Privacy Policy

STECTRA CONSULTING SARL - France

Last updated: February 3, 2026

1. Introduction

MonAgent-IA ("we", "our", or "us") is a SaaS platform operated by STECTRA CONSULTING SARL (SIRET: 750 521 742 00031), registered in France. This Privacy Policy explains how we collect, use, store, share, and protect your personal data when you use our AI-powered WhatsApp Business automation services.

This policy applies to all users of our services, including business owners who use our platform and their end customers who interact with our WhatsApp chatbots.

2. Data Controller

STECTRA CONSULTING SARL
51 Rue Saint-Maur, 75011 Paris, France
Email: contact@spectra-consulting.fr
Phone: +33 6 79 92 80 45

3. Data We Collect

3.1 Account Data

• Name, email address, phone number
• Business name and business information
• Payment information (processed securely via Stripe)

3.2 Meta/Facebook Platform Data

• Facebook Account Data: User ID, name, email (via Facebook Login/OAuth)
• WhatsApp Business Data: Phone number ID, business name, business profile
• WhatsApp Messages: Message content sent and received through our platform

3.3 Technical Data

• IP address, browser type, device information
• Usage logs and analytics data

4. How We Use Your Data

Purpose	Legal Basis (GDPR)
Provide AI-powered WhatsApp messaging services	Contract performance
Manage WhatsApp Business accounts on your behalf	Contract performance
Process payments and billing	Contract performance
Improve our AI models and services	Legitimate interest
Send service-related communications	Legitimate interest
Comply with legal obligations	Legal obligation

5. Meta Platform Data Usage

We access Meta Platform Data through the following permissions:

• whatsapp_business_management: To manage WhatsApp Business accounts, phone numbers, and message templates on behalf of our clients
• whatsapp_business_messaging: To send and receive WhatsApp messages through our AI chatbot platform

We use Meta Platform Data strictly in accordance with Meta's Platform Terms and Developer Policies. Specifically:

• We do not sell Meta Platform Data to any third party
• We do not use Meta Platform Data for advertising or profiling purposes
• We do not transfer Meta Platform Data to data brokers
• Meta Platform Data is used solely to provide our WhatsApp automation services
• We will delete all Meta Platform Data upon user request or account termination

6. Data Sharing

We may share your data with:

• Meta/WhatsApp: As required to provide WhatsApp Business API services
• Stripe: For secure payment processing
• AWS (Amazon Web Services): Cloud hosting provider (EU region - Paris)
• Mistral AI: AI language model provider for chatbot responses

We do not sell your personal data to any third party. All service providers are bound by data processing agreements.

7. Data Storage and Security

• Location: All data is stored on secured servers in the European Union (AWS Paris region, eu-west-3)
• Encryption: All data is encrypted in transit (TLS/SSL) and at rest
• Access control: Strict access controls and authentication measures
• Backups: Regular encrypted backups

8. Data Retention

• Account data: Retained for the duration of your account, plus 12 months after deletion
• WhatsApp messages: Retained for a maximum of 12 months, unless earlier deletion is requested
• Payment data: Retained as required by French tax law (6 years)
• Technical logs: Retained for 3 months

9. Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the following rights:

• Right of access: Request a copy of your personal data
• Right to rectification: Request correction of inaccurate data
• Right to erasure: Request deletion of your personal data
• Right to restriction: Request restriction of processing
• Right to portability: Receive your data in a structured format
• Right to object: Object to processing based on legitimate interest
• Right to withdraw consent: Withdraw consent at any time

To exercise any of these rights, contact us at contact@spectra-consulting.fr. We will respond within 30 days.

10. Cookies

Our website uses essential cookies for functionality and optional analytics cookies. You can manage cookie preferences through your browser settings.

11. Children's Privacy

Our services are not intended for individuals under 16 years of age. We do not knowingly collect data from children.

12. International Transfers

Your data is primarily stored within the European Union. If any data is transferred outside the EU (e.g., to AI model providers), we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs).

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through our platform. The "Last updated" date at the top indicates the latest revision.

14. Data Deletion

You can request the deletion of all your data at any time by:

• Emailing us at contact@spectra-consulting.fr
• Using the account deletion feature in your dashboard

Upon receiving a deletion request, we will delete all your personal data and Meta Platform Data within 30 days, except where retention is required by law.

← Back to MonAgent-IA