Privacy Policy

WABPlus ("WABPlus", "we", "us", "our"), accessible at https://wabplus.com, is a product of DotPlus Technologies Private Limited (https://dotplus.in), a company incorporated in India. WABPlus is a business messaging platform built on the WhatsApp Business Platform (Cloud API) provided by Meta Platforms, Inc. ("Meta"). We act as a technology provider that enables businesses ("Customers") to connect their WhatsApp Business Accounts and send and receive WhatsApp messages — such as order updates, one-time passcodes, customer support conversations and marketing messages — to and from their own end users ("End Users").

This Privacy Policy explains what information we collect, how we use it, with whom we share it, how long we keep it, and the choices and rights available to you. It applies to our website, dashboard, APIs and all related services (together, the "Service"). By using the Service you agree to this Policy.

a) Account & business information — provided by Customers when registering:

• Name, email address, phone number and password (stored as a salted hash)
• Organization / business name and billing details (wallet transactions, invoices, GST details)

b) WhatsApp Business Platform data — received from Meta when a Customer connects their WhatsApp Business Account (including via Meta's Embedded Signup flow):

• WhatsApp Business Account (WABA) IDs, business phone number IDs and display names
• Access tokens that authorize the Service to send messages on the Customer's behalf
• Message templates, their categories and approval status
• Message delivery events (sent, delivered, read, failed) received via Meta webhooks

c) Messaging data — processed so the Service can function:

• Outbound messages a Customer sends through the Service (content, recipient phone number, timestamps, delivery status)
• Inbound messages End Users send to a Customer's WhatsApp number (content, sender phone number, profile name, timestamps)
• Contact lists that Customers upload (phone numbers and optional names)
• Opt-out signals — if an End User replies "STOP", we record the number on the Customer's block list so marketing messages are no longer sent to it

d) Technical data — collected automatically: IP address, browser/device type, pages visited, and server logs used for security, debugging and rate-limiting.

• To provide the Service: deliver messages, sync templates, show delivery reports and inbox conversations
• To operate Customer accounts: authentication, team roles, billing and wallet management
• To honour End User choices, including STOP/opt-out requests and block lists
• To secure the Service: fraud prevention, abuse detection, audit logs and rate limiting
• To comply with law and with Meta's platform requirements
• To communicate service notices (e.g. delivery issues, billing alerts)

We do not sell personal data. We do not use the content of WhatsApp messages for advertising, profiling or training purposes. Message content is processed only to transmit, display and report on messages as directed by the Customer.

Data received from Meta's APIs ("Platform Data") is handled in accordance with the Meta Platform Terms, the WhatsApp Business Terms of Service and the WhatsApp Business Messaging Policy. We use Platform Data only to provide the Service to the Customer that owns the connected WhatsApp Business Account, never for any other purpose. Access tokens are stored securely and are used solely to perform the API calls the Customer has authorized.

• Meta / WhatsApp — message content and recipient numbers are transmitted to Meta's WhatsApp Business Platform in order to deliver messages; Meta's own terms and privacy policies apply to that processing
• Infrastructure providers — hosting, database and network providers that store or transmit data on our behalf under confidentiality obligations
• Payment providers — solely to process wallet recharges and billing
• Legal requirements — when required by applicable law, regulation or valid legal process

We never sell or rent personal data to third parties, and we do not share data with advertisers.

• All traffic to and from the Service is encrypted in transit using TLS (HTTPS)
• Passwords are stored as salted hashes; access tokens and secrets are held in protected server-side storage, never exposed to browsers
• Access to production systems is restricted to authorized personnel
• Messaging and delivery data is retained while the Customer's account is active, so Customers can view their own history and reports
• When a Customer disconnects a WhatsApp Business Account or deletes their account, associated data is deleted as described on our Data Deletion page
• Some records (e.g. invoices, tax and fraud-prevention logs) may be retained longer where the law requires it

Depending on your jurisdiction, you may have the right to access, correct, export, restrict or delete personal data we hold about you.

• Customers can manage or delete their business data from the dashboard, or request full account deletion
• End Users who received messages from a business using WABPlus can stop marketing messages at any time by replying STOP to that business, and can request deletion of their data — see our Data Deletion Instructions
• Any privacy request can also be sent to support@dotplus.in — we respond within 30 days

The Service uses only strictly necessary cookies: a session cookie to keep you signed in and security cookies (e.g. CSRF protection). We do not use advertising or cross-site tracking cookies.

The Service is intended for businesses and their authorized representatives. It is not directed at children under 18, and we do not knowingly collect data from them.

We may update this Policy from time to time. Material changes will be announced on the dashboard or by email, and the "Last updated" date above will always reflect the current version.

For any privacy question, complaint or request: support@dotplus.in

Data Controller: DotPlus Technologies Private Limited · dotplus.in · Product: WABPlus (wabplus.com)