Privacy Policy

Last updated: 8 October 2026

SafeWA ("we", "us") provides software that lets businesses connect their own WhatsApp Business Account through the official WhatsApp Business Platform (Cloud API) and manage customer conversations. This policy explains what data we process and why.

Data we collect

• Account data: your name, email address and a hashed password.
• WhatsApp Business data received from Meta when you connect: your WhatsApp Business Account ID, phone number ID, display phone number, verified business name, and an access token that lets SafeWA act on your behalf for that account. We obtain these only after you sign in with Facebook and grant permission.
• Messaging data: messages you send and receive through SafeWA, your customers' WhatsApp numbers and profile names, and delivery/read statuses sent to us by Meta's webhooks.
• Message templates you create, which are stored by Meta and displayed in SafeWA.

How we use it

• To show your conversations and let you send messages and templates from your connected number.
• To authenticate you and keep your account secure.
• To troubleshoot problems. Raw webhook payloads are kept for at most 7 days.

We do not sell your data, use it for advertising, or share it with third parties except Meta Platforms, Inc., which processes WhatsApp messages as part of the WhatsApp Business Platform, and our hosting provider, which stores data on our behalf.

Permissions we request from Meta

• whatsapp_business_management: to read your WhatsApp Business Account and phone number details, subscribe SafeWA to its message webhooks, and create, list and delete message templates you ask for.
• whatsapp_business_messaging: to send the messages and templates you compose in SafeWA and receive your customers' replies.

Security

Access tokens are encrypted at rest with AES-256-GCM. Passwords are hashed with bcrypt. All traffic uses HTTPS, and every webhook from Meta is verified with its signature before it is processed.

Retention and deletion

We keep your data while your account is active. You can disconnect your WhatsApp number at any time (Connect page → Disconnect), which deletes the stored access token and stops new messages. You can delete your account and all associated data yourself (Settings → Delete account), or ask us to do it. See our Data Deletion page for details.

Your rights

You can request access to, correction of, or deletion of your personal data by contacting us at our support team (contact email coming soon).

Contact

Questions about this policy: our support team (contact email coming soon).