Back to Home
Terms of Service•Refund Policy
GDPR & CCPA Aligned Privacy Standard

Privacy Policy

Effective Date: September 2026 | Last Updated: September 2026

Our Core Principle: Zero-Message Content Retention

At AutoWhapp, we believe your business conversations and customer relationships belong solely to you. AutoWhapp operates strictly as a real-time communication conduit. We never store, analyze, read, resell, or monetize the contents of your WhatsApp messages, voice notes, or customer media attachments.

1Information We Collect

To provide you with access to the AutoWhapp SaaS dashboard and maintain real-time WhatsApp connectivity, we collect minimal operational information:

Account & Identity Credentials

When registering, you provide your name, business email address, and account password. All passwords are encrypted with industry-standard Bcrypt hashing before database persistence.

WhatsApp Multi-Device Session Tokens

When you pair your WhatsApp device via QR code, encrypted session authentication keys are generated to maintain websocket connection with WhatsApp servers. These keys are stored in an encrypted database partition (AES-256) and are destroyed immediately if you unlink your session.

Operational Telemetry & Delivery Metadata

Technical metadata such as message delivery statuses (SENT, DELIVERED, READ), timestamp headers, error codes, and webhook execution outcomes are logged temporarily to render your analytics dashboard.

2Lawful Basis for Processing (GDPR Article 6)

We process your personal information strictly under recognized lawful bases:

  • Contractual Necessity (Art. 6(1)(b)): To configure your user account, execute auto-reply automations, process broadcast workflows, and fulfill our service agreement.
  • Legitimate Business Interests (Art. 6(1)(f)): To safeguard platform uptime, monitor API rate limits, prevent DDoS or abusive spam attacks, and improve service stability.
  • Consent (Art. 6(1)(a)): When you voluntarily configure optional third-party integrations, custom webhooks, or opt-in marketing newsletters.

3Third-Party AI Subprocessors & LLM Providers

AutoWhapp provides native support for AI-driven WhatsApp bots using providers such as Groq, Google Gemini, OpenAI, and DeepSeek.

Data Minimization: Only the incoming customer query along with your specified system prompt guidelines are transmitted to the LLM API via TLS encrypted channels.

Zero Training Guarantee: Enterprise API terms with our supported model providers explicitly guarantee that customer queries submitted through API endpoints are not used to train or refine public foundation models.

4Your Legal Privacy Rights (GDPR & CCPA)

Regardless of your geographic location, AutoWhapp respects your global data subject rights:

Right to AccessRequest a complete export of all personal data held in your account.
Right to ErasureRequest immediate deletion of your profile, session tokens, and logs.
Right to RectificationCorrect or update incomplete business profile information.
Right to PortabilityDownload your contacts, broadcast reports, and chat logs in JSON/CSV.

5Data Security Standards & Architecture

We implement defense-in-depth technical safeguards to protect your platform instances:

  • Encryption in Transit: Enforced TLS 1.3 / SSL encryption across all web interfaces, APIs, and websocket channels.
  • Encryption at Rest: Database backups and sensitive credentials encrypted with AES-256.
  • Strict RBAC: Role-Based Access Controls preventing non-admin staff from accessing privileged system configurations.
  • Zero Third-Party Ad Trackers: We do not deploy behavioral ad trackers, pixel scrapers, or third-party marketing beacons on our platform.

6Data Retention & Automatic Purging

We retain account data only for as long as your subscription is active. If you choose to delete your account or unlink a WhatsApp session, all associated pairing keys, message logs, and cache entries are permanently removed from our active database within 24 hours.

Data Protection & Privacy Officer

To exercise your data erasure rights or submit privacy inquiries, please contact our team.

businesslucky1822@gmail.com