Privacy Policy

Last updated: May 27, 2026

1. Overview

WhatsApp Bulk SaaS ("we", "our", or "us") provides a platform that allows businesses to send WhatsApp messages to their contacts via the Meta WhatsApp Business API. This Privacy Policy explains what data we collect, how we use it, and your rights regarding that data.

2. Data We Collect

Account Information

When you register, we collect your name, email address, and a hashed password. We do not store your password in plain text.

WhatsApp Credentials

To send messages on your behalf, we store your WhatsApp Business Account (WABA) ID, Phone Number ID, and access token. Access tokens are encrypted at rest using AES-256-GCM and are never exposed in plaintext outside of active API calls.

Contact Data

We store the contact lists you upload or create, including phone numbers, names, and any optional metadata you provide. This data belongs to you and is stored solely to enable the messaging features of the platform.

Message Logs

We store records of messages sent through the platform, including delivery status updates received from Meta. Message content is stored to support campaign reporting and delivery tracking.

Usage Data

We collect standard server logs including IP addresses, browser type, and pages visited for security and diagnostic purposes.

3. How We Use Your Data

  • To provide and operate the platform and its features
  • To send WhatsApp messages on your behalf via the Meta Cloud API
  • To deliver campaign reports and delivery status updates
  • To authenticate your account securely
  • To detect and prevent abuse, fraud, and security incidents
  • To comply with applicable laws and Meta's platform policies

We do not sell your data or your contacts' data to third parties.

4. Meta and WhatsApp Integration

Our platform integrates with Meta's WhatsApp Business Cloud API. When you connect your WhatsApp Business Account, we interact with Meta's systems on your behalf. Your use of the platform is also subject to WhatsApp's Business Policy and Meta's Privacy Policy.

We only request the minimum permissions necessary to operate the platform. We do not access your personal Facebook profile or any data outside of the WhatsApp Business Account you explicitly connect.

5. Data Retention

We retain your account data for as long as your account is active. Contact data and message logs are retained for the duration of your account. If you delete your account, we will delete your data within 30 days, except where retention is required by law.

6. Data Security

We use industry-standard security practices including encrypted storage (AES-256-GCM for sensitive credentials), HTTPS for all data in transit, JWT-based authentication, and bcrypt password hashing. We conduct regular security reviews and apply the principle of least privilege throughout our systems.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data
  • Export your data in a portable format
  • Withdraw consent at any time

To exercise any of these rights, contact us at the address below.

8. Contact

If you have questions about this Privacy Policy or how we handle your data, please contact us at: Guilhermo Gonzalez