Privacy Policy
Last updated: 14 October 2026
This policy explains how [Legal business name] ("we", "us") collects and uses information when businesses use WhatsApp for CRM (the "Service") to send and receive WhatsApp messages through Meta's WhatsApp Business Platform from their CRM.
Information we process
- Business account details: CRM sub-account ID, business name, user name and email provided by the CRM when the Service is opened.
- WhatsApp Business account details: WhatsApp Business Account ID, phone number ID, display phone number and access tokens issued by Meta when a business connects its number.
- Messages: phone numbers of the business's customers, message content, media files and delivery status (sent, delivered, read, failed) of messages sent or received through the Service.
- Usage and billing records: message counts, template categories and wallet balance.
How we use it
- To deliver messages between the business's CRM and WhatsApp, and to show replies and delivery status in the CRM.
- To manage WhatsApp message templates on the business's behalf.
- To calculate usage and charges, prevent abuse and provide support.
We do not sell personal information and do not use message content for advertising.
Sharing
Information is shared only with: Meta Platforms (WhatsApp Business Platform), which transmits the messages; the business's CRM provider, where messages are displayed; and infrastructure providers that host the Service. We may disclose information when required by law.
Security
Access tokens and credentials are stored encrypted. Data is transmitted over HTTPS. Access is limited to authorised personnel.
Retention
Message records are kept while the business uses the Service and for up to 90 days after it disconnects, unless a longer period is required by law. Businesses can request deletion at any time (see Data deletion).
Your rights
Businesses and their customers may request access, correction or deletion of their data by contacting us. End customers can also contact the business that messaged them.
Contact
[Legal business name], [Registered business address]. Email: [contact email]