Byoond respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains how we collect, use, store and protect your information when you visit our website or use our services, including Loomy Hub and its WhatsApp Business integration.

About Byoond

Byoond is a digital services company registered in Australia. When we process personal data of individuals located in Brazil, we comply with the Brazilian General Data Protection Law (LGPD), which applies extraterritorially, in addition to Australian privacy law.

Our role

Byoond acts in two different roles depending on the service:

• Controller: for data collected directly through byoond.io (contact forms, inquiries, marketing).

• Operator: for data processed through Loomy Hub on behalf of our clients (such as WhatsApp messages exchanged with their end customers). In this case, the client is the controller and is responsible for the lawful basis of processing.

• 
  

Information we collect

Through our website and direct communications:

• Name, email, phone, business information

• Information submitted through forms or chat tools

• Non personal data such as IP address, browser type, pages visited

Through Loomy Hub and WhatsApp Business integration, when operating on behalf of clients:

• WhatsApp phone numbers and profile information of end customers

• Message content (text, audio, images, documents)

• Conversation metadata (timestamps, delivery status)

• Information voluntarily provided during the conversation

  
  

How we use your information

We use information to:

• Respond to enquiries and provide our services

• Operate WhatsApp Business communications on behalf of our clients

• Improve performance, security and user experience

• Comply with legal obligations

  
  

We do not sell personal data. We do not use WhatsApp messages to train AI models without our client's specific authorisation.

Opt-in and opt-out

End customers communicating with our clients via WhatsApp can opt out at any time by sending "sair", "parar", "stop", or by directly requesting to stop receiving messages. Opt-out is honoured within 24 hours and recorded for compliance.

Minors

Some Loomy Hub clients serve audiences that may include minors. In these cases, our clients (as controllers) are responsible for obtaining parental consent before processing personal data of minors, as required by Brazilian law. If you believe a minor's data is being processed without proper consent, contact us immediately.

Third party tools

We use third party services to operate our products, including Meta (WhatsApp Business Platform), Anthropic (AI processing), and cloud infrastructure providers (Supabase, Railway, Vercel). Each provider processes data according to its own privacy policy.

Our primary database for Loomy Hub is hosted in Brazil (São Paulo).

Data retention

We retain personal data only as long as necessary to deliver our services, comply with legal obligations, or support legitimate interests. Contact form submissions are kept up to 24 months from last interaction. WhatsApp conversation history is retained according to the client's instructions and commercial relationship with their end customers. After the retention period, data is deleted or anonymised.

Security

We take reasonable technical and organisational measures to protect personal information, including encryption in transit, access controls, and data residency in Brazil for Loomy Hub.

Your rights

You have the right to access, correct, delete, port, anonymise or restrict the processing of your personal data, and to revoke consent at any time. To exercise these rights, contact us at hello@byoond.io. We respond within 15 days, as required by Brazilian law.

If your request involves data processed by Byoond as operator on behalf of a client, we will forward it to the relevant controller.

Changes to this Policy

We may update this Privacy Policy from time to time. The "Last updated" date indicates when the most recent changes were made.

Governing law

Commercial terms are governed by the laws of Australia. The processing of personal data of individuals located in Brazil is subject to the Brazilian General Data Protection Law (LGPD).