Legal

Privacy Policy

Last updated: April 21, 2026

1. Overview

Wavio ("we", "our", or "us") is committed to protecting your personal information. This Privacy Policy explains what data we collect, how we use it, and your rights regarding that data when you use our WhatsApp API platform and related services.

2. Information we collect

  • Account data: Name, email address, and password (hashed) when you register.
  • Profile data: Phone number and display name if provided.
  • Usage data: API calls, session events, message logs, and broadcast history associated with your account.
  • Payment data: Subscription tier and coupon codes. We do not store card numbers or payment credentials.
  • Technical data: IP addresses, browser type, and access timestamps from server logs.
  • WhatsApp data: Message content you send and receive via our platform, stored for your access only and deleted upon account closure.

3. How we use your data

We use your information to provide and improve the Wavio service, authenticate you, process subscriptions, send transactional emails (account alerts, billing), and detect abuse or fraudulent usage. We do not sell your data to third parties.

4. Data sharing

We share data only with: (a) Supabase for database hosting, (b) our infrastructure providers under data processing agreements, and (c) law enforcement when legally required. We have no advertising partners.

5. Data retention

Account data is retained as long as your account is active. Message logs are retained for 90 days by default. You may request deletion of your data at any time by contacting support.

6. Security

We use AES-256 encryption for stored API keys, bcrypt for passwords, and TLS for all data in transit. Access to production systems is restricted to authorised personnel only.

7. Cookies

We use only technically necessary cookies for session management. We do not use tracking or advertising cookies. See our Cookie Policy for details.

8. Your rights

Depending on your jurisdiction, you may have the right to access, correct, or delete your personal data; to object to or restrict processing; and to data portability. To exercise these rights, email privacy@wavio.com.

9. International transfers

Our servers are hosted in data centres that may be located outside your country of residence. By using Wavio, you consent to the transfer of your data to these facilities under appropriate safeguards.

10. Changes to this policy

We may update this policy from time to time. We will notify you by email or an in-app notice at least 14 days before material changes take effect. Continued use of the service after that date constitutes acceptance of the updated policy.

11. Contact

For privacy-related questions or requests: privacy@wavio.com