WaBridge

Privacy Policy

Last updated: 15 August 2026

1. Who we are

WaBridge is a WhatsApp Business Platform (Cloud API) software provider operating from Bengaluru, India. We act as a data processor for businesses ("customers") who use our dashboard and APIs to communicate with their own end users on WhatsApp.

2. Data we collect

  • Account data: name, email, hashed password, workspace name.
  • Meta assets: WhatsApp Business Account ID, phone number IDs, display numbers, verified names, quality ratings, message templates.
  • Access tokens: the long-lived token granted during Meta Embedded Signup.
  • Conversation data: end-user WhatsApp IDs (phone numbers), display names, message content, and delivery/read statuses received through Meta webhooks.
  • Billing data: plan, wallet ledger entries and usage counts. Card details are handled by our payment processor and never stored by us.

3. How we use it

Solely to provide the service: sending and receiving WhatsApp messages on the customer's behalf, rendering their inbox, managing templates, reporting usage, and billing. We do not sell data, do not use message content for advertising, and do not train models on customer conversations.

4. How we protect it

  • Meta access tokens are encrypted at rest in a managed secrets vault and are never exposed to browsers.
  • Every tenant table enforces Row Level Security scoped by organization, so one workspace can never read another's data.
  • Webhook payloads are rejected unless the X-Hub-Signature-256 signature validates against our app secret.
  • All traffic is served over TLS. Roles and permissions are enforced server-side.

5. Sharing

We share data only with infrastructure sub-processors required to run the service: Meta Platforms (WhatsApp Cloud API), our cloud database and hosting provider, and our payment processor. Each processes data only on our instructions.

6. Retention & deletion

Conversation data is retained while the workspace is active. Customers can delete contacts and conversations from the dashboard at any time. On workspace deletion, all tenant data — including tokens, contacts, conversations and messages — is permanently removed within 30 days. See our data deletion instructions.

7. Your rights

You may request access, correction, export, or erasure of your personal data by writing to privacy@wabridge.in. We respond within 30 days.

8. Contact

WaBridge, Bengaluru, Karnataka, India · privacy@wabridge.in