Oax Sport WhatsApp inbox privacy notice
Oax Sport Inc. (https://oaxsport.org) is responsible for conversations kept in this private inbox. For privacy questions, write to team@oaxsport.org or use https://oaxsport.org/contact/ and identify your request as a WhatsApp data request.
We use the contact information and messages you provide to respond to your inquiry, arrange the activities you ask about and keep the messaging service secure. The inbox processes WhatsApp contact names and numbers, message text, timestamps, message identifiers and delivery/read or failure information. The current release supports text. It does not download attachments. Please don't send identity documents, payment card details or other sensitive documents through WhatsApp.
Messages pass through WhatsApp and Meta's official Cloud API to our inbox hosted by ChemiCloud. Replies pass through Meta to the recipient. This connection uses no additional WhatsApp messaging provider. Meta/WhatsApp and ChemiCloud handle data as needed to provide their services. The inbox shares a hosting account with other sites. Its authorized account administrators and the hosting provider may have access to that account.
New-message alerts are emailed to team@oaxsport.org. Each alert contains the sender's WhatsApp number, the line contacted and the message text, up to 4,096 characters. Contact names are left out. Attachments are not downloaded; an alert names only their type. Email providers handle these alerts as needed to deliver and store them. Deleting a conversation in the inbox does not delete the email copies.
The inbox requires sign-in and uses HTTPS. Message text, contact names and phone numbers are encrypted in its application database. Keyed identifiers, timestamps and operational state remain outside that encrypted content. Encryption does not prevent access by someone who controls the hosting account and its keys.
Conversations have no automatic expiry in this inbox. Authorized staff delete them manually when they are no longer needed, subject to any applicable record-preservation requirement. Minimal keyed message and send-confirmation identifiers remain after active conversation deletion to prevent replay and duplicate restoration; these markers have no automatic expiry. They contain no message text, contact name, phone number or raw Meta message identifier, but remain pseudonymous records.
Deleting a conversation removes its active inbox records. It does not delete copies on another person's device, Meta/WhatsApp records, hosting logs, backups, alert emails or separately kept booking records. Those copies have separate handling and retention. We have not established a single complete-erasure time for all such copies.
To request access, correction or deletion, write to team@oaxsport.org or use https://oaxsport.org/contact/. State that the request concerns WhatsApp data, give a safe reply address and enough information to identify the conversation, such as its approximate date. You may ask how to provide the WhatsApp number privately. Do not send identity documents with the initial request. We may need limited verification and will explain any preservation requirement or other limit when responding.
The main Oax Sport website privacy notice is at https://oaxsport.org/privacy-policy/.