Privacy Policy

Account data: When you create a Wapaci account, we collect your email address, name, and billing information.

Ecommerce store data: When you connect your store (Shopify, WooCommerce, etc.), we access order data, customer details, cart information, and product data needed to power automations. We only request the permissions necessary to run your configured automations.

Customer data: We process your customers' names, phone numbers, and order details to send WhatsApp messages on your behalf. We act as a data processor for this information — you remain the data controller.

Message data: We store records of WhatsApp messages sent through our platform including delivery status, timestamps, and response data to power analytics and reporting.

Analytics data: We collect usage metrics such as message open rates, cart recovery rates, revenue attributed, and automation performance to provide your dashboard statistics.

Technical data: We collect standard server logs including IP addresses, browser type, and usage patterns to maintain security and improve our service.

We use your data to:

• Deliver WhatsApp automation messages to your customers
• Sync customer and order information from your ecommerce platform
• Provide your analytics dashboard and performance reports
• Process payments and manage your subscription
• Send account notifications, invoices, and product updates
• Investigate and prevent fraud, abuse, or policy violations
• Improve and develop the Wapaci platform

Wapaci integrates with external services to deliver its functionality:

• WhatsApp / Meta: Messages are sent via the WhatsApp Business API. Meta's data policies apply to message delivery.
• WhatsApp / Meta Cloud API: Messages are sent directly via the WhatsApp Cloud API. Wapaci is an official Meta Business Partner — no third-party BSP is involved.
• Ecommerce platforms (Shopify, WooCommerce): We connect to your store via official APIs using OAuth tokens.
• Supabase: Our database and authentication infrastructure. Data is encrypted at rest.
• Payment processors: We use industry-standard payment providers for billing. We do not store card details.

We retain your account data for as long as your account is active. If you close your account, we delete your data within 30 days, except where retention is required by law or for fraud prevention.

Message logs and analytics data are retained for up to 12 months by default. You can request earlier deletion by contacting us.

All data is encrypted in transit (TLS 1.2+) and at rest. We use industry-standard security practices and conduct regular security reviews. Access to customer data within our team is strictly limited to those who need it to operate the service.

Depending on your location, you may have rights including:

• Access to your personal data
• Correction of inaccurate data
• Deletion of your data
• Data portability
• Objecting to certain processing

To exercise your rights, email us at support@wapaci.com.

You are responsible for obtaining consent from your customers to send them WhatsApp messages. Wapaci provides tools to respect opt-out requests — you must honour them. We will not send messages to customers who have opted out.

We may update this policy from time to time. We will notify you of material changes by email or in-app notification. Continued use of Wapaci after a change constitutes acceptance of the new policy.

For privacy questions or data requests, contact us at support@wapaci.com.