Privacy Policy
Last updated 1 January 2027. This policy explains what personal data Whatsent handles, why, and the choices you have.
1. Who is responsible
For account holders and visitors to our website we act as the data controller. For the contacts, conversations and other customer data that businesses load into Whatsent, the business is the controller and we act as its processor, handling that data only on its instructions.
2. Information we collect
- Account data: name, work email, password (stored as a salted hash), company details, role and team membership.
- Billing data: plan, invoices and payment status. Card or bank details are handled by our payment processor and are not stored by us.
- Customer data you add: contacts (phone number, name, email, tags, custom fields, consent records), conversations, templates, campaigns, flows, leads and files.
- WhatsApp connection data: business account and phone number identifiers and the access credentials you provide, which we store encrypted.
- Usage and technical data: pages visited, device and browser information, IP address, log and security events (such as sign-in attempts).
3. How we use information
- to provide, secure and support the service, including delivering messages through WhatsApp
- to process payments, send invoices and service notices such as invites and password resets
- to detect abuse, enforce our terms and protect accounts
- to understand how the product and website are used so we can improve them
- to comply with legal obligations
4. AI features
When you use AI features, the relevant text (for example a customer message, your knowledge-base passages or your instructions) is sent to the AI model provider configured for the service to generate a response. We do not allow our systems to use your content to train our own models. Review the policies of the model provider selected for your account if you need to know how they treat API data.
5. Who we share data with
We share data only as needed to run the service: Meta (WhatsApp) to send and receive messages; payment processors; email delivery providers; cloud hosting and infrastructure providers; AI model providers when AI features are used; and professional advisers or authorities where required by law. We do not sell personal data.
6. Cookies and analytics
We use essential cookies to keep you signed in and remember preferences such as light or dark theme, and basic first-party analytics to understand traffic to our website and product. You can block cookies in your browser, but parts of the service may then stop working.
7. Retention and deletion
- We keep account and company data while the account is active.
- Company owners can schedule deletion of a company; it is permanently erased after a 30-day grace period, during which the request can be cancelled. Audit logs may be kept longer for security and compliance.
- Contacts can be erased individually. Opt-out records are kept so that a person who opted out is not messaged again.
- Backups roll off on a fixed schedule after deletion.
8. Security
Company data is isolated at the database level, secrets and access tokens are encrypted, access is role-based, and sign-in supports two-factor authentication. No system is perfectly secure, so please use strong passwords and enable two-factor authentication.
9. Your rights
Depending on where you live you may have the right to access, correct, delete, restrict or port your personal data and to object to certain processing. If your data is held in Whatsent by one of our business customers, please contact that business first; we will help them respond. For data we control, email support@whatsent.com.
10. International transfers
Our providers may process data in countries other than your own. Where required we rely on appropriate safeguards for such transfers.
11. Children
The service is for businesses and is not directed at children under 18. We do not knowingly collect their data for our own purposes.
12. Changes
We will post updates here and, for material changes, notify account owners. The date at the top shows when this policy was last revised.
13. Contact
Privacy questions or requests: support@whatsent.com.