Privacy Policy

M3A2C, LLC · Effective Date: October 24, 2026 · https://m3a2c.com/privacy

This policy is written in English, which is the controlling version. For a Spanish copy, email miguel@m3a2c.com.

This Privacy Policy explains how M3A2C, LLC ("M3A2C," "we," "us") collects, uses, shares and protects personal information through our website (m3a2c.com), our consulting and operations services, and the applications and integrations we operate with Meta Platforms, including the WhatsApp Business Platform.

1. Who We Are (Data Controller)

M3A2C, LLC is a limited liability company registered in the State of Georgia, USA, located in Cumming, Georgia. Contact: miguel@m3a2c.com. For website inquiries and our own client relationships, M3A2C is the data controller. When we process contact data on behalf of a business client (for example, a client's customer or prospect list used for WhatsApp messaging), the business client is the controller and M3A2C acts as a service provider / data processor following that client's documented instructions.

2. Information We Collect

• Website inquiries: name, email address, organization, and any message you send us by email or contact form.
• Business client onboarding information: business contact names, business email, organization details, billing information, and account identifiers needed to deliver services (for example, Meta Business portfolio, ad account, or WhatsApp Business Account IDs).
• Data processed via Meta Platforms / WhatsApp Business Platform APIs on behalf of business clients: phone numbers, WhatsApp profile names, message content and message metadata (timestamps, delivery and read status, message IDs), opt-in status, opt-out requests, and response status (for example, which reply option a contact selected).
• Advertising reporting data: aggregated campaign performance metrics (spend, reach, impressions, clicks, conversations) from clients' ad accounts. These reports do not identify individual people.
• Technical data: standard server logs (IP address, browser type, pages requested) kept for security. Our website does not use advertising cookies or tracking pixels.

3. How We Use Information

• To respond to inquiries and to deliver consulting, operations, grant, website, and advertising reporting services.
• To provide authorized business messaging services for clients — sending messages only to contacts who have opted in to receive them from that client, delivering replies, and recording opt-in, response, and opt-out status.
• To maintain security, prevent abuse, and comply with legal obligations.

We never sell, rent, or trade personal data to third parties, and we do not use client contact data for our own marketing, for profiling, or to train any models.

4. Meta Platform Data & WhatsApp Business Platform Compliance

• We comply with the Meta Platform Terms, Meta Developer Policies, the WhatsApp Business Terms of Service, and the WhatsApp Business Messaging Policy.
• Data minimization: we request only the permissions and data necessary to provide the service a client has requested.
• Client instruction only: client contact lists and messaging data are processed solely under the instruction of the business client that owns them, and are never combined with other clients' data or shared with other clients.
• Security: all data is encrypted in transit (HTTPS/TLS); access tokens and data are stored with restricted access, limited to authorized personnel.
• We do not transfer Platform Data to data brokers, ad networks, or any party not required to provide the service, and we will delete Platform Data as required by Meta or upon request.

5. Sharing

We share information only with service providers needed to operate our services (for example, Meta Platforms for message delivery and ads, Google Workspace for documents and email, and our hosting provider), with the business client on whose behalf data was processed, or where required by law.

6. Data Retention

We keep inquiry and client records for as long as needed to provide services and meet legal, tax, and accounting obligations. Messaging data processed for a client is kept only for the duration of the client engagement (or shorter if the client instructs) and is deleted or returned to the client within 30 days after the engagement ends.

7. User Data Deletion Instructions

Any individual or business client may request deletion of their personal data at any time, including data received through Facebook, Instagram, or WhatsApp:

1. By email: send an email to miguel@m3a2c.com with the subject line "Data Deletion Request", including the phone number or email address associated with your data (and, if applicable, the business that contacted you).
2. By WhatsApp: reply STOP or BAJA to any message sent through our platform. You will be opted out immediately and no further marketing messages will be sent.

We will confirm receipt, delete your data from our systems, and notify the relevant business client within 7 business days. Where we act as a processor, we will also forward the request to the business client as controller. We may retain minimal records only where legally required (for example, a record of your opt-out so you are not contacted again).

8. Your Rights

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your data, to object to processing, and to withdraw consent. Residents of Colombia have rights under Law 1581 of 2012 (habeas data). Contact miguel@m3a2c.com to exercise any right; we will not discriminate against you for doing so.

9. Children

Our services are directed to businesses and organizations and are not intended for children under 13 (or under 18 for messaging services). We do not knowingly collect children's data.

10. International Transfers

We are based in the United States. Data may be processed in the U.S. and other countries where our service providers operate, with appropriate safeguards.

11. Changes

We may update this policy and will post the new effective date on this page.

12. Contact

M3A2C, LLC · Cumming, Georgia, USA · miguel@m3a2c.com