Data Processing Addendum

Data Processing Addendum (DPA) This Data Processing Addendum (“DPA”) forms part of the Vendor Terms and Conditions between WiseSender (“Processor”) and the Vendor (“Controller”). 1. Purpose WiseSender processes personal data only to provide WhatsApp Business API services and related automation tools. Processing is performed strictly under the Vendor’s instructions. 2. Roles and Responsibilities Vendor (Controller): Determines the purpose and means of processing personal data and confirms it has valid consent from its customers. WiseSender (Processor): Processes data solely to deliver services and ensures technical and organizational security measures. 3. Data Categories Typical data includes WhatsApp phone numbers, message templates, and delivery metadata. WiseSender does not use this data for marketing or profiling. 4. Sub-Processors WiseSender may engage Meta Platforms, Inc. and verified hosting providers to deliver the WhatsApp Business API infrastructure. 5. Data Retention and Deletion All personal data is retained only for as long as necessary for service delivery or legal compliance. Upon termination, data is deleted within a reasonable timeframe unless otherwise required by law. 6. Security WiseSender implements administrative, technical, and physical safeguards to protect personal data against unauthorized access, alteration, or disclosure. 7. Cooperation with Meta Vendors agree that Meta may access relevant data to monitor WhatsApp API compliance and WiseSender may share necessary information to fulfil this obligation. 8. Contact For privacy or data protection questions, contact our support team via the Help Center or email. Last Updated: November 2025