changes, and tell Businesses of significant changes.