Dent Butler Prototype Privacy Notice

Last updated: 6 September 2026

Testing draft: this notice has not received privacy/legal approval. Remove this notice and the noindex directive, and review the published page before using its URL for production or final Meta App Review.

Who this notice covers

Dent Butler is a service being developed by Miraf Technologies. This notice covers the limited WhatsApp Business Platform prototype used to evaluate whether Meta is suitable for Dent Butler. The prototype is restricted to synthetic content and consenting test participants. Real patient or clinical data is prohibited.

Information used during the prototype

Meta may send the prototype test account a participant's test phone number, WhatsApp profile name, synthetic message content, message and account identifiers, delivery status, and technical callback information. Dent Butler also uses app, WhatsApp Business Account, template, and connection configuration needed to operate the test.

How information is used

We use test information only to verify webhook security, message delivery, templates, status ordering, retry behavior, account onboarding, and offboarding. It is not used for advertising, profiling, automated clinical decisions, or training an AI model.

Storage and logs

The temporary webhook probe validates signed callbacks in memory and does not persist callback bodies. Its console logs contain timestamps and aggregate sizes, counts, and status categories only. Sanitized engineering evidence excludes message bodies, names, phone numbers, access tokens, secrets, and provider asset identifiers.

Sharing and international processing

WhatsApp messages and related metadata are processed by Meta and its service providers under Meta's applicable terms and privacy documentation. Cloudflare carries encrypted test webhook traffic to the temporary endpoint. These providers may process information outside Malaysia. Production use remains blocked until the required privacy, contractual, international-transfer, retention, and deletion reviews are approved.

Retention and deletion

The probe itself does not retain callback content. Test messages and metadata may remain in Meta systems according to Meta's policies and the test account's settings. Test assets and sanitized evidence are removed when no longer needed for the evaluation, subject to security, legal, and audit requirements. A production retention schedule has not yet been approved, so the prototype must not process real patient data.

Security

The prototype uses HTTPS, verifies Meta webhook signatures over the exact request body, limits request size and rate, keeps credentials out of source control, and records no message content in application logs. No internet transmission or storage system can be guaranteed completely secure.

Your choices and requests

Test participation is voluntary. A participant may stop sending messages, block the test number, or ask us to stop the test and delete locally controlled test information. Requests concerning information held by Meta may also need to be made through Meta or WhatsApp.

Children and emergencies

The prototype is not intended for children, healthcare advice, emergencies, or clinical communication. Do not send medical or sensitive personal information.

Changes

We will update this notice before the purpose, data use, providers, or production status changes. The date above identifies the current version.

Contact

Privacy questions and requests: drxenos.xyz@gmail.com