What we collect
- Account data: name, email address and password (stored with one-way hashing; we can't read it).
- Project data: project name, team members and their roles, and alert settings.
- Verification records: the recipient's phone number, channel, status, time, and an IP address if your app sends one. The code itself is stored only as a hash.
- Payment records: amount, reference and status. Card details are handled by the payment gateway (Wayl) and never reach us.
- Technical logs: IP address and request time, to protect the service from abuse and to rate-limit requests.
How we use it
- To send the verification codes your app requests and charge them to your balance.
- To send service emails: email confirmation, password reset, team invitations and balance alerts.
- To protect accounts and prevent fraud and abuse.
- We don't sell your data, and we never use recipients' phone numbers for advertising or marketing.
Who we share it with
- Meta (WhatsApp Cloud API): the recipient's number and the verification message, so it can be delivered.
- Telegram (Gateway API): the recipient's number and the code, when the channel is Telegram.
- Wayl: payment details when you top up your balance.
- Resend: your email address and the content of service emails.
- The hosting provider that runs our servers and database.
Connecting your own WhatsApp number
- If you connect your number through Meta, we store its access token encrypted and use it only to send and receive your project's messages.
- Inbound messages and contacts are kept inside your project and no other project can see them.
- You can disconnect the number at any time from the WhatsApp page in your dashboard.
How we protect data
- All traffic is encrypted over HTTPS.
- API keys are stored as hashes, so nobody can read them after they're created, us included.
- Sensitive secrets such as access tokens are stored encrypted, and access inside a project follows each member's role.
Retention and deletion
- We keep your data while your account is active, and payment and accounting records for as long as the law requires.
- You can ask us to delete your account and data by emailing the address below; we reply within 30 days.
Changes to this policy
- If we change anything important, we'll let you know by email or in your dashboard before it takes effect.
Contact us
For any privacy question, or to request a copy of your data or its deletion, email:
support@watsy.me