Privacy Policy

1. Who we are and what this policy covers

WACC 360 (the "Platform") is a business commerce operating system operated by BPB Global Enterprise ("we", "us", "our"). The Platform provides WhatsApp-based business messaging, CRM and customer intelligence, AI agents and AI-generated insights, storefronts and commerce, B2B quote and procurement workflows, lot verification and trust infrastructure, partner, affiliate and white-label programs, and payment facilitation tools.

This Privacy Policy explains what personal and business data we collect through the Platform and our public pages, how we use it, with whom we share it, and the choices you have. It applies to Platform account holders ("Users"), their customers and contacts ("End Contacts"), visitors to our landing pages and storefronts ("Visitors"), and applicants to our partner, affiliate and white-label programs ("Applicants").

2. Information we collect

• •Account data: name, email, password (hashed), phone number, business profile, role, language and currency preferences.
• •Conversation data: messages, media and metadata processed through connected business messaging channels (including WhatsApp Business via authorized providers), together with AI-generated summaries, lead scores and insights derived from them.
• •Contact and CRM data: contact details, lead status, notes, appointments and order history that Users create or import for their own customers.
• •Commerce and payment data: storefront orders, quotes, procurement orders, invoices, payment requests and transaction records processed through connected payment providers.
• •Program data: partner applications (KYC information where submitted), affiliate referral activity, commissions and payout details, and white-label brand configurations.
• •Prospecting and enrichment data: publicly available business information and business contact emails discovered or verified through third-party enrichment tools integrated via automation workflows. We do not fabricate contact information; enrichment results are sourced from third-party providers and labeled with their verification status.
• •Verification data: lot passports, certificates of analysis, test results and verification code lookups submitted by Users or checked by buyers.
• •Technical data: IP address, device and browser information, log data, and in-app analytics events (e.g., page views, feature usage).

3. How we use your information

• •To provide, operate and secure the Platform and its features.
• •To route messages, generate AI replies, lead scores, briefings and business insights for Users about their own conversations and data.
• •To process orders, quotes, approvals and payments, and to track partner commissions and affiliate referrals.
• •To verify product lots, maintain trust records and support compliance screening.
• •To communicate with you about your account, security, and — with your consent where required — product updates and marketing.
• •To detect, prevent and address fraud, abuse and misuse of the Platform.

4. AI processing

Parts of the Platform are powered by artificial intelligence, including conversational agents, reply drafting, lead qualification, scoring and business intelligence summaries. These features process the conversation and business data you or your Users provide in order to generate outputs.

AI outputs are assistance tools, not professional advice of any kind. Our sales-facing AI agents operate under strict research-use-only guardrails: they do not provide dosing, administration or medical guidance. See our Disclosures & Disclaimers for full details.

5. Third-party enrichment and prospecting

Where the Perfect Lead Engine or Growth modules are used, business prospect profiles may be enriched with contact information obtained from third-party providers (such as email verification and discovery services connected through automation tools). We store these results with their verification status and source.

If your business contact details appear in a User's prospecting data and you would like them removed, contact us and we will process the request. We honor "do not contact" and opt-out markers on prospect records.

6. Sharing of information

We do not sell your personal data. We share information only as described below:

• •Service providers: hosting, messaging channel providers, payment processors, AI model providers and other vendors who process data on our behalf under contractual confidentiality and security obligations.
• •Program counterparties: if you apply to a partner, affiliate or white-label program, your application information is shared with the reviewing administrators and, on approval, used to administer your participation.
• •Buyer/seller transactions: quotes, orders, lot documentation and payment instructions are shared with the transacting parties as needed to complete the transaction.
• •Legal requirements: where we believe disclosure is required by law, regulation, legal process or to protect the rights, property or safety of our users or others.
• •Business transfers: in connection with a merger, acquisition or sale of assets, subject to notice where required.

7. WhatsApp and channel providers

The Platform connects to WhatsApp and other messaging channels through authorized business API providers. Messages you exchange with a User's business number are processed by those providers and Meta's systems under their own terms and privacy policies. We are not affiliated with, endorsed by or sponsored by WhatsApp or Meta Platforms, Inc.

8. Cookies and analytics

We use essential cookies and similar technologies to keep you signed in and the Platform functioning, and analytics tools to understand aggregate feature usage. We do not use advertising cookies to profile End Contacts across other websites. You can control cookies through your browser settings; disabling essential cookies may affect Platform functionality.

9. Data retention

We retain account and business data for as long as your account is active or as needed to provide the services. Conversations, CRM records, order and verification records are retained according to the plan configuration and applicable legal or compliance obligations, then deleted or anonymized. Application data for rejected program applicants is deleted within a reasonable period. Backup copies may persist for a limited time before deletion.

10. Security

We apply technical and organizational safeguards including encryption in transit, access controls, role-based permissions, audit logging and rate limiting. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Promptly report any suspected breach through the app or to your account manager.

11. Your rights and choices

• •Access, correct or delete your account data, and export it where technically feasible.
• •Delete End Contact and CRM records you control, or request deletion of your own data from a User's records.
• •Opt out of marketing communications at any time; platform and security notices are sent where necessary.
• •Request that we stop processing your data for prospecting and honor do-not-contact requests.
• •Where applicable under laws such as GDPR or similar frameworks, you may also object to processing, request restriction, and lodge a complaint with your supervisory authority.

12. International transfers

We operate globally and your data may be processed in countries other than your own. Where required, we use appropriate safeguards such as standard contractual clauses for such transfers.

13. Children

The Platform is intended for business use only and is not directed to anyone under 18. We do not knowingly collect data from children. Contact us if you believe a child has provided us personal data.

14. Changes to this policy

We may update this policy as the Platform evolves. Material changes will be announced in the app, and the "last updated" date above will reflect the revision. Continued use after changes take effect constitutes acceptance.

15. Contact us

For privacy questions, data requests or complaints, contact us through the in-app support channels or your account manager, or via the contact details published on your portal or storefront.