Privacy Policy

Introduction

WA-Connect ("we", "us", "the Service") is committed to protecting user privacy and full compliance with the WhatsApp Business Solution Terms enforced by Meta Platforms, Inc. This policy explains what data we collect, how we use it, how long we retain it, and your rights over it.

Data We Collect

• WhatsApp phone number: the number registered on WhatsApp — used to establish a session bound to your account.
• Message content: messages sent and received through the WhatsApp session bound to your account — stored only in your own dedicated database inside your container.
• Contact list: names and numbers synced from WhatsApp — used to display contacts in the admin UI.
• Media: images, videos, documents sent via messages — stored temporarily to facilitate delivery.
• Account data: name, email, subscription ID — collected at signup.

How We Use Your Data

• Routing messages between your WhatsApp account and the admin UI or your API integration.
• Storing message log and contacts inside your isolated database.
• Sending core system notifications (OTP verification code, subscription status, account alerts).
• Complying with legal obligations and responding to lawful requests.

Sharing with Third Parties

We do NOT sell, rent, or share your data with any third party for marketing. Data lives on our approved servers only. Limited exceptions:

• Payment gateway (Thawani): to process subscription transactions — only billing data is shared.
• Fallback OTP providers: when WhatsApp OTP delivery fails, an SMS containing only your number may be sent — no other content.
• Legal obligation: when compelled by a valid court order from a competent authority.

Data Retention & Your Rights

• Retention: messages and contacts are kept for the duration of your active subscription. On cancellation, your database is fully deleted within 30 days.
• Right to erasure: you may request deletion of your account and all data at any time by contacting support.
• Right of access: you can export your messages and contacts from the admin UI anytime.
• Right of rectification: you can update your account details from the settings page.

Compliance with WhatsApp / Meta Policies

We comply with the WhatsApp Business Solution Terms and do not use the platform for unsolicited messaging, impersonation, or any activity that violates Meta business policies. Subscribers are encouraged to review and abide by those policies as well.

Data Security

Data is stored on isolated servers in separate Docker containers, with encrypted backups. Traffic between user and server is encrypted via TLS 1.2+. Administrative access is restricted to authorized personnel via two-factor authentication.

Children

The Service is not intended for users under 18. We do not knowingly collect data about children.

Contact Us

For any privacy or data deletion request: privacy@qantrah.com

Last updated: 2026-07-18