Privacy Policy

1. About WB Service

WB Service is a business messaging and integration platform that may allow registered businesses to:

• Connect their WhatsApp Business Account using Meta Embedded Signup.
• Connect and manage WhatsApp Business phone numbers.
• Create, submit, view, and manage WhatsApp message templates.
• Send WhatsApp messages to authorised recipients.
• Receive incoming WhatsApp messages.
• View message-delivery statuses.
• Manage contacts, messaging history, and campaigns.
• Receive webhook events from Meta and WhatsApp.
• Manage connected business integrations.

WB Service is an independent platform operated by Raging Developers and is not owned, controlled, or operated by Meta Platforms, Inc. or WhatsApp LLC.

2. Information We Collect

The information we collect depends on how you use the service.

2.1 Account Information

When you create or manage a WB Service account, we may collect:

• Full name.
• Business name.
• Email address.
• Mobile number.
• Account password in securely hashed form.
• Profile information.
• Business address.
• Country and timezone.
• Account preferences.
• Subscription and plan information.
• Account creation and login dates.

We do not store your password in plain text.

2.2 Meta and WhatsApp Business Information

When you connect your Meta or WhatsApp Business Account, we may receive and process information such as:

• Meta Business Portfolio ID.
• WhatsApp Business Account ID.
• WhatsApp phone-number ID.
• Display phone number.
• Verified business name.
• WhatsApp Business profile information.
• Business verification status.
• Phone-number registration status.
• Messaging status.
• Quality rating.
• Messaging limits.
• Connected account status.
• Message-template information.
• Template status and rejection information.
• Webhook subscription information.
• Other identifiers required to operate the integration.

We only request permissions reasonably necessary to provide the features selected by you.

2.3 Access Tokens and Authentication Information

To maintain your Meta and WhatsApp connection, we may process:

• Meta authorisation codes.
• Access tokens.
• Token type.
• Token expiry information.
• Connection identifiers.
• Webhook verification information.
• Two-step verification information where required.

Authorisation codes are used only to complete the account connection process.

Access tokens and sensitive integration credentials are stored using appropriate security and encryption measures where technically supported.

We do not intentionally expose access tokens, App Secrets, verification PINs, or other sensitive credentials in the user interface or public logs.

2.4 Contact Information Uploaded by Businesses

Business users may upload or add contact information, including:

• Contact name.
• Mobile or WhatsApp number.
• Email address.
• Tags and custom fields.
• Opt-in date.
• Opt-in source.
• Opt-out information.
• Customer notes.
• Campaign membership.
• Communication preferences.

The business uploading this information is responsible for ensuring that it has a valid legal basis and any required consent to collect and use the information.

2.5 Messages and Communication Information

When businesses use WB Service to send or receive WhatsApp messages, we may process:

• Sender and recipient phone numbers.
• WhatsApp user identifiers.
• Message text.
• Template names.
• Template variables.
• Images, videos, documents, audio, and other media.
• Interactive-message selections.
• Incoming and outgoing messages.
• Message timestamps.
• Message direction.
• Meta message ID or WAMID.
• Sent, delivered, read, and failed statuses.
• Error codes and delivery-failure details.
• Replies and customer-service conversations.
• Campaign and broadcast information.

We process this information to provide messaging, inbox, status-tracking, reporting, support, and related functionality.

2.6 Template Information

When you create or manage WhatsApp message templates, we may collect:

• Template name.
• Language.
• Category.
• Header, body, footer, and button content.
• Variables and example values.
• Template status.
• Meta template ID.
• Rejection reason.
• Template quality information.
• Creation and modification dates.

2.7 Payment and Billing Information

Where paid services are offered, we may collect:

• Subscription plan.
• Billing name and address.
• Tax-related information.
• Invoice details.
• Payment status.
• Transaction reference.
• Payment date.
• Amount and currency.
• Usage and billing records.

Payment-card or banking information may be processed directly by a third-party payment provider. We may not receive or store complete card or banking credentials.

Meta or WhatsApp messaging charges may be billed separately by Meta, WhatsApp, a payment partner, or another authorised provider.

2.8 Technical and Usage Information

When you access the service, we may automatically collect:

• IP address.
• Browser type.
• Device type.
• Operating system.
• Referring URL.
• Date and time of access.
• Pages or features used.
• Login history.
• Session information.
• Error logs.
• API request information.
• Performance information.
• Security and fraud-detection signals.

This information helps us operate, secure, maintain, and improve the service.

2.9 Support Communications

When you contact us, we may collect:

• Your name and contact details.
• Support messages.
• Screenshots.
• Uploaded files.
• Error details.
• Account and integration identifiers.
• Call or meeting notes.
• Other information you voluntarily provide.

Do not send passwords, OTPs, App Secrets, access tokens, or two-step verification PINs through support messages.

3. How We Collect Information

We may collect information:

• Directly from you.
• From your authorised employees or representatives.
• Through your use of WB Service.
• Through Meta Embedded Signup.
• Through Meta Graph API and WhatsApp Business Platform APIs.
• Through WhatsApp webhook events.
• From payment providers.
• From your connected services.
• Through cookies and similar technologies.
• From support and business communications.
• When required for security, fraud prevention, or legal compliance.

4. How We Use Information

We may use collected information to:

• Create and manage user accounts.
• Authenticate users.
• Connect Meta and WhatsApp Business Accounts.
• Maintain access to authorised business assets.
• Register and validate WhatsApp phone numbers.
• Create, retrieve, and synchronise message templates.
• Send and receive WhatsApp messages.
• Display message statuses.
• Process webhook events.
• Manage contacts and campaigns.
• Provide inbox and customer-support functionality.
• Process subscriptions and payments.
• Generate invoices and usage reports.
• Provide technical support.
• Diagnose integration and delivery errors.
• Maintain platform security.
• Detect fraud, spam, misuse, and unauthorised access.
• Enforce our Terms and Conditions.
• Improve performance and user experience.
• Comply with legal and regulatory obligations.
• Respond to valid requests from authorities.
• Protect our users, business, and third parties.

We do not use access tokens or connected business credentials for purposes unrelated to providing and securing the requested integration.

5. Recipient Consent and Opt-In

Business users are responsible for obtaining valid consent or opt-in before sending WhatsApp messages where consent is required.

Meta requires businesses to obtain opt-in before messaging people through WhatsApp, and businesses should provide clear opt-in and opt-out methods.

Businesses using WB Service must:

• Clearly identify the business sending the messages.
• Explain what type of messages will be sent.
• Use contact information only for the consented purpose.
• Maintain evidence of consent.
• Honour opt-out and withdrawal requests.
• Stop messaging users who withdraw consent.
• Avoid using purchased, scraped, or unlawfully obtained contact lists.

WB Service does not independently verify every contact’s consent. The business account holder is responsible for its recipients and messaging activities.

6. Legal Basis and Authorised Processing

We process personal information where appropriate to:

• Provide services requested by you.
• Perform our agreement with you.
• Operate authorised Meta and WhatsApp integrations.
• Comply with legal obligations.
• Protect the security and integrity of the service.
• Prevent misuse and fraud.
• Respond to your consent or instructions.
• Support legitimate business operations, where permitted by law.

Where consent is the applicable basis, you may withdraw consent, subject to legal and contractual limitations.

7. How We Share Information

We may share information only where reasonably necessary with the following categories of recipients.

7.1 Meta and WhatsApp

Information may be transmitted to or received from Meta and WhatsApp to:

• Connect your business account.
• Manage WhatsApp assets.
• Create and manage templates.
• Send and receive messages.
• Receive delivery statuses.
• Process webhook events.
• Operate other authorised WhatsApp Business Platform features.

Your use of Meta and WhatsApp products is also governed by their applicable policies and terms.

7.2 Service Providers

We may use third-party providers for:

• Website and application hosting.
• Cloud infrastructure.
• Database services.
• File and media storage.
• Email delivery.
• Payment processing.
• Error monitoring.
• Security and fraud prevention.
• Analytics.
• Customer support.
• Backup and disaster recovery.

These providers may process information only as necessary to provide their services, subject to contractual and legal obligations.

7.3 Business Account Owners

When you communicate with a business using WhatsApp, the relevant business may access:

• Your message.
• Your phone number.
• Your name or profile information made available through WhatsApp.
• Message-delivery and interaction details.
• Other information you provide during the conversation.

The business is independently responsible for how it uses recipient information.

7.4 Legal and Safety Requirements

We may disclose information where reasonably necessary to:

• Comply with applicable law.
• Respond to a valid court order or legal process.
• Respond to authorised government requests.
• Protect the rights, safety, and property of users.
• Investigate fraud, abuse, or security incidents.
• Enforce our agreements.
• Prevent harm or unlawful activity.

7.5 Business Transfers

If Raging Developers is involved in a merger, acquisition, reorganisation, financing, asset sale, or similar business transaction, information may be transferred as part of that transaction, subject to applicable confidentiality and legal requirements.

We do not sell personal information to third parties for their independent advertising purposes.

8. Data Storage and International Processing

Information may be stored or processed using servers, infrastructure, or service providers located in India or other countries.

Where information is transferred internationally, we take reasonable steps to ensure that the transfer is handled according to applicable contractual, security, and legal requirements.

The location of processing may depend on:

• Our hosting infrastructure.
• Meta and WhatsApp systems.
• Cloud-service providers.
• Payment providers.
• Support and technical-service providers.

9. Data Retention

We retain information only for as long as reasonably necessary to:

• Provide the service.
• Maintain user accounts.
• Process messaging records.
• Complete billing and accounting.
• Resolve disputes.
• Meet legal obligations.
• Prevent fraud and abuse.
• Maintain security records.
• Enforce agreements.
• Respond to lawful requests.

Retention periods may vary depending on the type of information.

Examples include:

• Account data may be retained while the account remains active.
• Message and campaign records may be retained according to account settings, service requirements, or contractual needs.
• Access tokens may be retained while the integration remains active.
• Billing records may be retained according to tax and accounting requirements.
• Security logs may be retained for a reasonable investigation period.
• Deleted information may remain temporarily in encrypted backups until backups expire or are overwritten.

When information is no longer required, we may delete, anonymise, or securely restrict access to it.

10. Data Security

We use reasonable administrative, technical, and organisational safeguards designed to protect information against:

• Unauthorised access.
• Unauthorised disclosure.
• Loss.
• Misuse.
• Alteration.
• Destruction.
• Account takeover.
• Credential exposure.

Safeguards may include:

• Encrypted connections using HTTPS.
• Hashed account passwords.
• Encryption of sensitive credentials where supported.
• Access-control restrictions.
• Authentication and session controls.
• Database and server security.
• Logging and monitoring.
• Backup procedures.
• Restricted staff access.
• Security updates.
• Incident-response procedures.

No system is completely secure. We cannot guarantee absolute security or that unauthorised access will never occur.

You are responsible for protecting your account credentials and promptly reporting suspected unauthorised access.

11. Access Tokens and Sensitive Credentials

Meta and WhatsApp access tokens are used only to perform authorised API operations for connected accounts.

We take reasonable measures to:

• Store tokens securely.
• Restrict token access.
• Avoid exposing tokens in frontend code.
• Avoid including complete tokens in public logs.
• Remove or disable tokens after disconnection when appropriate.
• Prevent one customer from accessing another customer’s credentials.

Users must not share:

• Account passwords.
• OTPs.
• Meta App Secrets.
• Complete access tokens.
• Webhook secrets.
• Two-step verification PINs.

12. Cookies and Similar Technologies

We may use cookies, local storage, and similar technologies to:

• Maintain authenticated sessions.
• Remember preferences.
• Secure accounts.
• Prevent fraud.
• Measure application performance.
• Understand feature usage.
• Diagnose technical problems.

Essential cookies may be required for the service to function.

Where required by law, we will request consent before using optional cookies.

You may manage cookies through your browser settings, but disabling essential cookies may prevent parts of the service from working.

13. Your Rights and Choices

Depending on applicable law, you may have the right to:

• Request information about personal data processed by us.
• Request access to your information.
• Request correction of inaccurate information.
• Request completion of incomplete information.
• Request deletion of eligible information.
• Withdraw consent where processing depends on consent.
• Request account closure.
• Disconnect your WhatsApp Business Account.
• Opt out of certain communications.
• Raise a complaint or grievance.
• Nominate another person to exercise rights where legally permitted.

We may request reasonable verification before processing a request.

Some information may not be deleted immediately where retention is required for:

• Tax and accounting.
• Legal claims.
• Fraud prevention.
• Security investigations.
• Contract enforcement.
• Regulatory compliance.

14. How to Request Data Deletion

You can request deletion by following the instructions available at:

https://whatsapp.ragingdevelopers.com/data-deletion

You may also contact us using the support email listed below.

Your request should include:

• Full name.
• Registered email address.
• Business name.
• WB Service account ID, if available.
• Connected WhatsApp phone number, if applicable.
• A clear description of the information you want deleted.

Do not include passwords, OTPs, access tokens, or App Secrets in your request.

15. Disconnecting Meta or WhatsApp Access

You may disconnect a connected WhatsApp Business Account from the WB Service dashboard where this functionality is available.

You may also remove the application through your Facebook or Meta account settings.

Disconnecting an integration may:

• Stop future access to the connected account.
• Prevent future messages from being sent.
• Disable template synchronisation.
• Stop new webhook events.
• Remove or disable stored credentials.

Disconnecting does not necessarily delete historical message, billing, security, or audit records. To request deletion, follow our Data Deletion Instructions.

16. Communications From Us

We may send service-related communications such as:

• Account verification messages.
• Security alerts.
• Integration-status notifications.
• Billing notices.
• Subscription reminders.
• Important service updates.
• Support replies.
• Policy updates.

Service-related communications may be necessary for operating your account.

Where legally required, marketing communications will be sent only with appropriate permission. You may unsubscribe from marketing messages using the available opt-out method.

17. Children’s Privacy

WB Service is intended for businesses and authorised adult representatives.

The service is not intended for use by individuals under 18 years of age.

We do not knowingly create accounts for children. If you believe a child has provided personal information to us without proper authorisation, contact us so that we can review and take appropriate action.

Business users must not upload or process children’s information without proper legal authority and any required parental or guardian consent.

18. Third-Party Websites and Services

WB Service may contain links to third-party websites, platforms, or services.

We are not responsible for the privacy practices, content, or security of third parties, including:

• Meta.
• Facebook.
• WhatsApp.
• Payment providers.
• Cloud providers.
• External websites linked from messages.

You should review the privacy policies of those third parties before providing information to them.

19. Business User Responsibilities

Businesses using WB Service are responsible for:

• Complying with applicable privacy and messaging laws.
• Providing appropriate notices to their customers.
• Obtaining required consent.
• Maintaining opt-in records.
• Responding to recipient privacy requests.
• Protecting login credentials.
• Ensuring that uploaded contacts were lawfully obtained.
• Avoiding spam or unsolicited messages.
• Following Meta and WhatsApp policies.
• Configuring suitable data-retention settings.
• Informing us about unauthorised account activity.

For recipient information processed on behalf of a business, the business may act as the party primarily responsible for deciding why and how that information is used.

20. Data Breach and Security Incidents

If we become aware of a security incident affecting personal information, we may:

• Investigate the incident.
• Take steps to contain and remediate it.
• Secure affected accounts.
• Notify affected users where required.
• Notify relevant authorities where required.
• Cooperate with service providers and lawful investigations.

Users must promptly report suspected security incidents to our support contact.

21. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in:

• Our services.
• Meta or WhatsApp integrations.
• Legal requirements.
• Security practices.
• Technology.
• Business operations.

The “Last Updated” date at the top will indicate when this policy was most recently revised.

Where material changes affect your rights, we may provide additional notice through the website, dashboard, or registered email address.

22. Complaints and Grievances

You may contact us if you have a privacy concern, complaint, or question regarding your information.

Please include:

• Your name.
• Registered email address.
• Business name.
• Description of the issue.
• Relevant account or request reference.
• The resolution you are requesting.

We may ask for additional information to verify your identity and investigate the complaint.

23. Contact Us

For privacy questions, access requests, correction requests, deletion requests, or security concerns, contact: