Privacy Policy

1. Information We Collect

1.1 Information You Provide

We collect information that you voluntarily provide to us when you:

• Register for an account
• Use our services and features
• Contact our support team
• Subscribe to our newsletters or marketing communications

1.2 Automatically Collected Information

When you access our platform, we automatically collect certain information, including:

• Log data (IP address, browser type, operating system)
• Device information
• Usage data and analytics
• Cookies and similar tracking technologies

1.3 WhatsApp Message Data

As a WhatsApp Business API provider, we process message data on your behalf. This includes message content, metadata, and delivery information. We act as a data processor for this information, and you remain the data controller.

2. How We Use Your Information

We use the collected information for various purposes:

• Service Delivery: To provide, maintain, and improve our WhatsApp Business API services
• Account Management: To manage your account and provide customer support
• Communication: To send you technical notices, updates, security alerts, and support messages
• Analytics: To monitor and analyze usage patterns and trends
• Security: To detect, prevent, and address technical issues and fraudulent activity
• Legal Compliance: To comply with legal obligations and enforce our terms

3. Data Sharing and Disclosure

We may share your information in the following circumstances:

3.1 Service Providers

We work with third-party service providers who perform services on our behalf, such as hosting, data analysis, payment processing, and customer service. These providers have access to your information only to perform specific tasks and are obligated to protect your data.

3.2 Meta/WhatsApp

As an official WhatsApp Business API partner, we share necessary information with Meta Platforms, Inc. to facilitate message delivery and maintain service quality.

3.3 Legal Requirements

We may disclose your information if required by law, court order, or governmental regulation, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

4. Data Security

We implement industry-standard security measures to protect your information:

• End-to-end encryption for message content
• SSL/TLS encryption for data in transit
• Encryption at rest for stored data
• Regular security audits and penetration testing
• Access controls and authentication mechanisms
• Employee training on data protection

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

5. Data Retention

We retain your information for as long as necessary to provide our services and fulfill the purposes outlined in this Privacy Policy. Specific retention periods include:

• Account Data: Retained while your account is active and for a reasonable period thereafter
• Message Data: Retained according to your plan's data retention settings (typically 30-90 days)
• Billing Records: Retained for 7 years for tax and accounting purposes
• Analytics Data: Aggregated and anonymized data may be retained indefinitely

6. Your Privacy Rights

Depending on your location, you may have the following rights:

• Access: Request access to your personal information
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal information
• Portability: Request a copy of your data in a structured format
• Objection: Object to certain processing activities
• Restriction: Request restriction of processing in certain circumstances

To exercise these rights, please contact us at privacy@waalfa.com.

7. Cookies and Tracking

We use cookies and similar tracking technologies to enhance your experience. You can control cookies through your browser settings. Types of cookies we use:

• Essential Cookies: Required for the platform to function
• Analytics Cookies: Help us understand how you use our services
• Preference Cookies: Remember your settings and preferences

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for such transfers, including:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions for certain countries
• Other legally approved transfer mechanisms

9. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the new policy on this page
• Updating the "Last updated" date
• Sending you an email notification (for significant changes)

11. Data Deletion Request (Facebook & Meta Platforms)

Waalfa complies with Meta Platforms, Inc. (Facebook & WhatsApp) data protection and user privacy requirements. Users who have interacted with our services through Facebook or WhatsApp have the right to request deletion of their personal data.

11.1 How to Request Data Deletion

If you want to request deletion of your data associated with Facebook or WhatsApp, you can do so using one of the following methods:

• Facebook Data Deletion Callback: When a deletion request is initiated via Facebook, our system automatically receives and processes the request using Facebook’s secure data deletion callback mechanism.
• Email Request: You may also request data deletion by emailing us at privacy@waalfa.com with the subject line “Facebook Data Deletion Request”.

11.2 What Data Is Deleted

Upon verification of the request, we will permanently delete or anonymize:

• User account identifiers linked to Facebook
• WhatsApp messaging metadata stored on our platform
• Any personal information processed as part of our services

11.3 Confirmation & Timeline

After receiving a valid deletion request, we begin processing immediately. Data deletion is typically completed within 30 days, unless retention is required by law or regulatory obligations. A confirmation reference code may be provided for tracking purposes.