Privacy Policy
This policy explains what data Morasel collects, why we collect it, how we use and share it, and the choices and rights you have.
Last updated: July 28, 2026
Morasel L.L.C. (“Morasel”, “we”, “us”) provides a customer communication platform built for the WhatsApp Business Platform. This Privacy Policy describes how we handle personal data across our website, web and mobile applications, and related services (together, the “Services”).
Our role depends on the data. For the personal data of the businesses that subscribe to Morasel — account, contact and billing details of our customers — we act as a data controller. For the customer data that a business sends, receives or stores through Morasel while messaging its own customers on WhatsApp, we act as a data processor and handle that data on the business’s instructions. This policy focuses mainly on the data we control; our handling of customer data as a processor is governed by our agreement with the business and the Data Processing Addendum.
1. Data we collect
We collect the following categories of data:
- Account data — name, business name, email address, phone number, password credentials and role, provided when you register or are invited to a workspace.
- Customer data processed on behalf of a business — the contacts, messages, appointments, notes and related records that a business sends, receives or stores through Morasel while communicating with its own customers. We process this on the business’s behalf.
- Usage and technical data — log data, device and browser information, IP address, approximate location derived from IP, feature usage and diagnostic events, collected automatically as you use the Services.
- Cookies and local storage — small identifiers used to keep you signed in, remember preferences such as language, and, with consent, measure aggregate usage. See our Cookie Policy for details.
- Communications — information you provide when you contact us for support, request a demo, or otherwise correspond with us.
2. How we use data
We use personal data to:
- Provide, operate, secure and maintain the Services and your account.
- Authenticate users and enforce role-based access and tenant isolation.
- Deliver messaging features through the WhatsApp Business Platform at your direction.
- Provide support, respond to enquiries and send service and administrative notices.
- Bill for subscriptions and WhatsApp usage, and prevent fraud and abuse.
- Monitor, debug and improve reliability, performance and functionality.
- Comply with legal obligations and enforce our agreements.
3. Legal bases for processing
Where our processing is subject to data-protection law, we rely on one or more of the following general legal bases: performance of a contract with you; your consent (for example, for optional analytics cookies); our legitimate interests in operating, securing and improving the Services in a way that is balanced against your rights; and compliance with our legal obligations.
Morasel is not certified under any specific data-protection framework, and references to legal bases are provided as a general description rather than a claim of certification. For customer data we process on a business’s behalf, the business is responsible for establishing the legal basis for that processing.
4. Sharing and subprocessors
We do not sell personal data. We share data only as needed to run the Services: with infrastructure and service providers (subprocessors) that host, deliver and support the platform under contract; with the WhatsApp Business Platform operated by Meta in order to send and receive the messages you direct; where you instruct us to; and where required by law or to protect rights, safety and the integrity of the Services.
A categorised list of the subprocessors we use is available on our Subprocessors page.
5. International transfers
Morasel and our subprocessors may process data in countries other than the one where you are located. Where data is transferred across borders, we take steps intended to keep it protected consistent with this policy and applicable law, and we rely on appropriate safeguards where required.
6. Data retention
We retain account data for as long as your account is active and for a reasonable period afterward to meet legal, accounting and security obligations. Customer data processed on a business’s behalf is retained according to the business’s instructions and the terms of its agreement with us, and is deleted or returned on termination as described in our Data Processing Addendum. We may retain aggregated or de-identified data that no longer identifies you.
7. Security
We use technical and organisational measures such as tenant isolation, role-based access control, audit logging, encryption in transit and secrets management to protect data. No method of transmission or storage is completely secure, but we work to protect your data and to improve our practices over time. You can read more on our Security page.
8. Your rights and choices
Depending on your location and applicable law, you may have rights to access, correct, delete, or restrict the processing of your personal data, to object to certain processing, to data portability, and to withdraw consent. You can also control cookies through your browser and the choices described in our Cookie Policy.
If Morasel processes your data as a processor on behalf of a business (for example, you are a customer of one of our business users), please direct your request to that business, which controls the data; we will support them in responding. To exercise rights over data we control, contact us using the details below.
9. Children
The Services are intended for businesses and are not directed to children. We do not knowingly collect personal data from children. If you believe a child has provided us personal data, contact us and we will take appropriate steps to delete it.
10. Changes to this policy
We may update this Privacy Policy from time to time. When we make material changes we will update the “Last updated” date and, where appropriate, provide additional notice. Your continued use of the Services after an update means you accept the revised policy.
Contact us
If you have questions about this Privacy Policy or how we handle data, contact Morasel at: