Privacy Policy

1. Introduction

This policy covers WhatsApp Cloud SaaS — our web dashboard and our companion mobile app, BAMNEXA (available for Android and iOS), used by business owners and their support agents to manage WhatsApp customer conversations. We are committed to protecting your personal information and your right to privacy. If you have any questions or concerns about this policy, or our practices regarding your personal information, please contact us.

2. Information We Collect

We collect personal information that you voluntarily provide when registering, using the Services, or contacting us:

• Name, email, and contact data
• Credentials (passwords and similar security information)
• Payment data (processed by our third-party payment processors — we never store full card numbers)
• WhatsApp Cloud API credentials, and the customer conversations, contacts, and message/template content you manage through the Services
• Device push notification token, so the mobile app can alert you to new conversations
• Microphone audio, only while you actively place or receive a WhatsApp voice call from the mobile app — audio is streamed peer-to-peer for the call and is not recorded or stored by us
• Photos, videos, and documents you choose to attach and send in a conversation from your device's gallery or file picker
• Basic device/diagnostic information (device model, OS version, app version) for crash reporting and support

3. How We Use Your Information

We use personal information collected via our Services to operate and improve the Services, deliver and receive WhatsApp messages on your behalf, send push notifications for new activity, provide customer support, process payments, and comply with our legal obligations. We process this information in reliance on our legitimate business interests, to perform our contract with you, with your consent, and/or for legal compliance.

4. Third-Party Services

To provide the Services, we share data with the minimum necessary third parties, including: Meta / WhatsApp Cloud API (to send and receive messages), our cloud database and hosting providers, a media storage provider (for images/documents/templates you upload), an email delivery provider (for account and campaign emails), our payment processor, and — only when you choose to use AI-assisted features — an AI model provider, which never receives your account credentials or payment data.

5. Data Retention & Deletion

We retain personal information for as long as your account is active or as needed to provide the Services, comply with legal obligations, resolve disputes, and enforce our agreements. You may request deletion of your account and associated data at any time by contacting us at the email below; we will action the request within a reasonable time, except where we're required to retain certain records by law.

6. Children's Privacy

The Services are intended for business use and are not directed at children under 16. We do not knowingly collect personal information from children.

7. Sharing Your Information

Beyond the third parties listed above, we only share information with your consent, to comply with laws, to protect our or others' rights and safety, or as part of a business transfer. We never sell your personal information.

8. Contact Us

If you have questions, comments, or a data deletion request regarding this policy, please contact us.