We act as a processor for tenant content/end‑user data; we act as a controller for account/billing/security/telemetry.
WhatsApp / Meta data processing chain: When the Customer uses WhatsApp Business API features, the following roles apply:
- Customer (tenant) — Data Controller: determines purposes and means of processing end‑user personal data;
- Meta Platforms, Inc. — Data Processor: processes data on Customer's behalf under the Meta Global Processor Terms (MGPT) and WhatsApp Business Terms of Service;
- MonkeyMachine — Sub‑Processor: processes data on Customer's instruction through Meta's Cloud API, subject to this DPA and the Customer's agreement with Meta.
The Customer is responsible for ensuring a valid legal basis (e.g., consent, legitimate interest) for processing end‑user data via WhatsApp and for compliance with Meta's WhatsApp Business Policy and Commerce Policy.
CRM Integration data processing chain (YCLIENTS, amoCRM, RetailCRM):
- Customer (tenant) — Data Controller: independently determines purposes and scope of processing end-user personal data, obtains data subject consents, and bears responsibility before data subjects and supervisory authorities;
- CRM System (YCLIENTS / amoCRM / RetailCRM) — Independent Data Controller: processes data under its own legal relationships with the Customer and end users; registered as a personal data operator with the relevant supervisory authority;
- MonkeyMachine — Data Processor: processes data received from or transmitted to the CRM system solely on the Customer's instructions and within the scope of the activated integration functionality.
MonkeyMachine does not enter into independent legal relationships with the CRM system regarding the Customer's end-user personal data. Data exchange between MonkeyMachine and the CRM system is carried out exclusively on the Customer's instructions. The Customer must independently resolve legal arrangements with the CRM system operator, including executing necessary data processing agreements.