Privacy Policy

WAChatAPI Privacy Policy Your privacy is important to us. Please read this policy carefully. Last Updated: May 2, 2026 📋 Table of Contents Who We Are Information We Collect How We Use Your Information WhatsApp Business Platform Data How We Share Your Information Data Retention Data Security Your Rights Cookies and Tracking Children's Privacy International Data Transfers Third-Party Services Changes to This Policy Contact Us 1 Who We Are WAChatAPI (accessible at wachatapi.cloud) is a WhatsApp Business API platform that enables businesses to integrate and use the WhatsApp Business Cloud API for business communications. We operate as a Tech Provider on the WhatsApp Business Platform operated by Meta Platforms, Inc. This Privacy Policy explains how WAChatAPI ("we", "us", "our") collects, uses, stores, and protects information when you ("you", "the user", "business customer") use our platform, services, or website. By using WAChatAPI, you agree to the collection and use of your information in accordance with this Privacy Policy. 2 Information We Collect We collect information in the following categories: 2.1 Account & Registration Information Full name and business name Email address and phone number Business address and country Password (stored in encrypted form) Business website URL 2.2 WhatsApp Business Account (WABA) Data WhatsApp Business Account ID (WABA ID) Business phone number(s) registered on the platform WhatsApp display name and business profile information Message templates created and submitted Meta system user access tokens (stored securely) 2.3 Messaging Data Messages sent and received via the WhatsApp Cloud API through our platform Message delivery and read status (webhooks) Contact phone numbers your business communicates with Media files (images, documents, audio) sent or received 2.4 Technical & Usage Data IP address and browser type Device type and operating system Pages visited and features used on the platform API request logs and error logs Login timestamps and session data 2.5 Billing & Payment Information Billing name and address Payment method details (processed securely via third-party payment processors — we do not store card numbers) Transaction history and invoices 3 How We Use Your Information We use the information we collect for the following purposes: Purpose Data Used Legal Basis Provide and operate our platform services Account info, WABA data, messaging data Contractual necessity Process WhatsApp API requests on your behalf WABA ID, phone numbers, access tokens Contractual necessity Send platform notifications and alerts Email, phone number Legitimate interest Process billing and payments Billing info, transaction data Contractual necessity Improve platform performance and features Usage data, error logs Legitimate interest Comply with legal obligations All data as required Legal obligation Prevent fraud and ensure platform security IP address, usage data, login data Legitimate interest Customer support and issue resolution Account info, messaging logs Contractual necessity We do not use your messaging data (messages your business sends/receives via WhatsApp) for advertising, marketing, or any purpose other than delivering the service. 4 WhatsApp Business Platform Data As a Tech Provider on the WhatsApp Business Platform, we operate under Meta's platform terms and policies. The following applies specifically to data processed through the WhatsApp Business Cloud API: 4.1 Message Content Messages sent and received through our platform are transmitted via Meta's WhatsApp Cloud API infrastructure. We process message content solely to deliver the messaging service to you. We do not read, analyze, or use the content of your customers' messages for any other purpose. 4.2 End-User (Your Customers') Data When your business uses our platform to communicate with your customers via WhatsApp, your customers' phone numbers and message content pass through our systems. You, as the business operator, are responsible for: Obtaining valid opt-in consent from your end users before messaging them Complying with WhatsApp's Business Policy and Commerce Policy Complying with all applicable data protection laws for your customers' data 4.3 Coexistence / WhatsApp Business App Sync If you use our Coexistence feature (connecting your existing WhatsApp Business App account to Cloud API), we may receive and temporarily store: Your WhatsApp Business App contact list Up to 6 months of your prior message history (only if you explicitly consent during the Embedded Signup flow) This data is used solely to populate your messaging history in our platform and is not shared with any third parties. 4.4 Meta Platform Compliance Our use of the WhatsApp Business Platform is governed by Meta's WhatsApp Business Policy and Meta Platform Terms. We do not use WhatsApp data in any way that violates these terms. Important: Messages sent via the WhatsApp Business app (when using Coexistence) are subject to WhatsApp's end-to-end encryption. We only receive message data that is delivered to us via official Meta API webhooks. 5 How We Share Your Information We do not sell your personal data. We may share your information only in the following limited circumstances: 5.1 Meta / WhatsApp As a WhatsApp Business API Tech Provider, we share necessary data with Meta Platforms, Inc. to operate the WhatsApp Cloud API on your behalf. This includes your WABA ID, business phone numbers, and access tokens required to authenticate API requests. 5.2 Service Providers We work with trusted third-party service providers who assist us in operating our platform: Cloud hosting providers — to host our platform infrastructure Payment processors — to securely handle billing transactions Email service providers — to send transactional notifications Analytics providers — to understand platform usage (anonymized data only) All service providers are bound by contractual data protection obligations and are not permitted to use your data for their own purposes. 5.3 Legal Requirements We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., courts, government agencies), or to protect our legal rights. 5.4 Business Transfers In the event of a merger, acquisition, or sale of all or part of our assets, your data may be transferred. We will notify you before your data is transferred and becomes subject to a different privacy policy. We never sell, rent, or trade your personal data or your customers' data to any third party for marketing or advertising purposes. 6 Data Retention We retain your data for as long as necessary to provide our services and comply with legal obligations: Data Type Retention Period Account information Duration of your account + 90 days after deletion Message logs and webhooks 90 days (for debugging and support purposes) API request logs 30 days Billing records and invoices 7 years (legal/tax compliance) WhatsApp Business App sync history (Coexistence) Duration of your account or until you disconnect Security and fraud logs 12 months When you delete your account, we will delete or anonymize your personal data within 90 days, unless we are required to retain it for legal compliance purposes. 7 Data Security We implement industry-standard security measures to protect your data: Encryption in transit — All data transmitted between your browser and our platform is encrypted using TLS (HTTPS) Encryption at rest — Sensitive data including access tokens and credentials are encrypted at rest using AES-256 Access controls — Strict role-based access controls limit who can access user data internally Regular security audits — We conduct periodic security assessments of our platform Secure API endpoints — All API communications use authenticated, rate-limited endpoints Two-factor authentication — Available for all platform accounts Important: While we take all reasonable precautions, no method of transmission over the internet is 100% secure. You are responsible for maintaining the security of your own account credentials. 8 Your Rights Depending on your location, you may have the following rights regarding your personal data: 8.1 General Rights Right to Access — Request a copy of the personal data we hold about you Right to Correction — Request correction of inaccurate or incomplete data Right to Deletion — Request deletion of your personal data ("right to be forgotten") Right to Portability — Request your data in a portable, machine-readable format Right to Restrict Processing — Request that we limit how we use your data Right to Object — Object to processing based on legitimate interests Right to Withdraw Consent — Withdraw consent at any time where processing is based on consent 8.2 How to Exercise Your Rights To exercise any of these rights, please contact us at privacy@wachatapi.cloud with the subject line "Privacy Request". We will respond within 30 days. We may need to verify your identity before processing your request. 8.3 Complaints If you believe we have not handled your data correctly, you have the right to lodge a complaint with the relevant data protection authority in your country. 9 Cookies and Tracking We use cookies and similar tracking technologies on our website and platform. The types of cookies we use are: Cookie Type Purpose Duration Essential Cookies Required for the platform to function (login sessions, security tokens) Session Functional Cookies Remember your preferences (language, settings) 1 year Analytics Cookies Understand how users navigate our platform (anonymized) 90 days You can control cookie settings through your browser. Note that disabling essential cookies may affect platform functionality. 10 Children's Privacy WAChatAPI is a business-to-business platform intended for use by businesses and professionals. Our services are not directed at children under the age of 13 (or 16 in the European Union). We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately at privacy@wachatapi.cloud and we will delete such data promptly. 11 International Data Transfers WAChatAPI operates globally and your data may be transferred to and processed in countries other than the one in which you reside. Specifically: Data transmitted through the WhatsApp Cloud API passes through Meta's infrastructure, which may be located in the United States and other countries Our hosting infrastructure may be located in multiple regions to ensure performance and reliability When we transfer data internationally, we ensure that appropriate safeguards are in place, including standard contractual clauses, adequacy decisions, or other legally recognized transfer mechanisms. 12 Third-Party Services Our platform integrates with third-party services whose privacy practices we do not control. These include: Meta / WhatsApp — Meta Privacy Policy Payment processors — Governed by their respective privacy policies We encourage you to review the privacy policies of any third-party services you use in connection with our platform. 13 Changes to This Policy We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will: Update the "Last Updated" date at the top of this policy Send you an email notification to your registered email address Display a prominent notice on our platform Your continued use of WAChatAPI after the changes take effect constitutes your acceptance of the revised policy. If you do not agree to the updated policy, you should stop using our services and delete your account. 14 Contact Us If you have any questions, concerns, or requests regarding this Privacy Policy or the way we handle your data, please contact us: WAChatAPI — Privacy Team 📧 Email: privacy@wachatapi.cloud 🌐 Website: https://wachatapi.cloud 📬 For data deletion requests, use subject: "Privacy Request — Data Deletion" 📬 For data access requests, use subject: "Privacy Request — Data Access" We aim to respond to all privacy-related inquiries within 30 days. WAChatAPI — WhatsApp Business API Platform 📧 privacy@wachatapi.cloud 🌐 https://wachatapi.cloud 📅 This policy is effective as of May 2, 2026 WAChatAPI is an independent Tech Provider on the WhatsApp Business Platform. WhatsApp is a trademark of Meta Platforms, Inc. WAChatAPI is not affiliated with Meta.