WAChatAPI
Privacy Policy
Your privacy is important to us. Please read this policy carefully.
Last Updated: May 2, 2026
📋 Table of Contents
Who We Are
Information We Collect
How We Use Your Information
WhatsApp Business Platform Data
How We Share Your Information
Data Retention
Data Security
Your Rights
Cookies and Tracking
Children's Privacy
International Data Transfers
Third-Party Services
Changes to This Policy
Contact Us
1
Who We Are
WAChatAPI (accessible at wachatapi.cloud) is a WhatsApp Business API platform that enables businesses to integrate and use the WhatsApp Business Cloud API for business communications. We operate as a Tech Provider on the WhatsApp Business Platform operated by Meta Platforms, Inc.
This Privacy Policy explains how WAChatAPI ("we", "us", "our") collects, uses, stores, and protects information when you ("you", "the user", "business customer") use our platform, services, or website.
By using WAChatAPI, you agree to the collection and use of your information in accordance with this Privacy Policy.
2
Information We Collect
We collect information in the following categories:
2.1 Account & Registration Information
Full name and business name
Email address and phone number
Business address and country
Password (stored in encrypted form)
Business website URL
2.2 WhatsApp Business Account (WABA) Data
WhatsApp Business Account ID (WABA ID)
Business phone number(s) registered on the platform
WhatsApp display name and business profile information
Message templates created and submitted
Meta system user access tokens (stored securely)
2.3 Messaging Data
Messages sent and received via the WhatsApp Cloud API through our platform
Message delivery and read status (webhooks)
Contact phone numbers your business communicates with
Media files (images, documents, audio) sent or received
2.4 Technical & Usage Data
IP address and browser type
Device type and operating system
Pages visited and features used on the platform
API request logs and error logs
Login timestamps and session data
2.5 Billing & Payment Information
Billing name and address
Payment method details (processed securely via third-party payment processors — we do not store card numbers)
Transaction history and invoices
3
How We Use Your Information
We use the information we collect for the following purposes:
Purpose Data Used Legal Basis
Provide and operate our platform services Account info, WABA data, messaging data Contractual necessity
Process WhatsApp API requests on your behalf WABA ID, phone numbers, access tokens Contractual necessity
Send platform notifications and alerts Email, phone number Legitimate interest
Process billing and payments Billing info, transaction data Contractual necessity
Improve platform performance and features Usage data, error logs Legitimate interest
Comply with legal obligations All data as required Legal obligation
Prevent fraud and ensure platform security IP address, usage data, login data Legitimate interest
Customer support and issue resolution Account info, messaging logs Contractual necessity
We do not use your messaging data (messages your business sends/receives via WhatsApp) for advertising, marketing, or any purpose other than delivering the service.
4
WhatsApp Business Platform Data
As a Tech Provider on the WhatsApp Business Platform, we operate under Meta's platform terms and policies. The following applies specifically to data processed through the WhatsApp Business Cloud API:
4.1 Message Content
Messages sent and received through our platform are transmitted via Meta's WhatsApp Cloud API infrastructure. We process message content solely to deliver the messaging service to you. We do not read, analyze, or use the content of your customers' messages for any other purpose.
4.2 End-User (Your Customers') Data
When your business uses our platform to communicate with your customers via WhatsApp, your customers' phone numbers and message content pass through our systems. You, as the business operator, are responsible for:
Obtaining valid opt-in consent from your end users before messaging them
Complying with WhatsApp's Business Policy and Commerce Policy
Complying with all applicable data protection laws for your customers' data
4.3 Coexistence / WhatsApp Business App Sync
If you use our Coexistence feature (connecting your existing WhatsApp Business App account to Cloud API), we may receive and temporarily store:
Your WhatsApp Business App contact list
Up to 6 months of your prior message history (only if you explicitly consent during the Embedded Signup flow)
This data is used solely to populate your messaging history in our platform and is not shared with any third parties.
4.4 Meta Platform Compliance
Our use of the WhatsApp Business Platform is governed by Meta's WhatsApp Business Policy and Meta Platform Terms. We do not use WhatsApp data in any way that violates these terms.
Important: Messages sent via the WhatsApp Business app (when using Coexistence) are subject to WhatsApp's end-to-end encryption. We only receive message data that is delivered to us via official Meta API webhooks.
5
How We Share Your Information
We do not sell your personal data. We may share your information only in the following limited circumstances:
5.1 Meta / WhatsApp
As a WhatsApp Business API Tech Provider, we share necessary data with Meta Platforms, Inc. to operate the WhatsApp Cloud API on your behalf. This includes your WABA ID, business phone numbers, and access tokens required to authenticate API requests.
5.2 Service Providers
We work with trusted third-party service providers who assist us in operating our platform:
Cloud hosting providers — to host our platform infrastructure
Payment processors — to securely handle billing transactions
Email service providers — to send transactional notifications
Analytics providers — to understand platform usage (anonymized data only)
All service providers are bound by contractual data protection obligations and are not permitted to use your data for their own purposes.
5.3 Legal Requirements
We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., courts, government agencies), or to protect our legal rights.
5.4 Business Transfers
In the event of a merger, acquisition, or sale of all or part of our assets, your data may be transferred. We will notify you before your data is transferred and becomes subject to a different privacy policy.
We never sell, rent, or trade your personal data or your customers' data to any third party for marketing or advertising purposes.
6
Data Retention
We retain your data for as long as necessary to provide our services and comply with legal obligations:
Data Type Retention Period
Account information Duration of your account + 90 days after deletion
Message logs and webhooks 90 days (for debugging and support purposes)
API request logs 30 days
Billing records and invoices 7 years (legal/tax compliance)
WhatsApp Business App sync history (Coexistence) Duration of your account or until you disconnect
Security and fraud logs 12 months
When you delete your account, we will delete or anonymize your personal data within 90 days, unless we are required to retain it for legal compliance purposes.
7
Data Security
We implement industry-standard security measures to protect your data:
Encryption in transit — All data transmitted between your browser and our platform is encrypted using TLS (HTTPS)
Encryption at rest — Sensitive data including access tokens and credentials are encrypted at rest using AES-256
Access controls — Strict role-based access controls limit who can access user data internally
Regular security audits — We conduct periodic security assessments of our platform
Secure API endpoints — All API communications use authenticated, rate-limited endpoints
Two-factor authentication — Available for all platform accounts
Important: While we take all reasonable precautions, no method of transmission over the internet is 100% secure. You are responsible for maintaining the security of your own account credentials.
8
Your Rights
Depending on your location, you may have the following rights regarding your personal data:
8.1 General Rights
Right to Access — Request a copy of the personal data we hold about you
Right to Correction — Request correction of inaccurate or incomplete data
Right to Deletion — Request deletion of your personal data ("right to be forgotten")
Right to Portability — Request your data in a portable, machine-readable format
Right to Restrict Processing — Request that we limit how we use your data
Right to Object — Object to processing based on legitimate interests
Right to Withdraw Consent — Withdraw consent at any time where processing is based on consent
8.2 How to Exercise Your Rights
To exercise any of these rights, please contact us at privacy@wachatapi.cloud with the subject line "Privacy Request". We will respond within 30 days. We may need to verify your identity before processing your request.
8.3 Complaints
If you believe we have not handled your data correctly, you have the right to lodge a complaint with the relevant data protection authority in your country.
9
Cookies and Tracking
We use cookies and similar tracking technologies on our website and platform. The types of cookies we use are:
Cookie Type Purpose Duration
Essential Cookies Required for the platform to function (login sessions, security tokens) Session
Functional Cookies Remember your preferences (language, settings) 1 year
Analytics Cookies Understand how users navigate our platform (anonymized) 90 days
You can control cookie settings through your browser. Note that disabling essential cookies may affect platform functionality.
10
Children's Privacy
WAChatAPI is a business-to-business platform intended for use by businesses and professionals. Our services are not directed at children under the age of 13 (or 16 in the European Union).
We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately at privacy@wachatapi.cloud and we will delete such data promptly.
11
International Data Transfers
WAChatAPI operates globally and your data may be transferred to and processed in countries other than the one in which you reside. Specifically:
Data transmitted through the WhatsApp Cloud API passes through Meta's infrastructure, which may be located in the United States and other countries
Our hosting infrastructure may be located in multiple regions to ensure performance and reliability
When we transfer data internationally, we ensure that appropriate safeguards are in place, including standard contractual clauses, adequacy decisions, or other legally recognized transfer mechanisms.
12
Third-Party Services
Our platform integrates with third-party services whose privacy practices we do not control. These include:
Meta / WhatsApp — Meta Privacy Policy
Payment processors — Governed by their respective privacy policies
We encourage you to review the privacy policies of any third-party services you use in connection with our platform.
13
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:
Update the "Last Updated" date at the top of this policy
Send you an email notification to your registered email address
Display a prominent notice on our platform
Your continued use of WAChatAPI after the changes take effect constitutes your acceptance of the revised policy. If you do not agree to the updated policy, you should stop using our services and delete your account.
14
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or the way we handle your data, please contact us:
WAChatAPI — Privacy Team
📧 Email: privacy@wachatapi.cloud
🌐 Website: https://wachatapi.cloud
📬 For data deletion requests, use subject: "Privacy Request — Data Deletion"
📬 For data access requests, use subject: "Privacy Request — Data Access"
We aim to respond to all privacy-related inquiries within 30 days.
WAChatAPI — WhatsApp Business API Platform
📧 privacy@wachatapi.cloud
🌐 https://wachatapi.cloud
📅 This policy is effective as of May 2, 2026
WAChatAPI is an independent Tech Provider on the WhatsApp Business Platform.
WhatsApp is a trademark of Meta Platforms, Inc. WAChatAPI is not affiliated with Meta.