Privacy Policy

Last updated: October 2026

1. Data We Collect

When you register for Whatifyd, we collect your name, email address, phone number, and company information. When you connect your WhatsApp Business account, we process WhatsApp Business Account IDs, phone number IDs, and message delivery data through Meta's WhatsApp Cloud API.

2. How We Use Your Data

We use your data to: operate the Whatifyd platform, send WhatsApp messages on your behalf through Meta's API, provide delivery analytics, manage your contacts and campaigns, and communicate with you about your account.

3. WhatsApp Data Handling

Whatifyd accesses WhatsApp data solely through Meta's official Cloud API. We store message metadata (delivery status, timestamps) for analytics. We do not store message content after delivery unless required for conversation history in the shared inbox. WhatsApp access tokens are encrypted and stored server-side only.

4. Meta Compliance & Disclaimer

Whatifyd operates strictly in accordance with Meta's WhatsApp Business Platform policies, including the WhatsApp Business Messaging Policy, Commerce Policy, and Business Data Processing Terms. We follow all Meta rules and policies as they apply to the WhatsApp Business API.

Whatifyd is not liable for any number blocks, account suspensions, or restrictions imposed by Meta on your WhatsApp Business Account. Such actions are taken by Meta based on their own quality assessment, spam detection, and policy enforcement systems, which are outside our control. By using Whatifyd, you acknowledge and accept this.

5. Contact Data

You are responsible for obtaining valid opt-in consent from your contacts before sending them WhatsApp messages. Whatifyd provides opt-in tracking, opt-out keyword handling, and compliance tools to help you maintain consent records. We process contact data only on your behalf and as directed by you.

6. Data Security

We implement industry-standard security measures including encrypted database connections, hashed passwords (bcrypt), server-side token storage, and HTTPS for all communications. Access tokens are never exposed to client-side code.

7. Data Retention

We retain your data for as long as your account is active. You can request deletion of your account and associated data at any time through the Settings page. Upon deletion, we remove your data within 30 days, except where retention is required by law.

8. Third-Party Services

We use Meta's WhatsApp Cloud API (governed by Meta's terms) and secure cloud infrastructure for hosting. Payment processing is handled by third-party payment providers governed by their respective privacy policies.

9. Your Rights

You have the right to access, correct, or delete your personal data. You can export your contacts and campaign data at any time. Contact us at [email protected] for any data-related requests.

10. Contact

For privacy inquiries, contact Allifyd Technologies LLP at [email protected].