Fractional HQ is operated by VEERAPATHIRA TRADERS.
What this notice covers
This notice covers our website, client onboarding, owner CRM and restricted WhatsApp test workspace. Production connection for client accounts is not available yet. We will update this notice before introducing materially different data uses.
Information we collect and why
When you sign in through ChatGPT, we receive your account identifier and email to authenticate you and limit access to your business. We store invitation records, business names and the profile details you provide: website, phone number, planned messaging use, consent-process link, estimated volume and billing preference. We use these to prepare and review your onboarding.
Our restricted test workspace stores test contacts and phone numbers, message contents and timestamps, delivery events, opt-out preferences and message templates. These support testing, troubleshooting and respecting opt-outs. We do not import personal WhatsApp chats or device address books.
Account-connection testing also stores the authorized WhatsApp account and phone identifiers, account name, encrypted access token and token expiry. Its separate client inbox stores new inbound messages, replies, delivery status and opt-out preferences. When a business connects an eligible WhatsApp Business app account and approves Meta's history sharing, our owner CRM can receive the contacts and available business conversation history Meta provides for that account, which may cover up to 180 days. This is limited to that business account; it does not provide blanket access to WhatsApp history or personal accounts. Meta authorization codes are exchanged on the server; we do not store your phone registration PIN. General client rollout remains gated while Meta review is pending; configured owner testing is separate.
Service providers and sharing
OpenAI Sites provides hosting and ChatGPT sign-in, and Cloudflare provides the application infrastructure and database. Meta processes WhatsApp messages and account information when we use its API. These providers may process information outside your country under their own applicable terms and privacy policies. Fractional HQ does not sell your personal information or use your onboarding details to advertise for other businesses.
The Fractional HQ operator can review onboarding details. Other clients cannot access your saved profile. We may disclose information when required by applicable law or to investigate misuse and protect the service.
Storage, security and retention
Sign-in uses authentication cookies. An invitation token is held temporarily in your browser tab to complete sign-in and removed from tab storage after acceptance. Invitation links expire after seven days. Expiry does not itself erase the saved invitation record.
Business profiles remain in our application database until deleted by you or the operator. Test records remain until manually removed; there is currently no automatic age-based purge. Access is authenticated and scoped to the relevant account; API credentials are kept on the server. No system can guarantee absolute security.
Deleting an onboarding profile removes it, its invitations, stored account connection, token, client inbox and associated CRM records from the active application database. Provider-managed logs or recovery copies are outside this self-service operation. If any information must be retained for a legal obligation or a dispute, we will explain the reason and scope when handling your request.
Your choices
You can view, edit and delete your onboarding profile through the signed-in portal. Profile deletion also removes the associated connection, inbox and CRM records from our active database. Read the deletion instructions.