Data and security
What WASync stores, for how long, where media lives, what is deleted when a number or the app is removed, and the agreements that cover it.
What is stored
For each number, WASync keeps the conversations (messages, delivery status, the linked CRM record), the contacts WhatsApp knows (number, name, photo link), the files exchanged, the Chat Flow runs with the answers collected, call records, and an audit trail of administrative actions. Bitrix24 keeps its own copy of what WASync writes on timelines and in Open Channels.
Retention
| Data | Kept |
|---|---|
| Messages and media | 90 days |
| Sessions, events, email log, alerts | 180 days |
| Audit trail of administrative actions | Not deleted |
| Unused Bitrix24 user tokens | 60 days |
Media files are stored in the EU and served through short-lived signed links; the links in exports expire after 24 hours.
Deleting
- A connection: the number, its conversations in WASync and the flows bound to it are removed; the CRM keeps everything written on it. What do I lose when deleting a connection?
- The app: uninstalling from Bitrix24 pauses the portal; the data is kept for 90 days in case you come back, with a warning email on day 83, then purged, including messages, media and settings. Audit records of the purge itself are kept.
Who can read what
Access follows Bitrix24: a person reads only the numbers and conversations given in Team, administrators read everything, and the APIs behind the app enforce the same limits. WASync staff access customer data only for support, on request, and every such access is logged.
Agreements
The Data Processing Agreement is available to every customer; the Terms and the Privacy policy cover the rest. WhatsApp traffic itself is subject to Meta's terms for the Business API and, on QR numbers, to WhatsApp's terms for the application.