Privacy Policy

WA Gateway · Last updated 2026-11-12

1. Who we are

This Privacy Policy explains how WA Gateway ("we", "us") handles personal data when you use WA Gateway (the "Service").

2. Data we collect

• Account data: your name, company, email address and a securely hashed password.
• Usage data: devices you connect, API keys (stored only as a hash), usage counters, settings and log-in times.
• Message data: messages you send and receive through the Service – phone numbers, contact names, message text, delivery status and time. OTP codes are never stored in readable form.
• Technical data: IP address and browser information for security, rate limiting and abuse prevention.
• Payment data: the plan you choose and the payment reference you enter. We do not store card numbers.

3. Why we use it

• To provide the Service: connect devices, send and receive messages, show history and statistics.
• To keep the Service secure: prevent abuse, fraud, spam and unauthorised access.
• To manage your plan and payments and to provide support.
• To meet legal obligations.

We do not sell your personal data and we do not use your messages for advertising.

4. Your customers' data

When you send or receive messages through the Service, you decide which data is processed and why. For that data you are the controller and we act as your processor. You must have a legal basis to message people and inform them about it.

5. Storage and retention

Data is stored on our servers. Message history is kept up to the limit of your plan and older messages are deleted automatically. Usage statistics are kept for up to about 13 months. When an account is deleted, its devices, API keys, messages and usage data are deleted.

6. Sharing

We share data only where needed to run the Service: messages are transmitted through WhatsApp's network, and data is hosted with our hosting provider. We disclose data to authorities only when legally required. Webhooks you configure send data to the address you choose.

7. Security

We use encrypted connections (HTTPS), hashed passwords and API keys, access controls, rate limiting and isolated accounts. No system is perfectly secure; please use a strong password and keep your API keys private.

8. Cookies

We use one essential cookie to keep you logged in, and your browser may store your light/dark theme choice. We do not use advertising or tracking cookies.

9. Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal data, and to object to or restrict its processing. Contact us to use these rights.

10. Changes

We may update this policy and will publish the new version on this page.

11. Contact

Privacy questions: the contact address shown on our website.