Data Processing

For personal data of your customers and contacts, you (the business using WAB2C) act as the data controller and WAB2C acts as a data processor that processes data on your instructions. Meta/WhatsApp and provider channels process messaging data under their own terms.

• Contact details such as name and WhatsApp number
• Opt-in source, consent records, and tags
• Message content and conversation history
• Order, support, and workflow data you choose to store or sync

We process this data only to provide the WAB2C platform and related services — including messaging, automation, team inbox, analytics, integrations, and support — and as otherwise instructed by you or required by law.

We use trusted sub-processors to deliver the service, which may include cloud hosting providers, WhatsApp Business API provider channels, and infrastructure services. These parties are bound by appropriate confidentiality and data protection obligations.

We apply administrative, technical, and organizational measures designed to protect data, including access controls, encryption in transit, and parameterized data handling. No system can be guaranteed to be fully secure, but we work to reduce risk.

We retain data only for as long as it is needed to provide the service. We delete or return personal and platform data when any of the following occurs:

• The data is no longer needed for the purpose it was collected or to provide the service
• You request deletion or close your account
• We stop providing the service to you
• WhatsApp/Meta requests deletion to protect a user
• Retention is no longer permitted under applicable law

Deletion is carried out subject to any legal retention requirements that may apply.

As the data controller, you are responsible for responding to data subject requests (such as access, correction, or deletion). WAB2C provides reasonable tools and assistance to help you meet these obligations. For data requests, contact privacy@wab2c.com.

Where WAB2C acts as a technology provider on your behalf, we will promptly notify you of any communication we receive from WhatsApp or Meta regarding a data subject request relating to your account, so that you can respond as the controller.