Privacy Policy for Yeksa.nl

Last Updated: October 26, 2026

1. Introduction

Welcome to Yeksa.nl ("we," "our," or "us"). We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services (the "Service"), particularly in connection with the Instagram API and the WhatsApp Business Platform. This policy is crafted in compliance with the European General Data Protection Regulation (GDPR) and the requirements of the Meta Platforms, Inc. ("Facebook/Instagram") platform. Yeksa complies with the Meta Platform Terms, Developer Policies, the WhatsApp Business terms and policies, and all applicable Facebook, Instagram and WhatsApp data use requirements.

This notice explains processing for account operation and the Instagram and WhatsApp functions you request. Connecting an account authorizes the selected Meta permissions; it does not grant permission for unrelated processing.

2. Data Controller

For the purposes of GDPR, the data controller is:

SEO Market, the Dutch partner providing Yeksa.nl together with the Yeksa team

Address: Poelweg 40 E, 1424 PB De Kwakel, Netherlands

Contact Email: info@yeksa.nl | support@yeksa.nl

3. Information We Collect

We collect information to provide and improve our Service. This includes:

A. Information You Provide:

  • Account Data: When you register, we collect your name and email address to create your user account.
  • Instagram Connection Data: When you connect your Instagram account to our Service, with your explicit permission, we collect and store:
    • Your Instagram Business/Professional Account ID and account username.
    • An access token provided by Meta, which allows our Service to securely retrieve data on your behalf.
    • Direct Messages (Inbox) and Comments on your posts, including their content and metadata (e.g., sender, timestamp), necessary to display and enable you to manage and respond to them intelligently through our Service.
    • Basic public profile information (e.g., account username, profile picture) needed for Service functionality.
  • WhatsApp Connection Data: When you connect a WhatsApp Business number through Meta's signup flow, with your explicit permission, we process:
    • Your WhatsApp Business Account ID, business portfolio ID, phone number ID, display phone number and verified business name, and the number's quality and messaging-limit status reported by Meta.
    • A business access token issued by Meta and, when we register your number for the WhatsApp Cloud API, the two-step verification PIN we set for it. Both are stored encrypted.
    • Messages exchanged between your business and your customers on WhatsApp (text, media, button replies, reactions, delivery and read status) and your customers' identifiers (phone number or WhatsApp business-scoped user ID, profile name). This content is processed only to deliver it to the services you use and is not stored by us after delivery.
    • For each customer, only the time of their last message, so that WhatsApp's 24-hour customer service window can be applied. This is kept for 8 days after the last activity.
    • Your message templates and business profile, which are read from and written to Meta on your request and are not stored by us.

B. Information Collected Automatically:

  • Technical & Log Data: We may collect limited data such as your IP address, browser type, pages visited, and the time/date of your visit. This is used for security, maintenance, and basic analytics. We currently use minimal or no cookies for tracking. Any future use of analytics tools (like Google Analytics) will be disclosed here and will respect your consent preferences.

4. Legal Basis for Processing (GDPR)

We process your personal data based on the following legal grounds:

  • Performance of a Contract: To create your account and provide the core functionality of connecting and managing your Instagram interactions.
  • Your Explicit Consent: When you connect your Instagram account or WhatsApp Business number, you grant us permission via Meta's authorization process to access the specific data outlined in Section 3. You can revoke this consent at any time by disconnecting your account from within our Service, via your Instagram settings, or by removing our app from your Meta business portfolio.
  • Legitimate Interests: For operational purposes like security, fraud prevention, and improving our Service's performance.
  • Legal Obligation: To comply with applicable Dutch and EU laws.

5. How We Use Your Information

We use the collected data solely to:

  • Provide, operate, and maintain our Service.
  • Enable you to view, manage, and respond to your Instagram Direct Messages and comments.
  • Authenticate your account and secure your connection to Instagram.
  • Communicate with you regarding your account, support requests, or essential service updates.
  • Comply with legal obligations and Meta Platform requirements.
  • Display your Instagram posts and let you reply to, hide, unhide or delete comments on your own posts.
  • Send and receive WhatsApp messages and approved message templates for your business number, show their delivery and read status, and let you manage your WhatsApp business profile and message templates.
  • Apply Meta's messaging rules (such as the 24-hour customer service window and sending limits) to protect your number's quality.

6. Data Sharing & Disclosure

  • With Meta Platforms: We share information (specifically, the access token and API requests) as necessary to interact with the Instagram API and the WhatsApp Business Platform and deliver the Service you have requested. WhatsApp messages are sent and received through the WhatsApp Cloud API, which is operated by Meta under the WhatsApp Business terms.
  • Service Providers: We may employ trusted third-party companies (such as infrastructure providers) to facilitate our Service. Any provider access must be limited to operating the service on our instructions. Customer onboarding requires the relevant processing arrangements to be in place.
  • Legal Requirements: We may disclose your data if required by law, regulation, or a valid legal request from authorities.
  • We DO NOT sell, rent, or trade your personal data with any third parties for their marketing purposes.

7. Data Security & Retention

  • Security: We implement appropriate technical and organizational measures (including HTTPS, encrypted Instagram credentials and account access controls) to protect your data against unauthorized access, alteration, or destruction.
  • Retention: We retain your personal data only as long as necessary to provide the Service, fulfill legal obligations, or resolve disputes.
    • Your account data is kept while your account is active.
    • Disconnecting deletes the selected Instagram account credentials, conversations, messages, cached comments and queued events from the active application database. A minimal deletion receipt may be retained to track requests.
    • WhatsApp message content is held only in an encrypted delivery queue until it is delivered; if delivery keeps failing it is removed after at most 10 days. Disconnecting a WhatsApp number deletes its token, PIN, queued events and customer-window timestamps.
    • You can request deletion of your data at any time (see Section 9).

8. International Data Transfers

Our servers are located in the United States. Instagram and WhatsApp data is also processed by Meta in its own data centres. Where personal data from the European Economic Area is transferred outside it, we rely on appropriate safeguards required by the GDPR, such as the European Commission's Standard Contractual Clauses. Contact privacy@yeksa.nl for details.

9. Your Data Protection Rights (GDPR)

You have the following rights regarding your personal data:

  • Right to Access & Portability: Request a copy of the data we hold about you.
  • Right to Rectification: Request correction of inaccurate or incomplete data.
  • Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data. You can also initiate this by following our specific Facebook/Instagram Data Deletion Instructions.
  • Right to Restrict Processing: Request we limit how we use your data.
  • Right to Object: Object to our processing of your data based on legitimate interests.
  • Right to Withdraw Consent: Where we rely on consent, you can withdraw it at any time.

To exercise these rights, please contact us at support@yeksa.nl. We will respond within one month.

10. Data Deletion Instructions for Instagram and WhatsApp Users

If you wish to delete your data from our Service, you can:

  1. Disconnect your Instagram account directly within the Yeksa.nl application settings.
  2. For WhatsApp, disconnect the number in the service you use, or remove our app in Meta Business Settings (Integrations, then Connected apps) for your business portfolio. We then stop all access and delete the data described in Section 7.
  3. Email privacy@yeksa.nl to request deletion of your Yeksa.nl login account and associated data.
  4. For any concerns or if you need assistance, contact us at support@yeksa.nl.

For more detailed steps, please see our dedicated Facebook/Instagram Data Deletion Instructions page, as required by Meta.

11. Children's Privacy

Our Service is not intended for individuals under the age of 18 ("Children"). We do not knowingly collect data from Children. If you become aware that a Child has provided us with data, please contact us, and we will take steps to delete such information.

12. Changes to This Privacy Policy

We may update this policy periodically. We will notify you of any significant changes by posting the new policy on this page and updating the "Last Updated" date. Where a change requires consent, we will request it separately.

13. Contact Us

If you have questions, concerns, or wish to exercise your rights under this Privacy Policy, please contact us at:

Email: info@yeksa.nl | support@yeksa.nl

Postal Address: Yeksa.nl, Poelweg 40 E, 1424 PB De Kwakel, Netherlands.