Privacy Policy

This project is a test WhatsApp Cloud API integration. It is currently used only with Meta test numbers and test recipients.

No production customer data is intentionally collected.

Webhook events and test message data may be temporarily processed or logged for debugging and testing. Logs may be deleted periodically.

Test messages, sender details, and timestamps are stored in a database for the read-only test inbox. Stored records remain until the project owner removes them. There is currently no automatic data deletion. The inbox and operational views now require operator authentication. Continue to use only non-sensitive test data in this development phase.

No personal data is sold or shared for advertising.

Purpose and selected data

Sender identifiers and names, message text/types, message IDs, and timestamps support the read-only inbox. Non-secret business asset IDs and event processing metadata support connection visibility and debugging. Full raw webhook payloads and authorization headers are not retained.

Storage and providers

Application records are stored in Neon/Postgres; the app is hosted on Vercel. These providers process data to deliver their hosting/database services. Operational logging uses counts and sanitized error codes rather than raw message content. Data is not shared for advertising.

Operator sessions

A necessary HttpOnly session cookie authenticates the operator. Sessions expire after eight hours and can be revoked by logging out. Only session-token hashes are stored in the database. Login throttling stores a shared attempt counter, not IP addresses.

Retention and requests

Stored messages and event metadata have no automatic purge schedule. The owner can remove them through database administration. See data deletion instructions to request removal.

For questions, contact ylink@yashasashok.me.