messo

Legal

Privacy Policy

Last updated 2026-04-25

We process the minimum data needed to run Messo, store it in the EU, and give you full control to export or delete it on demand.

1. Who we are

Messo is operated by Lifecycle Innovations Limited, a company incorporated in Hong Kong (Business Registration #76545088, registered office at 144-151 Connaught Road West, Unit 4005, 40/F, Hong Kong). For all matters in this policy, contact [email protected].

2. Roles under GDPR

For data about your customers (the people sending you WhatsApp messages), you are the data controller and Messo is the data processor. We process that data only on your documented instructions, for the sole purpose of providing the service. For data about you (the account holder), Messo is the controller.

3. What we process

  • Your phone number, business description, and tenant configuration.
  • Inbound and outbound WhatsApp messages routed through your number.
  • Operational metadata: timestamps, status, error logs.
  • Billing data: name, email, VAT ID, payment method (held by Stripe).

4. Where we store it

All customer data is stored in the European Union — Render Frankfurt (eu-central-1). We do not transfer customer data outside the EEA for storage.

5. Sub-processors

  • Render (EU-Frankfurt) — infrastructure
  • Cloudflare — DNS, CDN, edge caching
  • Clerk — authentication
  • Stripe — billing
  • Anthropic — language-model inference (no training on your data)

Each sub-processor is bound by a written Data Processing Agreement.

6. Retention

Operational data is retained for the lifetime of your account. On cancellation we delete it within 90 days, except where law requires longer retention (e.g. invoicing records under Hong Kong tax law).

7. Your rights

Access, rectification, erasure, restriction, portability, objection, and complaint to your supervisory authority. DSAR contact: [email protected]. We respond within 30 days.

8. International transfers

Customer data is processed in the EEA. Anthropic inference traffic may briefly transit EU-region endpoints under Standard Contractual Clauses. Lifecycle Innovations Limited, as the controller of account-level data, operates from Hong Kong and may access account metadata for support purposes; this transfer relies on Standard Contractual Clauses (Module 1) and supplementary measures.

In one sentence: message content stays in Frankfurt. Account metadata may be viewed from Hong Kong by our support team. We do not sell, share, or train on any of it.

9. WhatsApp note

Messo connects to your WhatsApp account via the multi-device protocol. WhatsApp is operated by WhatsApp Ireland Limited; we are not affiliated with WhatsApp/Meta. Use of Messo is subject to WhatsApp's own terms. See our Terms of Service for additional disclosure.

10. Contact

Lifecycle Innovations Limited
144-151 Connaught Road West, Unit 4005, 40/F, Hong Kong
BR# 76545088
[email protected]