Privacy Policy

1. Introduction & Scope

Quarec Resources Pvt. Ltd., operating as "WabaCloud" ("we," "us," or "our"), is committed to safeguarding the privacy and security of your personal data. This comprehensive Privacy Policy outlines how we collect, process, share, and protect information when you use our website, application, and the WabaCloud WhatsApp Business API integration platform (collectively, the "Services").

By accessing or using our Services, you explicitly consent to the data practices described in this document. If you do not agree with this policy, you must refrain from using WabaCloud.

2. Role of the Parties

Under applicable data protection laws (including GDPR, CCPA, and the Digital Personal Data Protection Act):

• Data Controller: You (the WabaCloud client) act as the Data Controller for all End-User data you collect and process using our Services.
• Data Processor: WabaCloud acts strictly as a Data Processor. We only process End-User data based on your instructions to facilitate messaging.
• Sub-Processor: Meta Platforms, Inc. (WhatsApp) acts as our designated sub-processor to physically route and deliver the messages.

3. Types of Data We Collect

3.1. Client Account Data

Collected directly from you when you sign up for WabaCloud:

• Contact details (Name, email address, corporate phone number).
• Company information (Business name, website URL, tax identification numbers, physical address).
• Billing information (Credit card details are processed directly by our PCI-DSS compliant payment gateways like Stripe/Razorpay; we do not store full credit card numbers).
• Authentication credentials (Passwords are hashed and securely stored).

3.2. End-User Data (WhatsApp API Data)

Collected dynamically during your usage of the platform to communicate with your customers:

• End-User phone numbers and WhatsApp profile names.
• The contents of messages sent and received (text, images, documents, audio, videos).
• Message metadata (delivery receipts, read receipts, timestamps).

3.3. Technical and Telemetry Data

Automatically collected via tracking technologies: IP addresses, browser types, operating systems, device identifiers, geographic location (at the city level), and platform navigation paths (page views, clicks).

4. Purpose of Data Processing

We utilize the collected data strictly for the following purposes:

• Service Delivery: To operate the WabaCloud platform, route your messages to the WhatsApp API, and display analytics in your dashboard.
• Customer Support: To assist you with technical troubleshooting and account inquiries.
• Security & Fraud Prevention: To monitor for suspicious login activity, DDoS attacks, or spam violations that breach Meta's policies.
• Billing & Administration: To process your monthly subscriptions and wallet recharges.

5. Data Sharing and Sub-Processors

We never sell your personal data or your End-User data. We only share data with trusted third parties necessary for service delivery:

• Meta Platforms, Inc.: Message content and phone numbers must be transmitted to Meta to deliver messages via the WhatsApp Business API. This data is subject to the WhatsApp Business Data Processing Terms.
• Cloud Infrastructure: Providers like Amazon Web Services (AWS) or Google Cloud Platform (GCP) for secure, encrypted database hosting.
• Legal Compliance: If formally requested by law enforcement agencies, government bodies, or court orders, we may disclose information to comply with legal obligations.

6. Data Retention Policies

Account Data: Retained for the duration of your active subscription, plus an additional 7 years to comply with tax and accounting laws.

End-User Messages: By default, conversation histories are retained on our servers for as long as your account is active to provide you with chat history features. You may manually delete conversations from your dashboard at any time, which permanently purges them from our active databases within 30 days.

7. Security Measures

We implement enterprise-grade security to protect WabaCloud against data breaches:

• Encryption at Rest: All databases storing PII or message logs are AES-256 encrypted.
• Encryption in Transit: All communications between your browser, our servers, and Meta's API utilize TLS 1.2 or higher.
• Access Control: Strict Role-Based Access Control (RBAC) ensures our employees cannot read your private WhatsApp conversations without your explicit written consent for debugging.

8. Your Privacy Rights

Subject to your jurisdiction (e.g., GDPR in Europe, CCPA in California), you possess the following rights regarding your personal data:

• Right to Access: Request a full export of the personal data we hold about you.
• Right to Erasure ("Right to be Forgotten"): Request the complete deletion of your account and associated data.
• Right to Rectification: Correct any inaccurate or incomplete data in your profile.
• Right to Restrict Processing: Temporarily halt data processing under certain conditions.

To exercise these rights, please email privacy@wabacloud.io. We will respond within 30 days.