WhatsApp privacy and security

Yesoma keeps WhatsApp’s technical connection work behind the scenes so your team can focus on customer conversations.

What your team sees

Customer-facing Yesoma screens show the business number, connection status, reply availability, setup progress, usage, and delivery status. They do not display private connection credentials or provider routing details.

Workspace Owners and Admins manage the connection. Authorized Agents can reply to assigned conversations when all sending checks pass. Viewers remain read-only. Yesoma operations staff use a separate restricted view for provisioning and support.

How Yesoma protects sending

Before a reply is sent, Yesoma verifies the exact workspace, connection, customer, inquiry, destination, role, assignment, consent, opt-out status, reply period, and saved message. No role can bypass those checks.

The exact saved reply is the version reviewed for sending. A later edit must be saved and reviewed again. Yesoma does not silently switch the reply to Email or SMS.

Yesoma keeps Save, Review, and Send attached to one stable request for that exact reply. Immediately before sending, it checks that the reviewed draft is still current and belongs to the same workspace, Case, customer, connection, and responder. A stale or mismatched request stops before the message is sent.

Connection changes are recorded in an append-only activity history. Customer activity views are redacted; message bodies and private provider responses are not placed in connection-state history or product analytics.

Privacy-safe product analytics

WhatsApp activation analytics may record the workspace, connection, event name, safe reason, time, and entitlement identifier. They do not include message content, customer phone numbers, connection credentials, or provider response payloads.

Your responsibilities

• Contact customers only when you have the right consent.
• Respect opt-outs immediately.
• Review suggested replies before sending.
• Give each teammate the least-privileged role they need.
• Do not paste passwords, sign-in codes, customer message content, or sensitive documents into setup notes or support requests.
• Contact Yesoma support if a connection status or delivery result looks wrong; do not repeatedly resend an uncertain reply.

For broader information about account and customer-data protection, read Is my customer data safe?.