Privacy policy

1. Who we are

WhatsApp Console

WhatsApp Console is a service that lets businesses talk to their customers on WhatsApp: a shared team inbox, message templates, broadcasts and chatbots. In this policy, "we" means WhatsApp Console.

2. Two kinds of people, two roles

• Our customers (businesses and their team members). We are responsible for the account details they give us.
• Our customers' own customers. When a business uses our service, we handle the phone numbers, names, messages and files of the people it talks to on that business's behalf. The business decides why and how this data is used and is responsible for having these people's permission to message them. We process it only to run the service.

3. What we collect

• Account details: your name, business name, email address, mobile number and, if you sign in with Google, your Google account id and email.
• Messaging data: WhatsApp phone numbers, names given by WhatsApp or the business, message text, files, delivery status, labels, notes, and records of consent (including how and when a person agreed, and STOP requests).
• Payment records: plan, amount, GST and invoice number. Card and bank details are handled by our payment provider and never reach us.
• Technical records: sign-in times, error logs and security events.

4. Why we use it

To provide and protect the service, send and receive WhatsApp messages, verify your mobile number and email, bill you, answer support requests, prevent misuse, and meet legal obligations.

5. Who we share it with

• Meta Platforms (WhatsApp Business Platform): to send and receive WhatsApp messages. Meta's own privacy policy applies to what it receives.
• Google: only to sign you in with your Google account.
• Razorpay: to take payments for subscriptions.
• Email and hosting providers: to send verification emails and to run the service.
• Anthropic (AI provider): only if a business switches on the AI assistant. The text of a customer's message is then sent to generate a reply. Businesses control this setting.
• Authorities: when the law requires it.

We do not sell personal data.

6. WhatsApp messaging and consent

Businesses must only message people who have agreed to receive WhatsApp messages. People can stop messages at any time by replying STOP, and we then block further messages to them from that business.

7. How long we keep it

We keep account and messaging data while the account is active. When an account is closed or a deletion request is approved, we delete the data within 30 days, except what we must keep by law (for example invoices and payment records) and a minimal record that a person sent STOP, so that nobody messages them again.

8. Security

Access tokens and secrets are stored encrypted. Data of one business is kept separate from every other business. Connections use https. Access to the service is protected by sign-in and verification codes. No system is perfectly secure, so please tell us at once if you think your account was misused.

9. Your rights

You can ask to see, correct or erase your personal data, withdraw consent and complain about how it is handled, as described in the Digital Personal Data Protection Act, 2023 and other applicable law. If you are a customer of one of our business customers, please contact that business first. You can also write to us. To ask for deletion, use our data deletion page.

Grievance Officer: WhatsApp Console. We reply within 7 days.

10. Children

The service is for businesses and is not meant for children.

11. Changes

If we change this policy in a way that matters, we will update the date above and, where needed, tell account holders.

Privacy policy · Terms of service · Data deletion