Privacy Policy

Last updated: 11 September 2026

Phoxez ("Phoxez", "we", "us") is a messaging platform operated by Supportefy, Amman, Jordan. It lets businesses connect their own WhatsApp Business number through the Meta Cloud API, and optionally a Telegram bot, to send campaigns, reply to customers and manage contacts. This policy explains what we collect, why, and the choices you have.

1. Who this policy covers

  • Account holders: businesses that create a Phoxez account and their team members.
  • Contacts: people whose phone numbers and names an account holder uploads to Phoxez or who message an account holder's connected number.

For contacts, the account holder decides what data is uploaded and what messages are sent. Phoxez processes that data on the account holder's behalf. If you are a contact and want your data removed, you can ask the business that messaged you, or contact us directly (section 8).

2. What we collect

  • Account data: name, email address, phone number, company name, password (stored hashed), language and timezone.
  • Channel credentials: the WhatsApp Business Account ID, phone number ID and access token you enter to connect your number; a Telegram bot token if you connect Telegram. These are stored so Phoxez can send and receive on your behalf.
  • Contacts and messages: contact names, phone numbers, tags, lists and segments you create or import; the content, timestamps and delivery status of messages sent and received through your connected channels; message templates synced from Meta.
  • Billing data: your plan, invoices and payment status. Card details are entered with the payment provider, not stored by Phoxez.
  • Technical data: IP address, browser type, login times and cookies needed to keep you signed in.

3. How we use it

  • To run the service: sending campaigns and replies, receiving inbound messages through webhooks, showing delivery and read status, and keeping your inbox in sync across your team.
  • To operate your account: login, plan limits, billing, support.
  • To keep the service secure and to investigate abuse.

We do not sell personal data and we do not use your contacts or message content for advertising.

4. Who we share it with

  • Meta Platforms: messages sent to and received from WhatsApp pass through Meta's WhatsApp Cloud API under Meta's own terms and privacy policy.
  • Telegram: if you connect a Telegram bot, messages pass through Telegram's Bot API.
  • Payment providers: when you pay for a plan, the provider you choose processes the payment.
  • Hosting: Phoxez runs on servers we manage. We do not hand your data to other parties except as described here or when required by law.

5. Your responsibilities as an account holder

You must have permission to message the people you upload, and your use of WhatsApp and Telegram must follow their business and messaging policies. Phoxez provides the tools; you are responsible for the content you send and the lawfulness of your contact lists.

6. Retention

Account data, contacts and messages are kept while your account is active. When an account is deleted, its contacts, messages, channel credentials and team data are removed from active systems within 30 days. Invoices are kept as long as accounting rules require.

7. Security

Passwords are stored hashed. Channel access tokens are stored server-side and are never exposed to the browser or shared with other accounts. Access to production systems is limited to the people who operate the service.

8. Data deletion and your rights

You can delete contacts, messages and team members from inside your dashboard at any time. To delete your whole account and everything in it, or to request a copy of the data we hold about you, contact us:

Tell us the email address on the account. We confirm the request and complete deletion within 30 days. If you are a contact of a business using Phoxez and want your number removed from their lists, you can also ask us and we will pass the request to that business and remove the data on our side.

9. Cookies

Phoxez uses cookies that are necessary to keep you signed in and to protect forms against cross-site requests. We do not use third-party advertising cookies on the dashboard.

10. Changes

If this policy changes in a way that affects you, we will show the new version here with a new date.

11. Contact

Phoxez, operated by Supportefy, Amman, Jordan. info@phoxez.com.