1. Who operates this service
WOW Digitals ("we," "us," or "our") operates the WhatsApp management application available at wowdigitals.com. This application is a private business tool used to manage opted-in contacts, approved WhatsApp templates, campaigns, customer conversations, and related operational records.
2. Information we process
Administrator information
We process the administrator's name, email address, encrypted password, session information, login activity, and security audit records.
Meta and WhatsApp account information
When an administrator uses Connect with Meta, Meta handles the Facebook login. We do not receive or store the administrator's Facebook password. We may receive and process:
- Meta application, Business Portfolio, WhatsApp Business Account, and phone-number identifiers;
- WhatsApp business display name, registered business number, account status, quality rating, and template information;
- authorization tokens and webhook verification data needed to operate the requested integration; and
- technical responses, connection status, and errors returned by Meta APIs.
Contact and messaging information
Information entered manually, uploaded through CSV, or received through WhatsApp may include names, telephone numbers, email addresses, company names, motor-carrier numbers, locations, equipment or trailer information, tags, notes, consent records, suppression status, and other business-contact details.
We also process WhatsApp message content, interactive replies, media references, timestamps, template variables, campaign associations, provider message identifiers, delivery/read/failure status, and opt-out requests.
Technical and security information
We process IP addresses, request timestamps, webhook payloads, application logs, import validation results, queue status, error reports, browser session cookies, and audit events. We do not use the application for behavioral advertising and do not sell personal information.
3. Why we use information
We process information to:
- authenticate the administrator and protect the application;
- connect and maintain the official Meta WhatsApp Cloud API integration;
- import, organize, suppress, and manage business contacts;
- send messages requested or permitted by the recipient and applicable WhatsApp rules;
- receive customer replies and provide customer support;
- honor STOP, unsubscribe, suppression, and deletion requests;
- monitor message delivery, prevent duplicates, troubleshoot failures, and secure the service;
- comply with law, enforce our terms, and maintain evidence of consent or opt-out when necessary.
4. Consent and responsible messaging
Contacts must not be added to marketing campaigns without valid, documented consent. The application does not infer consent from a CSV upload. Campaign eligibility is checked when recipients are selected and again immediately before sending. Opt-out and suppression records take priority over campaign instructions.
5. How information is shared
We disclose information only as needed to operate, secure, or comply with legal requirements. Recipients may include:
- Meta and WhatsApp, when using their authentication, Cloud API, templates, webhooks, and messaging services;
- hosting, email, security, and infrastructure providers that process data for us under appropriate obligations;
- professional advisers or authorities when reasonably necessary to protect rights, address misuse, or comply with law; and
- a successor organization in connection with a lawful merger, acquisition, or transfer, subject to applicable safeguards.
Meta independently processes information under its own terms and privacy policy. Our policy does not replace Meta's notices.
6. Retention
We retain operational contact, conversation, campaign, consent, and suppression records for as long as needed for the business relationship, messaging compliance, dispute prevention, or legal obligations. The application is configured to retain raw webhook payloads for approximately 30 days, temporary import files for approximately 24 hours, and audit logs for approximately 365 days, unless settings or legal requirements require a different period.
Suppression or minimal opt-out evidence may be retained after other information is deleted so that we do not accidentally contact a person again.
7. Security
We use access controls, HTTPS, encrypted secret storage, password hashing, signed webhook validation, audit logging, data minimization, and operational safeguards. Meta access tokens and App Secrets are encrypted at rest and are not displayed again after saving. No method of storage or transmission is completely secure, so we cannot guarantee absolute security.
8. Your choices and rights
Depending on applicable law, you may request access, correction, deletion, restriction, or a copy of information associated with you, or object to certain processing. You may opt out of WhatsApp marketing by replying STOP. For a broader deletion request, follow our Data Deletion Instructions.
9. Cookies
The application uses essential cookies for authentication, session integrity, CSRF protection, and administrator preferences. These cookies are not used for third-party advertising.
10. International processing
Meta and infrastructure providers may process information in countries other than the country where it was collected. Where required, we rely on applicable contractual or legal safeguards.
11. Children
This business application is not intended for children, and we do not knowingly use it to collect personal information from children. Contact us if you believe information about a child has been processed improperly.
12. Changes to this policy
We may update this policy when our practices, services, providers, or legal obligations change. We will update the effective date and provide additional notice when required.
13. Contact us
For privacy questions or requests, email privacy@wowdigitals.com. Do not send passwords, Meta App Secrets, access tokens, verification codes, or complete message exports by email.