Privacy Policy
How MISTA LLC collects, uses, and protects personal information across our communication platform.
1. Introduction
MISTA LLC ("Mista", "we", "us", or "our"), located at 30 North Gould Street, Sheridan, WY 82801, United States, operates the Mista communication platform, including our website at https://mista.io, customer dashboard at https://dashboard.mista.io, APIs at https://api.mista.io, and related services (collectively, the "Services").
This Privacy Policy explains how we collect, use, disclose, and safeguard personal information when you visit our websites, create an account, use our messaging products (including SMS, Voice, and Mista Verify), or otherwise interact with us.
By using the Services, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree, please do not use the Services.
2. Data Controller
The data controller responsible for your personal information is MISTA LLC, 30 North Gould Street, Sheridan, WY 82801, United States.
For privacy-related questions or requests, contact us at privacy@mista.io or legal@mista.io, or by phone at +1 858 533 0771.
3. Information We Collect
3.1 Information you provide
- Account registration details (name, email address, phone number, company name, billing information).
- Authentication credentials and API tokens.
- Message content, contact lists, campaign data, and configuration you upload or transmit through the Services.
- Support correspondence and feedback.
- WhatsApp Business account connection data when you link your Meta Business account to Mista.
3.2 Information collected automatically
- Log data (IP address, browser type, device identifiers, pages visited, timestamps).
- Usage data related to API calls, message delivery reports, and dashboard activity.
- Cookies and similar technologies on our website (see Section 10).
3.3 Information from third parties
- Telecommunications carriers and messaging aggregators for delivery status and routing.
- Meta Platforms, Inc. and its affiliates when you use WhatsApp Business API through Mista, in accordance with Meta's terms and policies.
- Payment processors for transaction confirmation (we do not store full payment card numbers).
4. How We Use Your Information
We use personal information to:
- Provide, operate, maintain, and improve the Services.
- Process and deliver messages on your behalf through connected channels (SMS, Voice, Verify, and related products).
- Authenticate users, prevent fraud, and enforce our Terms & Conditions.
- Provide customer support and respond to inquiries.
- Send service-related notices (account, security, billing, product updates).
- Comply with legal obligations, lawful requests, and industry regulations.
- Analyze aggregated usage to improve reliability, performance, and features.
5. WhatsApp Business API and Meta
When you connect WhatsApp Business messaging through Mista, we process message data, phone numbers, delivery events, and related metadata as your service provider to enable sending and receiving WhatsApp messages.
Your use of WhatsApp is also subject to the WhatsApp Business Terms of Service, Meta Business Tools Terms, and applicable Meta policies. Mista does not control Meta's independent processing of data on WhatsApp's platform.
We access WhatsApp-related data only as necessary to provide the Services you configure, including message templates, session messages, webhooks, and delivery receipts.
You are responsible for obtaining valid consent from end users before sending them WhatsApp or other electronic communications, and for providing your own privacy notice to your customers where required by law.
6. Legal Bases for Processing (where applicable)
Where data protection laws require a legal basis, we rely on: performance of a contract (providing the Services); legitimate interests (security, improvement, fraud prevention); consent (where required for marketing or optional features); and legal obligation.
8. Data Retention
We retain personal information for as long as your account is active or as needed to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements.
Message logs and delivery records may be retained according to your plan settings and applicable regulatory requirements. You may request deletion subject to legal and operational constraints.
9. Security
We implement administrative, technical, and organizational measures designed to protect personal information, including encryption in transit (TLS), access controls, and monitoring. No method of transmission or storage is completely secure; we cannot guarantee absolute security.
11. International Data Transfers
Your information may be processed in countries other than your country of residence, including where our servers or service providers operate. We take steps to ensure appropriate safeguards where required by applicable law.
12. Your Rights
Depending on your location, you may have rights to access, correct, delete, restrict, or port your personal information, and to object to or withdraw consent for certain processing. To exercise these rights, contact privacy@mista.io. We may verify your identity before responding.
You may also lodge a complaint with a supervisory authority in your jurisdiction.
13. Children's Privacy
The Services are not directed to individuals under 18. We do not knowingly collect personal information from children. If you believe we have collected such information, contact us and we will take appropriate steps to delete it.
14. Changes to This Policy
We may update this Privacy Policy from time to time. We will post the revised policy on this page with an updated effective date. Material changes may be notified via email or dashboard notice where appropriate.
15. Contact Us
MISTA LLC
30 North Gould Street
Sheridan, WY 82801
United States
Phone: +1 858 533 0771
Email: privacy@mista.io
Legal inquiries: legal@mista.io
Website: https://mista.io
Questions?
Privacy: privacy@mista.io
Support: support@mista.io