Privacy Policy

This Privacy Policy explains how whatshandler ai (“whatshandler”, “we”, “us”, or “our”) collects, uses, shares, and protects information when you visit https://whatshandler.com, create an account, or use our WhatsApp AI software and related services (the “Service”).

whatshandler ai helps businesses run an AI agent on their WhatsApp Business channel: reply to customers, qualify conversations into leads, store knowledge and media, book meetings, and notify owners. We operate as a technology partner to the WhatsApp Business Platform (Meta) for businesses that connect their WhatsApp numbers to our Service.

By using the Service or providing personal data to us, you acknowledge this Policy. If you do not agree, please do not use the Service. Capitalized terms not defined here may be defined in our Terms of Service.

Account and website data. For information about business owners, admins, and visitors who sign up or contact us directly (for example name, work email, company name), we generally act as an independent data controller.

Customer messaging and CRM data. When a business (“Customer”) connects WhatsApp and uses the Service, messages, leads, knowledge content, media files, and related conversation data are processed on that Customer’s behalf. In that case we act as a data processor (or service provider), and the Customer is the controller for end-user (WhatsApp contact) personal data. Customers are responsible for their own privacy notices and for obtaining any required consents under WhatsApp/Meta policies and applicable law.

3.1 Account and billing contact data

• Name, email address, password or auth credentials
• Business name, membership role, and profile details you provide
• Support and contact-form submissions
• Technical logs such as IP address, device/browser type, and timestamps

3.2 WhatsApp Business configuration

• WhatsApp Business phone number IDs, display numbers, and related Cloud API credentials you supply (stored securely for sending and receiving messages)
• Webhook verification tokens and configuration needed to operate the integration

3.3 Customer content processed for the Customer

• Inbound and outbound WhatsApp messages, media references, delivery metadata, and conversation state
• Lead and contact fields (for example name, company, email, phone, interest, notes, status)
• Knowledge base text, uploaded media (images), and source documents (PDF/DOCX) and associated metadata
• Meeting/booking data when you connect calendars or scheduling tools (for example Calendly or Google)
• Owner notification details (email or other channels you configure)

3.4 End-user (WhatsApp contact) data

When someone messages a Customer’s WhatsApp Business number connected to whatshandler, we may process their WhatsApp identifier, phone number, message content, and any information they share in chat. That processing is directed by the Customer’s configuration and use of the Service.

3.5 AI processing inputs/outputs

To generate replies and extractions lead/booking intent, relevant conversation context, knowledge chunks, and tool results may be sent to our AI providers (see Section 6). We do not use Customer content to train public foundation models for unrelated third parties except as described by those providers’ enterprise terms, or as otherwise disclosed.

3.6 Cookies and similar technologies

We use essential cookies and local storage for authentication, session security, and basic site operation. We do not sell personal data. If we add analytics or marketing cookies later, we will update this Policy and, where required, request consent.

• Provide, operate, secure, and improve the Service
• Send and receive WhatsApp messages via the WhatsApp Business Platform on behalf of Customers
• Run AI agent replies, knowledge retrieval, lead qualification, and booking flows
• Display dashboards (conversations, leads, meetings, knowledge, settings)
• Send transactional emails (account, alerts, contact-form routing)
• Prevent abuse, debug issues, and comply with law
• Communicate product updates or service notices (you may opt out of non-essential marketing where applicable)

The Service integrates with Meta’s WhatsApp Business Platform (Cloud API). Message delivery, template rules, opt-in/opt-out, quality ratings, and related obligations are governed by Meta’s and WhatsApp’s terms and policies, including the WhatsApp Business Solution Terms and messaging policies.

When you connect WhatsApp, Meta and WhatsApp may process personal data under their own privacy policies. We receive webhooks and API payloads necessary to operate your agent. Customers must ensure they have a lawful basis and required notices/consents before messaging end-users, including for marketing templates outside the customer care window.

As a technology partner helping businesses use WhatsApp Business, we design the Service to support compliant workflows (for example storing conversations for the Customer, respecting configuration you set), but Customers remain responsible for their WhatsApp use and end-user communications.

We may share information with:

• Meta / WhatsApp — to send and receive messages for your connected number
• Infrastructure and database providers (for example hosting and Supabase) — to store and serve the Service
• AI providers (for example Google Gemini / Google Cloud) — to generate agent responses and structured extractions
• Scheduling integrations you connect (for example Calendly, Google Calendar / Appointments) — to list slots and book meetings
• Email / SMTP providers — for transactional and notification email
• Professional advisors and authorities — where required by law or to protect rights and safety
• Successors — in connection with a merger, acquisition, or asset sale, subject to appropriate safeguards

We do not sell personal data. Subprocessors process data under contracts that require appropriate confidentiality and security measures.

• Contract — to provide the Service to account holders
• Legitimate interests — security, product improvement, and B2B communications that do not override individual rights
• Consent — where required (for example certain cookies or marketing)
• Legal obligation — compliance and lawful requests
• For processor activities, the Customer’s instructions and legal bases apply to end-user data

We retain account data for as long as your account is active and as needed for legitimate business or legal purposes afterward. Customer content (messages, leads, knowledge assets) is retained according to the Customer’s account status, deletion requests, and our operational backups. You may request deletion of your account; some records may remain where we must keep them (billing disputes, security logs, legal holds).

We implement administrative, technical, and organizational measures appropriate to the risk, including access controls, encrypted transport (HTTPS), and restricted access to secrets such as WhatsApp tokens. No method of transmission or storage is 100% secure; Customers should protect dashboard credentials and rotate API tokens if compromised.

We and our subprocessors may process data in countries other than where you or your end-users are located. Where required, we use appropriate safeguards (such as standard contractual clauses or equivalent mechanisms) for cross-border transfers.

Depending on your location, you may have rights to access, correct, delete, restrict, or port personal data, or to object to certain processing, and to withdraw consent where processing is consent-based. Account holders can often update profile data in the dashboard or by contacting us.

End-users who messaged a Customer’s WhatsApp number should typically contact that business (the controller) first. We will assist Customers with reasonable requests relating to data we process for them.

To exercise rights regarding data we control, email privacy@whatshandler.com. You may also have the right to lodge a complaint with a supervisory authority.

The Service is designed for businesses and is not directed to children under 16 (or the minimum age required in your jurisdiction). We do not knowingly collect personal data from children.

Customers using whatshandler agree to:

• Provide accurate privacy information to their WhatsApp contacts where required
• Obtain and record required opt-ins for WhatsApp messaging, especially marketing templates
• Use the Service in line with Meta/WhatsApp policies and applicable privacy and telecom laws
• Only upload knowledge, media, and documents they have rights to use
• Configure integrations (Calendly, Google, SMTP alerts) lawfully

We may update this Policy from time to time. We will post the revised version on this page and update the “Last updated” date. Material changes may also be communicated by email or in-product notice. Continued use of the Service after changes take effect constitutes acceptance of the updated Policy where permitted by law.

Privacy questions or requests: privacy@whatshandler.com

General inquiries: use the contact form on https://whatshandler.com or email us through your account support channel.

Related: Terms of Service