Skip to Content

Privacy Policy

Zero WhatsApp and the Meta app "Zero for Odoo" · Last updated: 11 November 2026

1. Who we are

ZERO GROUP SH.P.K. ("Zero", "we", "us"), NUIS M02026025Q, Rruga "Fadil Rada", Pazari i Ri, Tirana, Albania.

Privacy questions: sales@zero.com.al · +355 68 21 43 018

2. What this policy covers

This policy covers Zero WhatsApp, our WhatsApp integration for Odoo, and "Zero for Odoo", our app on the Meta platform. With them, a business sends and receives WhatsApp messages from its own Odoo database, through Meta's WhatsApp Business Platform.

For the messages a business exchanges with its own customers, that business decides what is collected and why: it is the data controller, and Zero acts as its processor. Zero is the controller only for the account details of the businesses that use the service.

3. How a business connects

  • Through our app "Zero for Odoo". The business clicks Connect WhatsApp in Odoo. A Meta window opens (Facebook Login for Business) in which the business allows our app to manage its WhatsApp Business account and to send messages from it. We receive only that permission. We never see the person's Facebook password, and we do not read their Facebook profile, friends or posts. Messages then pass through our relay at wa.odoo.al, described below.
  • With its own Meta app. Messages travel directly between Meta and the business's Odoo database. They never pass through Zero, and sections 4 to 6 about the relay do not apply.

4. Data we process

  • Account details of the connected business: its WhatsApp Business Account ID, phone number ID, business phone number and display name, and the address of its Odoo database.
  • Access token: when the business connects, the relay passes the access token Meta issues to the business's own Odoo database, once, over an encrypted connection. The relay does not keep it.
  • Message data: the content of the WhatsApp messages and media exchanged between the business and its contacts, the contacts' phone numbers and WhatsApp profile names, and delivery and read statuses.
  • Technical data: timestamps, delivery identifiers, message sizes and error codes, used to deliver messages reliably and to detect faults.

5. How we use the data

Only to deliver WhatsApp messages and their statuses between Meta and the business's own Odoo database, to keep the connection working, and to help the business when it asks us for support. We do not sell personal data, we do not use it for advertising, and we do not combine it with other data.

6. Where the data is stored and for how long

  • Messages, contacts and conversation history are stored in the business's own Odoo database. The business decides how long to keep them.
  • The relay keeps the content of a message only until the business's Odoo database confirms it was received, normally a few seconds. If the database cannot be reached, the relay keeps the message for at most 7 days and then deletes it.
  • Technical records without message content are kept for at most 30 days.
  • When a business disconnects, we stop forwarding its messages and delete everything the relay still holds for it.
  • The relay runs on servers of DigitalOcean, LLC in Frankfurt, Germany (European Union). If the business's Odoo database is also hosted by Zero (Cloud365), it is stored on our servers in the European Union under our hosting agreement with that business.

7. Who we share data with

  • Meta Platforms, which operates WhatsApp and the WhatsApp Business Platform. Meta's own terms and privacy policy apply to WhatsApp.
  • DigitalOcean, our hosting provider, only to run our servers.
  • Public authorities, only when the law requires it.

8. Security

All traffic is encrypted in transit (TLS). Every request from Meta is checked against Meta's signature. Every delivery to a business's database is signed with a key unique to that business, so one business can never receive another's messages. Only Zero's operators can access the relay.

9. Your rights

Under the Albanian law on personal data protection and, where it applies, the EU General Data Protection Regulation (GDPR), you can ask for access to your personal data, its correction or deletion, and object to its processing.

If you exchanged messages with a business that uses our service, contact that business first: it controls your conversation. You can also write to us at sales@zero.com.al. You may complain to the Information and Data Protection Commissioner of Albania (Komisioneri për të Drejtën e Informimit dhe Mbrojtjen e të Dhënave Personale).

10. Data deletion instructions

  • A business that uses Zero WhatsApp: in Odoo, open WhatsApp → Configuration → Accounts, open the account and click Disconnect from Relay. The relay deletes everything it holds for you at once. Messages stored in your own Odoo database stay under your control: delete them there, or ask your Odoo administrator. To ask us to delete everything we hold about your business, write to sales@zero.com.al. We answer within 30 days.
  • A person who exchanged messages with a business: ask that business to delete your conversation, or write to sales@zero.com.al with your phone number. We delete anything the relay still holds and pass your request on to the business.

11. Changes to this policy

We publish every change on this page and update the date at the top.