Privacy Policy

1. Who this policy covers

This policy applies to two groups:

• Customers (businesses): companies that sign up for a QuickWA account to message their own contacts over WhatsApp.
• End-users (contacts): people that our customers communicate with through WhatsApp. For these end-users, the customer (business) is the data controller; QuickWA acts as a data processor on their behalf.

2. Information we collect

We do not sell your data, and we do not use the content of WhatsApp messages for advertising.

3. How we use information

• To provide, operate and maintain the QuickWA platform and its features.
• To send and receive WhatsApp messages on your instruction through the official Meta WhatsApp Cloud API.
• To authenticate users, secure accounts, and prevent abuse, spam and fraud.
• To provide analytics, delivery/read receipts and reporting back to you.
• To process billing and subscriptions.
• To provide customer support and send important service notices.
• To comply with legal obligations and WhatsApp/Meta platform policies.

4. WhatsApp & Meta data

QuickWA is built on the official Meta WhatsApp Cloud API. When you connect your WhatsApp Business Account (including via Meta Embedded Signup / “Login with Facebook”), we receive and store the identifiers and access tokens needed to operate your number. Our use of information received from Meta APIs follows the Meta Platform Terms, Developer Policies and the WhatsApp Business Messaging Policy. We only access the WhatsApp data required to provide the features you use, and we honour message-window and opt-out rules.

5. Message-window & opt-out

We enforce WhatsApp’s 24-hour customer service window and only send template messages outside it. If an end-user replies STOP / UNSUBSCRIBE, we mark them opted-out and stop messaging them. Businesses must obtain valid opt-in before messaging contacts.

6. How we share information

We share data only as needed to run the service:

• Meta / WhatsApp — to actually deliver your messages.
• Payment processor (e.g. Razorpay) — to process subscriptions. We do not store full card details.
• Infrastructure / sub-processors — hosting and email delivery providers, under confidentiality obligations.
• Legal — when required by law, court order, or to protect rights and safety.

We never sell personal data to third parties.

7. Data retention

We keep account and message data for as long as your account is active or as needed to provide the service. When you delete data or close your account, we delete or anonymise associated personal data within 30 days, except where we must retain limited records for legal, tax or security reasons.

8. Security

We protect data with industry-standard measures: encrypted transport (HTTPS/TLS), hashed passwords, signed and verified webhooks (HMAC), strict per-tenant data isolation, access tokens stored write-only, rate limiting and audit logging. No method is 100% secure, but we work hard to safeguard your information.

9. Your rights

Depending on your location (including under India’s DPDP Act 2023 and the GDPR), you may have the right to access, correct, export or delete your personal data, and to withdraw consent. Account owners can manage and delete contacts and data inside the app, or request help at the address below. To request deletion, see our Data Deletion page.

10. International transfers

QuickWA may process data on servers located in different countries. Where data is transferred across borders, we take steps to ensure it remains protected consistent with this policy and applicable law.

11. Children

QuickWA is not intended for anyone under 18. We do not knowingly collect data from children.

12. Changes

We may update this policy from time to time. Material changes will be posted on this page with a new “Last updated” date.

13. Contact us