Privacy Policy

Wap2b is operated by Octet Logic OPC Private Limited (“Wap2b”, “we”, “us”), a company registered in Hyderabad, India. This policy explains what personal data we collect when you use the service, how we use it, and the choices you have.

We act as a data controller for your account information and as a data processor for the message content you route through our platform to WhatsApp via Meta's WhatsApp Business Cloud API.

The minimum data needed to operate a prepaid WhatsApp messaging platform:

• Account: name, email, password hash, phone number, country of billing.
• WhatsApp profile metadata: business name, category, address, website, profile picture, and the Meta WABA / phone number identifiers returned to us during Embedded Signup.
• Contacts you add: phone number, name, email, group/subgroup assignment, opt-in / opt-out state and timestamps.
• Message content: the text and media of the messages you send and receive, so they appear in your inbox and logs.
• Message metadata: sender profile, recipient phone number, template used, status (sent / delivered / read / failed), timestamps, amount charged, and a message identifier from Meta we use to track delivery status.
• Balance transactions: Add Funds, charges, refunds, and balance-expiry forfeitures — each one is logged and can't be altered after the fact.
• Technical: IP address, browser user-agent, session cookies. Used for security and abuse investigations.

We store the content of the messages you send and receive, so you can see your conversations in Wap2b. We do not use it to train AI models.

• To operate the service: route your messages to Meta's WhatsApp Cloud API, deliver inbound webhooks to your account, and run AI assistant replies you have configured.
• To bill you accurately: balance debits, refunds for failed Meta calls, and the daily balance-expiry check.
• To send transactional emails: signup OTPs, password resets, account notifications, Add Funds receipts, and 30-day / 7-day balance-expiry reminders.
• To detect and investigate abuse, security incidents, or compliance issues related to Meta's WhatsApp Business Policy.

We share data only with the service providers we need to run Wap2b, and only what each one needs:

• Meta (WhatsApp and Instagram): to deliver your messages and receive replies and delivery updates.
• Messaging and billing partners: to set up WhatsApp message billing on your WhatsApp Business Account.
• Hosting and storage providers: our database and application servers are in Singapore, and media files are stored in India. All data is encrypted at rest.
• Email and payment providers: to send you emails and process your payments. We never see or store full card numbers.
• Security providers: to check that signups come from people, not bots.
• AI providers: run the AI features you choose to use, such as AI assistant replies and “Write with AI” for templates. They are not allowed to train their models on what we send.

Business customers can ask for the full list of our service providers in our Data Processing Agreement.

We do not sell your personal data to third parties. We do not use your contacts, messages, or templates to train AI models. AI assistant replies run only when you turn them on, and what we send to the AI model is limited to the conversation that triggered the reply.

The Wap2b add-on for Google Sheets is optional. This section explains what it does with data from your Google account. It applies only if you install it.

What it can see. The add-on asks Google for access only to the spreadsheet you open it in. It cannot see your other files, your Google Drive or your email. It reads the column names of the tab you are on, and the rows you choose when you use one of its tools.

What stays in Google. The free tools, adding WhatsApp chat links and fixing phone numbers, run entirely inside Google. Nothing from your sheet is sent to Wap2b when you use them.

What it sends to Wap2b. Only when you check or send messages, or turn on sending to new Google Form responses, the add-on sends Wap2b the phone number and the template values from the columns you picked, for the rows being checked or sent. Checking lets Wap2b confirm each row can be sent and work out the cost; nothing is sent to anyone until you confirm. It also sends the name of the tab, which is used to name the send on wap2b.com. No other cells are sent. Wap2b then handles that data as described in the rest of this policy, and shares it with Meta only to deliver the WhatsApp message.

What it writes back. The add-on adds its own columns to your sheet: the send status, a link to the send on wap2b.com, and a hidden reference it uses to update the status. It never changes columns you made.

What it stores in Google. Your Wap2b API key, and your settings for sending to Form responses, are kept in Google's per-user storage for the add-on. Only you can read them. They are never written into the sheet, so other people who edit it cannot see your key.

How we protect it. Data from your sheet travels to Wap2b only over encrypted HTTPS connections. We store it in our database, which is encrypted at rest. Your Wap2b API key is stored on our side only as a one-way hash, so nobody at Wap2b can read it back. Only authorised Wap2b staff can reach our production systems, and only to run the service, fix problems or investigate abuse.

No AI. The add-on does not use AI. Data from your Google account is never sent to an AI or machine-learning service, by the add-on or by Wap2b. It is not used to create, train or improve any AI model, ours or anyone else's.

What we do not do. We do not sell data from your Google account or use it for advertising. We do not let people read it, except with your permission to help you with a support request, when needed for security, or when the law requires it.

Wap2b's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Removing access. Use Extensions, Wap2b, Wap2b account, Disconnect to remove your key from the add-on, or uninstall the add-on from Extensions, Add-ons, Manage add-ons. To delete the message records it created in your Wap2b account, email support@octetlogictech.com.

Account data is retained for as long as your account is active. After account closure, account data is deleted within 30 days unless we are required to retain it for legal or statutory reasons.

Message records are kept while your account is active, so you can see your history, and deleted within 30 days after your account is closed. Balance transaction records (Add Funds, debits, refunds, balance-expiry forfeitures) are retained for 7 years in line with applicable tax and audit requirements.

You can request deletion of your account and associated data at any time by emailing support@octetlogictech.com.

• Access: request a copy of the personal data we hold about you.
• Correction: update inaccurate information from the dashboard or by emailing us.
• Deletion: request erasure of your account and associated data.
• Portability: export your contacts, templates, and message history in a machine-readable format.
• Withdraw consent: opt out of marketing emails at any time. Transactional emails (OTPs, billing) cannot be opted out of while your account is active.

We serve businesses globally — including India, the United States, the United Arab Emirates, the United Kingdom, Germany, Singapore, Nigeria, Brazil, and elsewhere. Personal data is stored in Singapore, and media files in India. When we transfer personal data from the EU or UK, we use the European Commission's Standard Contractual Clauses (and the UK Addendum), set out in our Data Processing Agreement, available on request.

If you are based in a region with specific data protection rights (GDPR, CCPA, DPDP Act, etc.), those rights apply to you and can be exercised by contacting us.

Privacy questions or requests: support@octetlogictech.com.

Postal address:
Octet Logic OPC Private Limited
#3-6-268, 2nd Floor, Reliable Business Chambers
Himayatnagar, Hyderabad, Telangana 500029
India