Last updated: July 29, 2026
Messagency ("we", "our", or "us") is an AI agency based in Porto, Portugal. This Privacy Policy explains how we collect, use, disclose, and safeguard your information across all of our products and services, including our AI Assistant (app.messagency.net), Subless, SenseIT, our website (messagency.net) and any custom solutions we build for you (collectively, the "Service"). Where a section below describes a feature specific to one product (for example, WhatsApp/Instagram messaging in the AI Assistant), it applies only when you use that product.
By using our Service, you consent to the data practices described in this policy. If you do not agree, please do not use the Service.
When you register, we collect your name, email address, business name, and password. For businesses, we also collect company information such as address, services offered, and working hours.
When you connect WhatsApp or Instagram, we receive and store access tokens, page IDs, and phone numbers necessary to operate the messaging integration. We also process messages sent and received through these platforms to provide AI-powered responses.
We store messages exchanged between businesses and their customers through the platform. This data is necessary for the AI to provide contextual responses and for businesses to manage their customer interactions.
We automatically collect certain information about your device and usage of the Service, including IP address, browser type, pages visited, and timestamps.
When you submit a contact form on our website, we collect the name, email and/or phone number and the message you provide, so that we can respond to your enquiry. We do not use this information for automated marketing.
We process personal data only where the law gives us a basis to do so:
Where a business uses the AI Assistant to message its own customers, that business is the data controller and determines the legal basis for those messages. We process them on its documented instructions under the Data Processing Agreement described in section 9.
We use the following third-party services to operate the platform:
These services have their own privacy policies. We encourage you to review them.
Automated processing (GDPR Art. 22): The AI Assistant uses automated AI to reply to messages, gather booking details and summarise conversations. Your data is processed only to produce real-time responses and is never used to train AI models. You have the right to request human review, to object to automated processing and to obtain an explanation. To exercise these rights, contact [email protected].
We keep your account data for as long as your account is active. Conversation messages are automatically deleted after 90 days, so we do not keep conversation history beyond that period. You may request deletion of your data at any time by contacting us, and deleting your account removes your associated data.
We implement appropriate technical and organizational measures to protect your data, including:
Breach notification: if a personal data breach occurs, we notify the competent supervisory authority within 72 hours of becoming aware of it, as required by GDPR Article 33, unless the breach is unlikely to result in a risk to your rights and freedoms. Where the breach is likely to result in a high risk to you, we also inform you without undue delay (Article 34). Business customers are notified without undue delay so that they can meet their own notification duties as data controllers.
We use only functional storage, not advertising or analytics trackers. Our website stores your language choice (msg_lang) and your cookie-banner decision (msg_cookie_consent) in your browser's local storage; the app (app.messagency.net) uses a strictly necessary session cookie to keep you logged in. We do not load third-party advertising or analytics cookies. You can clear this storage at any time from your browser settings.
Under the General Data Protection Regulation (GDPR), you have the following rights:
To exercise any of these rights, please contact us at the address below.
You also have the right to lodge a complaint with a data protection supervisory authority: in Portugal, the CNPD (cnpd.pt); in Turkey, the Personal Data Protection Authority, KVK Kurumu (kvkk.gov.tr).
When you connect your Instagram or WhatsApp account through our platform:
For the customer messages handled by the AI Assistant, the business customer is the data controller and Messagency is the data processor. This relationship is governed by a Data Processing Agreement (GDPR Article 28) that each business accepts at signup, covering processing instructions, security, sub-processors (such as Stripe and AI model providers), international transfers under Standard Contractual Clauses, breach notification and data deletion. You can read the full Service Agreement and DPA at app.messagency.net/service-agreement.
Our Service is not intended for children under the age of 16. We do not knowingly collect personal data from children.
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.
If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us: