Privacy Policy

1. Who this policy covers

This policy applies to two groups:

• Customers (businesses): companies that sign up for a QuickWA account to message their own contacts over WhatsApp.
• End-users (contacts): people that our customers communicate with through WhatsApp. For these end-users, the customer (business) is the data controller; QuickWA acts as a data processor on their behalf.

2. Information we collect

We do not sell your data, and we do not use the content of WhatsApp messages for advertising.

3. How we use information

• To provide, operate and maintain the QuickWA platform and its features.
• To send and receive WhatsApp messages on your instruction through the official Meta WhatsApp Cloud API.
• To authenticate users, secure accounts, and prevent abuse, spam and fraud.
• To provide analytics, delivery/read receipts and reporting back to you.
• To process billing and subscriptions.
• To provide customer support and send important service notices.
• To comply with legal obligations and WhatsApp/Meta platform policies.

4. WhatsApp & Meta data

QuickWA is built on the official Meta WhatsApp Cloud API. When you connect your WhatsApp Business Account (including via Meta Embedded Signup / “Login with Facebook”), we receive and store the identifiers and access tokens needed to operate your number. Our use of information received from Meta APIs follows the Meta Platform Terms, Developer Policies and the WhatsApp Business Messaging Policy. We only access the WhatsApp data required to provide the features you use, and we honour message-window and opt-out rules.

5. Message-window & opt-out

We enforce WhatsApp’s 24-hour customer service window and only send template messages outside it. If an end-user replies STOP / UNSUBSCRIBE, we mark them opted-out and stop messaging them. Businesses must obtain valid opt-in before messaging contacts.

6. How we share information

We share data only as needed to run the service:

• Meta / WhatsApp — to actually deliver your messages.
• Payment processor (Stripe for new subscriptions) — to process subscriptions. We do not store full card details.
• Infrastructure / sub-processors — hosting and email delivery providers, under confidentiality obligations.
• Google LLC (Firebase) — Firebase Cloud Messaging delivers push notifications to our Android app, and Firebase Crashlytics processes crash and diagnostic reports. See the Mobile app section below.
• Legal — when required by law, court order, or to protect rights and safety.

We never sell personal data to third parties.

7. Our Android app

The QuickWA Android app collects a small amount of additional data that the website does not:

• Push notification token — when you allow notifications, Firebase Cloud Messaging issues a device token which we store against your account so we can alert you about new customer messages. It is deleted when you sign out, when the app is uninstalled, and when your account is deleted.
• Crash and diagnostic reports — if the app crashes, Firebase Crashlytics sends us the crash trace, the device model, the OS version and a random installation identifier so we can fix the fault. These reports contain no message content and no customer data.
• Camera, microphone, photos and files — used only when you choose to attach a photo, video, voice note or document to a message. The app does not access your gallery, camera or microphone in the background, and it never uploads anything you have not attached yourself.
• Account deletion in the app — Settings › Delete account closes your account immediately and permanently deletes your data within 7 days. Email us within those 7 days if it was a mistake.

The app stores your session token in the device's encrypted secure storage, and messages that failed to send are held on the device until you retry or discard them.

8. Data retention

We keep account and message data for as long as your account is active or as needed to provide the service. When you delete data or close your account, we delete or anonymise associated personal data within 30 days, except where we must retain limited records for legal, tax or security reasons.

9. Security

We protect data with industry-standard measures: encrypted transport (HTTPS/TLS), hashed passwords, signed and verified webhooks (HMAC), strict per-tenant data isolation, access tokens stored write-only, rate limiting and audit logging. No method is 100% secure, but we work hard to safeguard your information.

10. Your rights

Depending on your location (including under applicable data protection laws), you may have the right to access, correct, export or delete your personal data, and to withdraw consent. Account owners can manage and delete contacts and data inside the app, or request help at the address below. To request deletion, see our Data Deletion page.

11. International transfers

QuickWA may process data on servers located in different countries. Where data is transferred across borders, we take steps to ensure it remains protected consistent with this policy and applicable law.

12. Children

QuickWA is not intended for anyone under 18. We do not knowingly collect data from children.

13. Changes

We may update this policy from time to time. Material changes will be posted on this page with a new “Last updated” date.

14. Contact us