Updated 27 October 2026
Privacy policy
How Uptraff handles website enquiries and data used by its internal Meta integrations.
Who is responsible
Uptraff Ltd, company number 16153901, is responsible for the personal information covered by this notice. Our registered office is 124 City Road, London, EC1V 2NX, United Kingdom.
This notice covers this company website, enquiries sent to us and the Uptraff LTD Meta app used to administer authorised business assets and communications. Individual products have their own privacy notices. The Meta integration is currently operated internally and is not open for public customer registration.
Information we handle
When you contact us, we receive the contact details and information you include in your message. Our website hosting provider receives technical information needed to deliver and protect the site, such as an IP address and request information. This website does not set cookies or run analytics.
When an authorised operator connects Meta assets, the integration can process the account and business identifiers, profile details, phone numbers, permissions and authentication credentials needed for that connection. Depending on the permissions granted, it can also process business asset information, templates, messaging activity and advertising reports.
WhatsApp functionality can involve contact names and numbers, message text, media, message identifiers, timestamps and delivery events. Access is limited by the permissions and capabilities Meta makes available. A connected account does not itself give access to every chat or to historical messages. Development and review use may include messages exchanged with Meta test numbers.
Why we use information
We use information to answer enquiries, administer authorised assets, carry out messages and other actions requested by an authorised operator, diagnose faults and protect the integration. We do not sell message content or use it to build advertising audiences.
Where UK data protection law applies, we rely on our legitimate interests in operating and securing our business communications, on performance of a contract where relevant, and on compliance with legal obligations. Where processing requires consent, we request it and allow it to be withdrawn. Granting an integration permission does not remove another person's privacy rights.
Service providers and international processing
Meta provides the connected platform and WhatsApp services. Composio, operated by Sampark Inc, handles the authorised connection and API tool execution. Requested results may be supplied to the AI assistant used by the authorised operator, including OpenAI's Codex, to carry out the requested task. Cloudflare delivers this website. These providers have their own terms and privacy notices.
Provider infrastructure and support access can involve processing outside the United Kingdom. Applicable provider agreements and transfer safeguards govern that processing. Contact us for information about the providers and safeguards relevant to your request. We do not promise that data remains in one country.
Retention and access
We retain enquiry correspondence and operational records for as long as needed to handle the request, maintain the connection, investigate a fault or meet a legal requirement. Records are reviewed when they are no longer needed. Authentication credentials are used for authorised connections and must not be included in public reports.
Providers may retain their own records. Composio's policy states that stored tool payloads and execution logs are normally deleted one year after a call; its documented Zero Data Retention exceptions and account-deletion rules may also apply. This notice does not claim that a retention override is enabled. AI-assistant conversations and logs are subject to that provider's account settings and retention terms. Disconnecting an integration stops future access through that connection but does not automatically erase existing records.
Your choices and rights
You can ask for access to, correction of or deletion of your information, and where applicable object to processing, ask us to restrict it or request a portable copy. You can revoke an app connection through the relevant Meta or Composio account. We may need proportionate information to verify a request and identify the relevant records.
Contact hello@uptraff.com with a privacy request. Our data deletion page explains what to include and what deletion can cover. You can also complain to the UK Information Commissioner's Office. We update this notice when the integration's data handling changes.