Last updated: July 22, 2026
We collect: account information (name, email, password); organization data; WhatsApp Business API credentials (encrypted at rest); contact data you import; message logs; usage metrics; billing information (via Stripe — we never store card numbers).
We use your data to: provide and improve the Service; process payments; send service notifications; enforce our Terms; comply with legal obligations. We do not sell your data.
Data is stored on Supabase (PostgreSQL) with row-level security. WhatsApp tokens are encrypted with AES-256-GCM. We use HTTPS everywhere. We follow industry-standard security practices.
We use: Supabase (database/auth), Stripe (payments), Meta/WhatsApp (messaging API), OpenAI (optional AI features), Vercel (hosting). Each has its own privacy policy.
You may: access, update, or delete your data at any time; export your contacts and message history; cancel your account and request data deletion. Contact us to exercise these rights.
Your customers' contact information and messages belong to you. We process this data only to provide the Service. We do not use your customers' data for any other purpose.
We use session cookies for authentication only. We do not use tracking or advertising cookies.
We retain your data for the duration of your subscription plus 30 days after cancellation. You may request immediate deletion at any time.
Privacy questions: privacy@wacrm.app