Privacy Policy

1. Data we collect

• Account data: your name, email address, organization details, and authentication identifiers used to create and secure your account.
• WhatsApp Business data: WhatsApp Business Account (WABA) IDs, phone number IDs, display names, message templates, and flow definitions you connect to the Service.
• Message data: the content, metadata, delivery status, and timestamps of messages sent and received through your connected WhatsApp numbers, and the contacts you message.
• Usage and technical data: log data, IP addresses, device/browser information, and diagnostic information needed to operate and secure the Service.

2. How we use WhatsApp and Meta data

We access the WhatsApp Business Platform and Meta APIs solely to provide the Service to you: to send and receive messages on your behalf, manage templates and flows, deliver inbound messages to your team, report delivery and quality status, and meter usage for billing. We use information obtained through the Meta platform only as permitted by, and in compliance with, the Meta Platform Terms and the WhatsApp Business Messaging Policy. We do not sell your data, and we do not use Meta or WhatsApp data for advertising or for any purpose unrelated to operating the Service.

3. How we share data

We share data with infrastructure and processing subprocessors strictly to operate the Service — for example Meta/WhatsApp (to deliver messages), our cloud hosting and database providers, and our payment processor (Razorpay) for subscription billing. We may disclose data when required by law or to protect the rights, safety, and security of our users and the Service.

4. Data retention

We retain account and message data for as long as your organization maintains an active account and as needed to provide the Service. When data is no longer required, or upon a valid deletion request, we delete or anonymize it within a commercially reasonable period, except where longer retention is required by law (for example, billing and tax records).

5. Your rights and data deletion

You may request access to, correction of, or deletion of your personal data. You can delete your organization and associated data from within the Service, or contact us using the details below. If you connected the Service through Facebook/Meta, you may also trigger deletion by removing the app from your Meta account settings; Meta will notify us through our Data Deletion callback and we will process the request. Contacts may opt out of messaging at any time, and we honor opt-out requests.

6. Security

We protect sensitive credentials and access tokens using encryption at rest, restrict access on a least-privilege basis, and verify the authenticity of webhook traffic from Meta and our payment processor. No method of transmission or storage is completely secure, but we take reasonable measures to safeguard your data.

7. International transfers and children

Your data may be processed in countries other than your own. The Service is not directed to children and is intended for business use only.

8. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the “Last updated” date above and, where appropriate, by notifying you within the Service.

9. Contact us

For privacy questions or to exercise your data rights, contact us at [email protected].