ARPPrivacy for your WhatsApp connection.
Clear information and practical controls for Morning’s WhatsApp integration.
Effective October 24, 2026Scope and operator
MORNING ARP S.A.S., Bogotá, Colombia, operates Morning’s WhatsApp integration, including its controlled pilot, MCP tools and managed runtime. This notice covers information Morning processes for that connection, separately from the website and Meta’s own services. OAuth authorization controls client access. Availability depends on the features and provider permissions enabled for your connection.
Information we process
For an authorized business connection, we process WhatsApp business-account and phone identifiers, business display information, granted permissions, connection status and encrypted provider access tokens. Conversations may include the participant’s phone identifier and display name, inbound and outbound text, template names, timestamps, delivery states and supported attachment metadata. The current image feature retrieves and stores JPEG or PNG images up to 5 MB. Other attachment types may have metadata without retrievable content. Morning does not ask for your Meta password.
Purpose and conversation controls
We use this information to route messages to the correct business, present conversation history, retrieve supported images, send authorized replies or approved templates, reconcile delivery and provide support. We also keep consent, opt-out, human-handoff, verified service-window and idempotency state to prevent unwanted or duplicate actions. The connected business is responsible for informing its contacts, having the required authority to process their information and honoring their choices.
Connected agents and clients
When a business deliberately connects a client or agent, that client can receive tenant-scoped, bounded conversation summaries and history, message text and supported image content when authorized. References are opaque; MCP results do not expose stored provider tokens, raw webhook bodies or underlying participant/account identifiers. Choose trusted connected agents and review their separate privacy and retention terms: information returned to them is also processed under their own settings and policies. Morning does not use this connection data to train general-purpose AI models.
Providers and security
Meta/WhatsApp processes provider messages and account information. Cloudflare runs Morning’s Worker and tenant-isolated Durable Object storage. Zoho Mail processes support correspondence. A client or agent you connect receives the authorized tool results. We do not sell conversation data. Provider services may process information outside Colombia under their own terms. We use encrypted stored provider credentials, authenticated access, signed webhook checks and minimized operational logs. Raw webhook bodies are not retained in conversation storage. No internet service is risk-free.
Retention
The current service retains normalized messages, associated events and stored image content for 90 days; ordinary inactive conversation metadata for 365 days; and unmatched delivery events for 7 days. Cleanup is scheduled every 24 hours, so removal is not instantaneous at the cutoff. Minimal opt-out or active human-handoff state may remain longer to respect those restrictions. Provider credentials and connection records are separate from message retention and remain until replaced or deleted through the administrative process. Support correspondence, provider backups and copies held by connected clients have separate retention; these conversation limits do not promise deletion from those systems.
Your controls and requests
You can ask support to disconnect the integration, revoke access in Meta’s business settings, and request access, correction or deletion at [email protected]. Disconnecting stops the connection but does not delete stored history. Follow the data-deletion instructions for a verified removal request. We may retain minimal information required by law, security or a documented restriction and will explain any exception. We update this notice when the integration’s data handling materially changes.
Related policies
Website privacy Website terms WhatsApp privacy WhatsApp messaging policy WhatsApp business terms Cloudflare privacy Zoho privacy
Questions or a data request?
[email protected]The company behind Morning
Morning and this website are operated by MORNING ARP S.A.S., a simplified joint-stock company registered with the Bogotá Chamber of Commerce in Colombia.
MORNING ARP S.A.S.
Bogotá, Colombia
[email protected]