Privacy Policy

Effective Date: January 7, 2025 | Last Updated: January 7, 2025

Whataloop ("we," "us," or "our") values the privacy and security of our users. This Privacy Policy describes how we collect, use, store, and protect your personal information when you use our services, including the Whataloop platform and any related websites, applications, or services ("Services"). This policy applies to all users of the Whataloop platform, including business users and end customers.

Information We Collect

We collect various types of information in order to provide and improve our Services:

Business Information

When you sign up for Whataloop, we collect business-related information such as your business name, email address, phone number, billing details, and any other information you provide in your business profile.

Customer Data

If you use Whataloop to interact with your customers, we may collect personal data from customer interactions (e.g., names, phone numbers, and message content) for the purpose of managing communication.

Payment Information

If you choose to make payments through our platform, we may collect billing information such as credit card details, but Stripe or another third-party payment processor handles the actual payment processing.

Usage Data

We collect information about how you access and use the platform, including your IP address, browser type, device information, access times, and other diagnostic data.

Cookies and Tracking

We use cookies and similar tracking technologies to monitor activity on our Services, to enhance your user experience, and to analyze and improve the platform's functionality.

WhatsApp Business & Meta Platform Data

Data We Access Through WhatsApp Business API

When you connect your WhatsApp Business Account (WABA) to Whataloop, we access and process:

  • WhatsApp Business Account Information: WABA ID, display name, business verification status, and associated phone number(s)
  • Phone Number Data: Phone numbers registered to your WABA, including display phone numbers and quality ratings
  • Message Templates: Templates you create, their approval status, and template categories
  • Message Content: Text, media, and interactive messages sent and received through our platform
  • Message Metadata: Delivery status, read receipts, timestamps, and message IDs
  • Contact Information: Phone numbers and profile names of individuals you communicate with via WhatsApp

Data We Access Through Facebook Login

When you authenticate with Facebook to connect your WhatsApp Business Account, we access:

  • Facebook Pages List (pages_show_list): Names and IDs of Facebook Pages you manage - required to verify WABA ownership
  • Basic Profile Information: Your Facebook user ID and name for authentication purposes

Limited Use: We only access your Facebook Pages list to verify and link your WhatsApp Business Account during the onboarding process. We do NOT post to your pages, access page content, or use page data for any other purpose.

How We Use WhatsApp & Meta Data

Data obtained through Meta's platforms is used exclusively for:

  • Message Sending & Receiving: To transmit messages between you and your customers via WhatsApp Cloud API
  • Message History Display: To show your conversation history within the Whataloop CRM interface
  • Template Management: To create, edit, and manage message templates for your campaigns
  • Delivery Analytics: To provide insights on message delivery rates, read rates, and response times
  • Account Verification: To verify your business ownership of connected WhatsApp Business Accounts
  • Service Functionality: To enable core CRM features that depend on WhatsApp integration

WhatsApp Message Data Retention

We retain WhatsApp message data as follows:

  • Active Accounts: Message content and metadata are retained for the duration of your subscription
  • After Account Deletion: All WhatsApp data is permanently deleted within 30 days of account termination
  • After WABA Disconnection: Message history is retained but no new data is collected; you may request deletion at any time
  • Backup Retention: Encrypted backups may be retained for up to 90 days for disaster recovery purposes

Meta Platform Terms Compliance

Our Commitments Under Meta Platform Terms:

In compliance with Meta's Platform Terms and Developer Policies, we affirm that:

  • No Sale of Data: We do NOT sell, license, or transfer WhatsApp or Meta data to any third party
  • No Data Brokers: We do NOT share data with data brokers, advertising networks, or analytics providers not essential to our service
  • Purpose Limitation: We use Meta Platform Data only for purposes that the user has explicitly authorized and that are necessary for app functionality
  • No Unauthorized Use: We do NOT use WhatsApp data for purposes unrelated to providing our CRM service
  • No Discrimination: We do NOT use data to discriminate against individuals based on race, ethnicity, religion, or other protected categories
  • Security Measures: We implement industry-standard security measures to protect all Meta Platform Data
  • User Control: Users can disconnect their WABA and request deletion of all associated data at any time

Third-Party Sub-Processors for WhatsApp Data

The following third-party services may process WhatsApp-related data as part of our service delivery:

  • Meta Platforms, Inc.: WhatsApp Cloud API provider (message transmission)
  • Cloud Hosting Provider: Secure data storage and processing infrastructure
  • Stripe, Inc.: Payment processing (does not access message content)

Meta Permissions We Request

Whataloop requests the following permissions from Meta to provide our services:

whatsapp_business_messaging

Purpose: Required to send and receive WhatsApp messages on your behalf through your connected WhatsApp Business Account.

How we use it: This permission enables the core messaging functionality of our CRM, allowing you to communicate with your customers via WhatsApp directly from the Whataloop platform.

whatsapp_business_management

Purpose: Required to list and manage your WhatsApp Business Accounts during the onboarding process.

How we use it: This permission allows us to display your available WABAs so you can select which account to connect to your Whataloop workspace.

pages_show_list

Purpose: Required to verify Facebook Page ownership linked to your WhatsApp Business Account.

How we use it: Meta requires that a WhatsApp Business Account be associated with a Facebook Page. This permission allows us to verify and link the correct page during WABA setup.

All permissions are used solely for the stated purposes and in full compliance with Meta Platform Terms. You can revoke access at any time through your Facebook settings or by disconnecting your WABA from Whataloop.

How We Use Your Information

Service Provision

To allow you to interact with customers, manage leads, and send automated messages.

Service Improvement

To monitor usage, track performance, and enhance user experience.

Customer Support

To respond to inquiries, provide service, and resolve issues.

Subscription Management

To manage your plan, process payments, and handle account tasks.

Marketing

To send promotional emails and updates (opt-out available).

Legal Compliance

To comply with laws including fraud prevention and reporting.

Data Retention

We retain personal information only as long as necessary:

Customer support: To help resolve issues or inquiries.

Legal obligations: To comply with applicable laws.

When data is no longer needed, we securely delete or anonymize it.

Sharing Your Information

We do not sell or rent your personal information to third parties for marketing purposes.

Security of Your Information

We implement encryption, secure servers, and other appropriate measures to protect your data.

No method of internet transmission or electronic storage is 100% secure, so we cannot guarantee absolute security.

Your Data Protection Rights

Right to Access

Request a copy of your personal data.

Right to Correct

Correct inaccurate information.

Right to Delete

Request deletion of your data.

Right to Object

Object to certain processing.

Right to Portability

Request data transfer.

Right to Withdraw

Withdraw consent anytime.

To exercise these rights, contact us at hello@whataloop.com

Data Transfers

If you're outside the US or EU, your information may be transferred to countries with different data protection laws.

By using our Services, you consent to this transfer and processing.

Cookies and Tracking

Policy Changes

We may update this policy for operational, legal or regulatory reasons.

When we update, we'll post the new version with an updated Effective Date.

Contact Us

For questions about this policy or to exercise your rights:

Address

Office No. 14 Tricity Plaza, Zirakpur, Punjab, India