Horizonlevel, Lda. · Last updated: August 30, 2026 · Effective: January 1, 2024
This Privacy Policy covers two entities that jointly develop and operate products built on the WhatsApp Business API under the same Meta App:
Developer and operator of Plaanly — a SaaS platform for SME management — and lead technology partner of the ARETEK WhatsApp Connector.
Co-developer and commercial operator of the ARETEK WhatsApp Connector — a WhatsApp Business API integration for Bitrix24 CRM, distributed via the Bitrix24 Marketplace. aresolutions is the commercial face of the ARETEK product and jointly responsible for data processed through it.
Horizonlevel, Lda. acts as the data controller for personal data collected through the Plaanly platform, and as a data processor on behalf of businesses ("Clients") that use Plaanly to manage their own customers' data. For data processed through the ARETEK WhatsApp Connector, Horizonlevel, Lda. and aresolutions, Lda. act as joint data controllers.
When a business creates a Plaanly account, we collect:
Businesses use Plaanly to store information about their own customers and leads:
This data belongs to the Client. Criativatek processes it solely to provide the Plaanly service.
Plaanly integrates with the WhatsApp Business API via Meta's Embedded Signup. When a Client connects a WhatsApp Business Account ("WABA") to Plaanly:
The ARETEK WhatsApp Connector is a WhatsApp Business API integration for Bitrix24 CRM, jointly developed and commercially operated by Horizonlevel, Lda. (Leiria, Portugal) and aresolutions, Lda. (Oeiras, Portugal) as a technology consortium. Both companies contribute to the development, distribution, and commercial operation of this product. This connector uses the same Meta App (App ID: 2040367380231859) as Plaanly's native WhatsApp integration.
When a Bitrix24 client connects a WhatsApp Business Account via the ARETEK Connector:
Horizonlevel, Lda. and aresolutions, Lda. act as joint data controllers for personal data processed through the ARETEK Connector, each responsible for their respective part of the processing. Bitrix24 clients using the ARETEK Connector may contact either entity for data-related requests.
| Purpose | Legal Basis (GDPR) |
|---|---|
| Providing and operating the Plaanly platform | Contract performance (Art. 6(1)(b)) |
| Processing payments and invoicing | Contract performance + Legal obligation (Art. 6(1)(b)(c)) |
| Sending service notifications and security alerts | Legitimate interests (Art. 6(1)(f)) |
| Improving the platform and diagnosing technical issues | Legitimate interests (Art. 6(1)(f)) |
| Compliance with legal obligations | Legal obligation (Art. 6(1)(c)) |
| WhatsApp messaging on behalf of Clients | Contract performance + Legitimate interests (Art. 6(1)(b)(f)) |
We do not:
We share data only in the following circumstances:
| Recipient | Purpose | Safeguards |
|---|---|---|
| Meta Platforms, Inc. | WhatsApp Business API — sending/receiving messages via Graph API | Meta's Data Processing Terms; Standard Contractual Clauses |
| Cloud infrastructure provider | Hosting, database, file storage (servers in EU) | DPA in place; EU-based data centres |
| Email delivery provider | Transactional emails (password reset, notifications) | GDPR-compliant processor; DPA in place |
| aresolutions, Lda. | Joint developer and commercial operator of the ARETEK WhatsApp Connector (Bitrix24) — technology consortium with Horizonlevel; acts as joint data controller for ARETEK connector data | Joint controllership agreement in place; EU-based entity (Oeiras, Portugal); data used only for connector functionality |
| Law enforcement / courts | When required by applicable law or court order | Only what is strictly required; Client notified when legally permissible |
We retain data for as long as the Client's account is active. After account cancellation or termination:
We implement industry-standard security measures:
If you are located in the European Economic Area, you have the following rights:
To exercise any of these rights, email privacy@plaanly.com. We will respond within 30 days. You also have the right to lodge a complaint with the CNPD (Comissão Nacional de Proteção de Dados — cnpd.pt).
You can request complete deletion of your account and all associated data by:
We will confirm the deletion within 7 business days and complete the process within 30 days. A confirmation email will be sent once all data has been permanently removed.
WhatsApp data deletion: When a Client disconnects a WhatsApp Business Account from Plaanly, all associated OAuth tokens are immediately invalidated. Message history is deleted within 30 days. You may also request immediate deletion by emailing the address above.
Plaanly uses only essential cookies required for the application to function:
We do not use advertising, tracking, or analytics cookies.
Plaanly's servers are located within the European Union. If data is transferred outside the EEA (for example, to Meta's servers in the United States), such transfers are covered by appropriate safeguards including Standard Contractual Clauses as approved by the European Commission.
Plaanly is a business-to-business platform intended for use by companies and their employees. It is not directed at individuals under the age of 18. We do not knowingly collect personal data from minors.
We may update this Privacy Policy from time to time. When we make material changes, we will notify Clients by email and update the "Last updated" date at the top of this page. Continued use of Plaanly after the effective date constitutes acceptance of the updated policy.
For any privacy-related questions, requests, or complaints: