Privacy Policy

Effective Date: July 17, 2026

At Wappistry (wappistry.in), we respect your privacy and are committed to protecting the personal and operational data you share with us. This Privacy Policy describes our practices regarding collection, storage, encryption, and transfer of information when you register an account, purchase credit add-ons, scan QR codes, or route messages through our APIs.

1. Information We Collect

To deliver our WhatsApp gateway services, we collect three primary categories of information:

• Account Details: When you register or purchase subscription packages, we collect your name, email address, phone number, company name (if applicable), and billing history.
• API Credentials & Access Tokens: To securely map your WhatsApp integrations, we generate and store access tokens, connection configurations, Meta Phone Number IDs, and WhatsApp Business Account (WABA) tokens.
• System Logs: We log general diagnostics of API calls, including delivery status (Sent, Queued, Failed), message timestamp, direction (Inbound, Outbound), and recipient phone digits.

2. Message Content Privacy & Cache Policy

Wappistry functions as a processing gateway and chatbot router. We do not permanently store or read the raw text contents, media files, or voice documents processed through your WhatsApp API flows. Message payloads are routed dynamically to WhatsApp/Meta servers. A temporary cache is only held for diagnostics in your local /logs dashboard and is deleted automatically in accordance with system log retention policies.

3. How We Use Your Information

The information we collect is utilized strictly for service delivery and improvements:

• To authenticate user sessions, manage API access, and process billing invoices.
• To verify UPI transaction reference (UTR) submissions.
• To route webhook alerts to target webhook URLs configured in your chatbot profile.
• To monitor server performance, diagnose API latency issues, and enhance security.

4. Security of Data and Gateway Instances

We implement industry-standard security protocols to prevent unauthorized access to your account details. Database passwords, client tokens, and system connections are encrypted using AES algorithms. All network communication is conducted via secure HTTPS channels. QR Code session files are isolated inside dedicated Node.js environments to prevent cross-account leakages.

5. Third-Party Sharing and WhatsApp Policies

Wappistry routes messages using WhatsApp Cloud APIs and Baileys local protocols. By using our gateway, you acknowledge that your usage data is shared with Meta Platforms, Inc. to enable messaging, and is governed by WhatsApp's Business Terms of Service. We do not sell or trade your data to third-party advertising networks.

6. Cookies and Tracking

We use essential cookies to maintain your login session state and store interface preferences. You can configure your browser to reject cookies, but doing so may limit your access to the billing and developer dashboard features.

7. Data Retention & User Rights

You can update your personal information or business details at any time by visiting the profile settings dashboard. You have the right to request the deletion of your account and related WhatsApp instances from our servers. Once an account deletion request is processed, all database configurations and session files are permanently purged.

8. Privacy Policy Updates

We reserve the right to update this policy as security regulations and integration methods evolve. Updates will be posted on this page with the updated revision date.