Your customers’ chats: where they’re stored, who sees them, how to delete them
Covers our WhatsApp Inbox and CRM, WhatsApp AI agent, AI Ads Launcher, AI SEO Software and Postmosis. Checked against our code on 3 November 2026.
Does your data stay in Singapore?
It’s stored here. Each product keeps its database and files in Supabase’s Singapore region, ap-southeast-1. Some of the services that work on your data are in the US, and the table below marks them.
WhatsApp Inbox, CRM and AI agent
Your chats and contacts, your job board, the photos, voice notes and files sent in chats, and your AI agent’s instructions.
AI Ads Launcher
Your campaigns, ads and ad copy, leads from your lead forms, and the connection to the Meta ad accounts it runs.
AI SEO Software
Your site’s pages and audit results, keywords, rankings and drafts. The Google and website logins you add are stored encrypted. Its server code runs in Singapore too.
Postmosis
Your drafts, content plan, profile and brand kit. Videos and slide images you upload stay on your own device.
Who else handles your data
Your WhatsApp Inbox connects your number as a linked device on your WhatsApp Business app, through Green API, a third-party provider. It isn’t Meta’s official WhatsApp API, and Meta charges no per-message fees on it.
Your WhatsApp AI agent runs on Meta’s official WhatsApp Cloud API. Meta charges per message, and we pass those fees on at cost.
| Service | What it gets | Used by |
|---|---|---|
| Supabase, Singapore | Everything each product stores, in its database and file storage | All products |
| Vercel | Serves the apps’ pages and counts visits. Runs the SEO software’s server code in Singapore | All products |
| Green API | Messages to and from a number linked to the Inbox | WhatsApp Inbox |
| Meta, WhatsApp Cloud API | Messages to and from the AI agent’s number | WhatsApp AI agent |
| Meta, Marketing API | Campaigns, ads and lead form leads in the ad accounts it runs | Ads Launcher |
| OpenAI | Chat text, to write the AI agent’s replies. Prompts for ad copy, articles and posts, and audio from your videos, to transcribe it | AI agent, Ads Launcher, SEO software, Postmosis |
| Anthropic | Chat text, when an agent runs on a Claude model. Page copy, for audits | AI agent, SEO software |
| Google Gemini API | Column names and up to three sample values when you import contacts. Prompts, and your exported video when you ask for a review of it | CRM, Ads Launcher, SEO software, Postmosis |
| Groq | Voice notes sent in chats, to turn them into text | Inbox and AI agent |
| TypeSafe, US | Chat text, for the AI agent’s checks. Ad, page and post content | AI agent, Ads Launcher, SEO software, Postmosis |
| Higgsfield | Image and video prompts and reference images. In Postmosis, your photo and voice clips for talking videos | Ads Launcher, Postmosis |
| ElevenLabs, US | Script text, for voiceovers | Postmosis |
| DataForSEO | Domains, keywords and business names | SEO software, Ads Launcher, Postmosis |
| Moz and IndexNow | Your site’s page addresses, to audit them and tell search engines about new pages | SEO software |
| Google Search Console, Analytics, Business Profile and PageSpeed | What’s in the Google accounts you connect, and your page addresses | SEO software |
| Cloudflare | Page addresses it opens to read a page, and email domains it checks | SEO software, Ads Launcher |
| Zernio | The posts and media you schedule, and your social account connections | Postmosis |
| Apify | Public social media handles, for audits | Postmosis |
| Resend, US | Your email address and the emails we send you | All products |
| Stripe | Payment details, when you pay by card | All products |
| PostHog, US | How the app is used, with on-screen text hidden | Inbox, CRM and AI agent, Ads Launcher, SEO software |
| Sentry, US | Error reports, without chat text | Inbox, CRM and AI agent, SEO software |
OpenAI, Anthropic and TypeSafe say on their own pages that they don’t train their models on what we send them. Higgsfield’s policy says it uses what it’s sent to train its models. It gets prompts and photos from the Ads Launcher and Postmosis, never your chats. Anything you connect yourself, such as your own CRM, website or Google account, gets what you send it.
Our website’s enquiry form emails your details to our team through Resend, files them in our own CRM and in Lark, and checks them for spam with TypeSafe. Our privacy policy covers it.
Who can read your chats
| Who | What they can read |
|---|---|
| Your admins | Every chat on your business’s WhatsApp numbers |
| Everyone else on your team | The chats assigned to them, plus any inbox or view your admins share with them |
| Our engineers | Any account’s data, in every product, because they run the databases |
| Anyone handed a file’s link | That one photo or file. Files sent in a chat sit at long random links, and nobody can list them |
Only your owner and admins can share access or remove someone. Removing someone takes away what your team shared with them. In the Ads Launcher, the SEO software and Postmosis, each account sees only its own data. A staff sign-in to your SEO software account lasts up to 8 hours, and each one is logged.
What happens to your data when you cancel
It stays. None of our products deletes data when you cancel, so your chats, contacts and files remain until you ask us to delete them.
In the SEO software, you can also delete your account yourself from the Team page, once no paid plan is active and nobody else is on your team.
Our providers’ copies expire on their own. Meta keeps Cloud API messages for up to 30 days. OpenAI and Anthropic keep what we send their APIs for up to 30 days.
Ask us to delete it in one email
Email us
Write to contact@digitalmarketingagency.sg from the email address on your account.
Say what to delete
Name the product. Then say if it’s your whole account, or one customer’s chats and contact details.
Get our reply
We email you back once it’s deleted.
PDPA: who’s responsible, and who to ask
When our products hold your customers’ data, we process it on your behalf. Under the PDPA, that makes us your data intermediary.
You stay responsible for that data as if you held it yourself (PDPA section 4(3)). So if a customer asks to see or delete their data, they ask you, and you can ask us.
Our Data Protection Officer is Leo Tan. Email contact@digitalmarketingagency.sg with any PDPA question about our products. For data about you as a visitor to this website, see our privacy policy.
What we don’t claim
We don’t hold a SOC 2 or ISO certificate.