Privacy Policy
Last updated: July 13, 2026
1. Introduction
WA Campaigns ("we", "our", or "us"), operated by Bhayani Innovations, provides a WhatsApp Business campaign management platform at whatsapp.bhayaniinnovations.com. This Privacy Policy explains how we collect, use, and protect information when you use our platform.
By using WA Campaigns, you agree to the collection and use of information as described in this policy.
2. Information We Collect
2.1 Account Information
When you create an account, we collect:
- Email address and password
- Business name and contact details
- WhatsApp Business API credentials (Phone Number ID, Access Token, Business Account ID)
2.2 Lead & Contact Data
You may upload or import contact data (leads) into the platform, which may include:
- Phone numbers
- Names and email addresses
- Custom variables (var1, var2, var3)
- Tags and pipeline status
You are responsible for ensuring you have obtained proper consent from your contacts before uploading their data.
2.3 Message Data
The platform stores:
- WhatsApp messages sent via campaigns or manually through the inbox
- Inbound messages received from your contacts
- Delivery and read status received from the WhatsApp Business API
- Campaign send logs and analytics
2.4 Meta / Facebook Integration Data
When you connect your WhatsApp Business Account via Meta OAuth, we receive and store:
- WhatsApp Business Account ID
- Phone Number ID
- Access token (stored encrypted)
This data is accessed exclusively through the Meta Graph API and subject to Meta's Privacy Policy.
2.5 Usage Data
We automatically collect technical data including IP address, browser type, and pages visited for security and performance monitoring.
3. How We Use Your Information
- To provide and operate the WA Campaigns platform
- To send WhatsApp messages on your behalf via the Meta WhatsApp Business API
- To process campaign scheduling, delivery, and reporting
- To authenticate your identity and secure your account
- To communicate with you about service updates, billing, and support
- To comply with legal obligations
We do not sell, rent, or share your data or your contacts' data with any third party for marketing purposes.
4. Data Storage & Security
Application data is stored in a Supabase-hosted PostgreSQL database running on Amazon Web Services (AWS) infrastructure in the Asia Pacific (Seoul) region. The application is hosted on Vercel. Access tokens and sensitive credentials are encrypted at rest using AES-256 encryption.
We implement industry-standard security practices including HTTPS-only access, rate limiting, and access controls. However, no method of transmission over the internet is 100% secure.
5. Data Retention
We retain your data for as long as your account is active. Upon account deletion:
- All account data is permanently deleted within 30 days
- Lead and contact data is permanently deleted
- Campaign and message history is permanently deleted
- WhatsApp API credentials are revoked and removed
See our Data Deletion page for instructions on requesting deletion.
6. Third-Party Services
We use the following third-party services:
- Meta / WhatsApp Business API — for sending and receiving WhatsApp messages
- Supabase, Inc. — database and authentication hosting
- Vercel, Inc. — application hosting and serverless compute
- Amazon Web Services, Inc. (AWS) — underlying cloud infrastructure for our database provider
Each service has its own privacy policy. Your use of their services is subject to their respective terms.
7. Your Rights
You have the right to:
- Access — request a copy of the personal data we hold about you
- Correct — request correction of inaccurate data
- Delete — request deletion of your account and all associated data
- Withdraw Consent — disconnect your Meta integration at any time from the Settings page
To exercise these rights, contact us at dhruvinbhayani123@gmail.com.
8. Cookies
We use session cookies strictly for authentication purposes. We do not use tracking or advertising cookies.
9. Children's Privacy
WA Campaigns is intended for business use only. We do not knowingly collect data from individuals under the age of 18.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify users of significant changes by email or by posting a notice on the platform. Continued use of the platform after changes constitutes acceptance.
11. Contact Us
For any privacy-related questions or requests, contact: