Waboxly

Privacy Policy

Last updated: August 26, 2026

This Privacy Policy describes how Waboxly ("we", "us", or "our") collects, uses, and protects your information when you use our platform at https://app.waboxly.com.

1. Information We Collect

Account Information

When you register, we collect your name, email address, and password. If you sign in with Google, we receive your Google profile name and email.

WhatsApp Business Data

To provide our service, we process the following on your behalf:

  • Phone Number IDs and Access Tokens — obtained from Meta to connect your WhatsApp Business numbers.
  • Messages and media — sent and received through the Meta Cloud API. Messages are stored to display your conversation history within the app.
  • Contact phone numbers — of the people who message your connected WhatsApp numbers.

Payment Information

When you submit a payment proof, we store the uploaded document and the amount. We do not collect or store credit card details.

Usage Data

We log activity such as login times, actions performed, and IP addresses for security and audit purposes.

2. How We Use Your Information

  • To provide and maintain the service — connecting your WhatsApp numbers and displaying conversations.
  • To manage your account, billing, and subscription.
  • To send you transactional emails (welcome, payment confirmations, billing reminders).
  • To detect, prevent, and address technical issues, fraud, or abuse.
  • To comply with legal obligations.

3. How We Store and Protect Your Data

  • All access tokens are encrypted before being stored in our database.
  • Passwords are hashed using password_hash() and are never stored in plain text.
  • All communication between your browser and our servers uses HTTPS.
  • Database access is restricted and uses prepared statements to prevent SQL injection.
  • Session tokens are regenerated after login to prevent session hijacking.

4. Data Sharing

We do not sell your data. We share information only:

  • With Meta Platforms — as necessary to use the WhatsApp Cloud API on your behalf.
  • With Google — if you use the "Sign in with Google" feature, we receive your basic profile information.
  • When required by law or to protect our rights and the safety of others.

5. Data Retention

We retain your data for as long as your account is active. Message data is kept to maintain your conversation history. You may request deletion of your account and associated data at any time by contacting us at support@waboxly.com.

6. Your Rights

  • Access — you can view your account data within the app.
  • Correction — you can update your profile information.
  • Deletion — you can request account deletion by contacting us.
  • Data export — you can request a copy of your data.

7. Cookies

We use only a session cookie to keep you logged in. We do not use tracking or advertising cookies.

8. Third-Party Services

  • Meta WhatsApp Cloud API — for sending and receiving WhatsApp messages.
  • Google OAuth — for optional sign-in with Google.
  • Hostinger — for email delivery via SMTP.

These providers have their own privacy policies governing how they handle your data.

9. Children's Privacy

Our service is intended for businesses and is not directed to individuals under 16. We do not knowingly collect data from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a notice within the app.

11. Contact Us

If you have questions about this Privacy Policy, contact us at support@waboxly.com.