Privacy Policy

1. Who We Are

GetWhatsAPI is operated by Zajelsoft. We provide a REST API platform for sending and receiving WhatsApp messages programmatically. This Privacy Policy explains how we collect, use, and protect your information when you use our Service at getwhatsapi.com.

2. Information We Collect

We collect the following categories of information:

• Account data — email address, password (hashed), and phone number provided at registration.
• Usage data — message counts, recipient numbers, timestamps, and message types (text/image/PDF). We do not store the content of your messages beyond what is needed for delivery.
• Technical data — IP addresses, user-agent strings, and session identifiers collected automatically for security and rate-limiting purposes.
• Billing data — plan type and overage counts. We do not store payment card details directly.

3. How We Use Your Information

• To provide and operate the Service (send/receive messages, manage your instance).
• To enforce plan quotas and calculate billing.
• To detect and prevent abuse, spam, and unauthorized access.
• To send transactional emails (e.g. account alerts, token reset notifications).
• To improve the platform based on aggregated, anonymized usage patterns.

4. Data Retention

Message logs (usage_logs) are retained for 30 days for billing and audit purposes, then automatically deleted. Account data is retained for as long as your account is active. You may request deletion at any time (see Section 7).

5. Data Sharing

We do not sell, rent, or trade your personal data. We may share data with:

• Infrastructure providers — hosting and database services necessary to operate the platform.
• Law enforcement — only when required by law or to protect the rights and safety of users.

6. Cookies & Tracking

We use a single session cookie (wapi_session) to keep you logged in. No third-party advertising or tracking cookies are used on the dashboard. Our public landing page uses Google Analytics to measure traffic — you can opt out via your browser's privacy settings.

7. Your Rights

You have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your account and associated data.
• Object to or restrict certain processing activities.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

8. Security

We use HTTPS for all data in transit, HMAC-signed session cookies, hashed passwords, and per-user API tokens. IP whitelisting is available as an additional layer of protection. No system is 100% secure — please use a strong password and keep your API token confidential.

9. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal data from minors.

10. Changes to This Policy

We may update this Privacy Policy periodically. We will notify registered users of material changes by email. Continued use of the Service after changes are posted constitutes acceptance.

11. Contact

Privacy questions or requests: [email protected]