Privacy Policy

Last updated: 3 July 2026

LONUT ("we", "us") is a sole proprietorship registered in Singapore (UEN 53462899X). We provide messaging automation and software services to business clients. This policy explains what personal data we handle, why, and your rights under Singapore's Personal Data Protection Act 2012 (PDPA).

Data we collect on this website

This website does not use cookies, analytics trackers, or advertising pixels. If you email us, we keep your email address and correspondence for as long as needed to handle your enquiry and maintain our business records.

Data we process on behalf of clients

Our core service is operating automated customer-messaging systems for business clients on the WhatsApp Business Platform. When we do so, we act as a data intermediary (processor) for the client, who remains responsible for the customer relationship. In that role we may process:

• Phone numbers and profile names of people who message our clients' WhatsApp business numbers;
• The content of those messages (text, and media such as images or voice notes), used solely to generate a relevant reply on the client's behalf;
• Delivery and read metadata needed to operate the service reliably.

Message content may be processed by third-party AI language-model providers under contract to generate draft replies. We do not use client customer data for advertising, we do not sell it, and we do not use it to train models.

WhatsApp and Meta platform data

Our services are built on the WhatsApp Business Platform operated by Meta. Our access to and use of WhatsApp business data complies with the Meta Platform Terms and the WhatsApp Business Terms of Service. Messages are delivered through Meta's infrastructure and are also subject to WhatsApp's own privacy policy.

Retention

Conversation data processed for clients is retained only as long as needed to provide the service and maintain conversational context, or as directed by the client, after which it is deleted.

Sharing

We share data only with service providers necessary to operate our systems (e.g. Meta/WhatsApp for message delivery, cloud hosting providers, and AI language-model providers for reply generation), and where required by law. We do not sell personal data.

Your rights

Under the PDPA you may request access to or correction of personal data we hold about you, or withdraw consent to its processing. If your data was processed as part of a client's messaging service, we may refer your request to the relevant client, who controls that data.

Contact

For privacy matters, contact our data protection contact at [email protected].