PRIVACY POLICY

LAST UPDATED

2026-06-22

01

INFORMATION COLLECTION

We collect information you provide directly when creating an account, including your email address, API keys, and billing information. We also automatically collect technical data such as IP addresses, browser type, and usage statistics when you interact with our API endpoints and dashboard.

02

USE OF INFORMATION

Collected information is used to provide and maintain the service, process payments, send critical service notifications, monitor for abuse and fraud, and comply with legal obligations. We do not sell your personal information to third parties under any circumstances.

03

MESSAGE DATA HANDLING

WAZender.id acts as a relay service for WhatsApp messages. We do not store the content of messages you send through our API beyond the time necessary for delivery confirmation. Session credentials are encrypted at rest using industry-standard AES-256 encryption.

04

DATA RETENTION

Account data is retained for the lifetime of your account. Usage logs are retained for 90 days for debugging and abuse prevention, then automatically purged. Upon account deletion, all associated data is permanently removed within 30 days.

05

COOKIES & TRACKING

Our dashboard uses essential cookies for authentication and session management. We do not use third-party advertising or tracking cookies. Analytics data is collected using privacy-focused, first-party tooling that does not profile individual users.

06

DATA SECURITY

All data in transit is encrypted via TLS 1.3. Data at rest is encrypted via AES-256. Access to production systems is restricted via IP allowlisting and multi-factor authentication. We undergo quarterly security audits and maintain SOC 2 Type II compliance.

07

YOUR RIGHTS (GDPR)

EU and UK residents have the right to access, rectify, erase, restrict processing, and port their personal data. To exercise these rights, contact privacy@wazender.id. We respond to all valid requests within 30 days.

08

THIRD-PARTY SERVICES

We use Stripe for payment processing, Cloudflare for CDN and DDoS protection, and AWS for infrastructure. Each processor is GDPR-compliant and governed by a Data Processing Agreement. A full list of sub-processors is available on request.

09

INTERNATIONAL TRANSFERS

Your data may be processed in countries other than your own. We rely on Standard Contractual Clauses (SCCs) and the EU-US Data Privacy Framework to ensure appropriate safeguards for cross-border data transfers.

10

POLICY CHANGES

We may update this policy from time to time. Material changes will be notified via email at least 30 days before taking effect. Continued use of the service after the effective date constitutes acceptance of the updated policy.