Privacy Policy
Last updated: June 29, 2025
1. Who We Are
Wa-Wexa (“we”, “our”, or “us”) operates a WhatsApp CRM platform that allows businesses to manage customer conversations, contacts, broadcasts, and automations via the Meta WhatsApp Business API. This Privacy Policy explains how we collect, use, store, and protect your information when you use our platform.
2. Information We Collect
2.1 Account Information
When you register, we collect your name, email address, and password (hashed — never stored in plain text). We also collect your WhatsApp Business Account credentials (phone number ID, access token) which are encrypted at rest using AES-256-GCM.
2.2 Customer Contact Data
You may import or receive contact data (names, phone numbers, tags, custom fields) belonging to your customers. You are the data controller for this data. We act as a data processor on your behalf.
2.3 Message Content
Messages sent and received through the platform (text, templates, media) are stored to provide conversation history. Message content is stored in your dedicated database and is not used for any purpose other than providing you the service.
2.4 Usage Data
We collect aggregated usage data such as daily message counts, API call volumes, and feature usage to operate and improve the platform. This data is not sold to third parties.
2.5 Technical Data
We collect IP addresses, browser type, device information, and server logs for security, fraud prevention, and debugging purposes.
3. How We Use Your Information
- To provide, operate, and maintain the Wa-Wexa platform
- To authenticate users and secure accounts
- To relay messages to and from the Meta WhatsApp Business API on your behalf
- To enforce daily messaging tier limits per Meta's platform policies
- To send transactional emails (password reset, account alerts)
- To detect and prevent fraud, abuse, or security incidents
- To comply with legal obligations
We do not use your message content or customer data for advertising, profiling, or any purpose beyond operating the service.
4. WhatsApp & Meta
Our platform connects to the Meta WhatsApp Business API. By using Wa-Wexa, you agree to comply with WhatsApp's Business Policy and Meta's Platform Policies. Your WhatsApp Business Account credentials are stored encrypted and used solely to relay messages through the API.
5. Data Storage & Security
Your data is stored on Supabase (PostgreSQL), hosted on secure cloud infrastructure. We implement the following security measures:
- AES-256-GCM encryption for sensitive credentials (API tokens, access keys)
- Row-Level Security (RLS) policies — each user can only access their own data
- HTTPS/TLS encryption in transit for all API communications
- Hashed passwords (never stored in plain text)
- Rate limiting on all API endpoints
6. Data Sharing
We do not sell your personal data. We share data only with:
- Meta / WhatsApp — to relay your messages via the WhatsApp Business API
- Supabase — our database and authentication provider
- Vercel / hosting providers — for application hosting
- Legal authorities — only when required by applicable law
7. Data Retention
We retain your account data for as long as your account is active. Message history and contact data are retained to provide the service. Upon account deletion, we will delete your data within 30 days, except where retention is required by law. Daily message count records are automatically purged after 90 days.
8. Your Rights
Depending on your location, you may have the following rights:
- Access — request a copy of the data we hold about you
- Rectification — correct inaccurate data
- Erasure — request deletion of your account and data
- Portability — receive your data in a machine-readable format
- Objection — object to certain processing activities
To exercise any of these rights, contact us at sales@wawexa.com.
9. Cookies
We use only essential cookies required for authentication and session management (Supabase auth tokens). We do not use advertising, analytics, or third-party tracking cookies.
10. Children's Privacy
Wa-Wexa is a business tool not intended for individuals under 18. We do not knowingly collect data from minors.
11. Changes to This Policy
We may update this policy from time to time. We will notify you of significant changes via email or an in-app notice. Continued use of the platform after changes constitutes acceptance of the updated policy.
12. Contact Us
For privacy-related questions or requests, contact us at:
Wa-Wexa
Email: sales@wawexa.com