Privacy Policy
Last updated 20 October 2026 · luenix
This policy covers Conduit, the gateway we run at conduit.luenix.com. It is deliberately short, because a long one usually means something is being hidden.
What we store
- Your account. Your email address, a hashed password, whether you are an administrator, whether two-factor is on, and when you last signed in.
- Your tenants. The tenant id, the URL your messages are delivered to, the mode, and a secret we generate so your app can prove it is you.
- Your lines. The WhatsApp number linked to each line and its current state.
- Message bodies. We do not keep them. A message is delivered to your app and then dropped. The only exception is a voice note, which is written to disk so your app can fetch it, and which we delete after 30 days.
What we do not do
- We do not read the content of your messages, and we cannot: it is not stored.
- We do not sell or share your data. There is no third-party analytics on this service.
- We do not use your messages to train anything.
Who can see what
An administrator sees every tenant, every line and every user. Everyone else sees only the tenants they have been given. The tenant secret is visible to administrators only.
Session cookies
Signing in sets one cookie. It is marked HttpOnly and SameSite=Strict, and Secure when the site is served over HTTPS. It holds a random token; the token itself is stored hashed, so a copy of our database does not hand anyone a working session. Sessions expire after 12 hours.
Where the data lives
On our servers. The WhatsApp session keys, which are capable of acting as the linked number, are kept in a separate database from your account data, and the server disk is encrypted. If you want the keys gone, unlink the number or delete the tenant: we remove the session with it.
How long we keep it
- Accounts and tenants: until you ask us to remove them.
- Sessions: until they expire, then deleted.
- Voice notes: 30 days.
- Server logs: 30 days.
Your rights
You can ask for a copy of what we hold, ask us to correct it, or ask us to delete it. Write to privacy@luenix.com and we will do it within 30 days.
Changes
If we change this policy in a way that affects you, we will tell you by email before the change takes effect.