Privacy policy
Mesvanta ("we") is an app that shows direct messages from Instagram, Facebook Messenger and WhatsApp Business accounts you connect, so you can read and reply to them in one place. This policy explains what we store to do that, and what we never do with it.
In short: we store the messages and contact details of the accounts you connect so we can show them to you. We don't sell data, show ads, or use your messages for anything except running your inbox. You can disconnect an account or delete everything at any time.
What we collect
- Your Mesvanta account. An internal user ID and a hashed sign-in session token. We do not ask for your name, email or phone number to use the app.
- Connected accounts. For each Instagram account, Facebook Page or WhatsApp Business number you connect: its platform ID, display name and handle, and the access token Meta issues when you approve the connection. Access tokens are encrypted (AES-256-GCM) before they are stored.
- Conversations. Messages sent to and from the connected accounts after you connect them: message text, time, delivery status, and the contact's platform ID, name and handle as provided by Meta.
- Early-access sign-ups. If you join the waitlist on mesvanta.com: your email address and, if you choose one, how you mostly message (creator, business and so on). It is used only to invite you to the app, and deleted on request or once the app is publicly available and you have been invited.
- Your organization data. Labels, done/snooze/follow-up state, quick replies and settings you create in the app.
We receive this data only through Meta's official APIs, and only for accounts you choose to connect. We never see your Facebook, Instagram or WhatsApp password.
How we use it
- To show your conversations and send the replies you write.
- To show whether each account is still connected and when you can reply under Meta's messaging rules.
- To send notifications you have switched on.
- To keep the service secure and fix problems, using technical logs that are deleted after 30 days.
We do not sell or rent personal data, use it for advertising, or use message content to train AI models. Optional features such as AI reply suggestions are off by default. Before any such feature processes message text, this policy will name the provider it uses, and the feature will only run if you switch it on.
People who message you
When someone sends a message to an account you connected, Mesvanta stores that message and their public profile name and handle so you can reply. You, as the account owner, decide which accounts to connect and are responsible for having a lawful basis to handle your customers' messages, as you would in Meta's own apps.
Who we share it with
- Meta Platforms, to receive messages and send your replies through their APIs.
- Infrastructure providers that host our servers and database, under contracts that limit them to providing that service.
- Authorities, only when the law requires it.
How long we keep it
- Disconnecting an account (in Mesvanta, or by removing Mesvanta in your Facebook or Instagram settings) deletes its access token immediately. The conversation history stays in your inbox until you delete it.
- Deleting an account or requesting deletion removes the connected account, its access token, and all of its conversations and messages.
- Deleting your Mesvanta account removes everything listed in this policy. Encrypted backups are overwritten within 30 days.
Your choices and rights
You can see, correct, export or delete your data. Most of this is in the app. For anything else, email privacy@mesvanta.com and we will respond within 30 days. For deletion steps, see Data deletion.
Security
Data is encrypted in transit (HTTPS) and access tokens are encrypted at rest. Incoming webhooks from Meta are verified by signature before they are processed. Only a hash of your session token is stored, so a database leak would not let anyone sign in as you.
Children
Mesvanta is a business tool and is not intended for anyone under 18.
Changes
If we change this policy, we will update the date above, and for significant changes we will tell you in the app before they take effect.