Privacy Policy
Last updated: 28th Oct 2026
What we store
Your email address and a hash of your password. The phone numbers and text of messages sent or received through your account. Your webhook URL and the delivery log. The login session needed to keep your WhatsApp number linked. Payment records, including the M-Pesa number and receipt.
How long we keep it
Message content is deleted after 30 days. Webhook delivery logs are deleted after 7 days. Payment records are kept for accounting. Everything else is kept until you ask us to delete your account.
Who else sees it
Payments go through PayHero and Safaricom M-Pesa. Our servers are hosted by [hosting provider]. We do not sell personal data or use your messages for advertising.
Your recipients
You decide who you message and why. You are responsible for having a lawful basis, such as consent, to contact them.
Security
Passwords are hashed, API keys are stored only as hashes, and access to our servers is restricted. No system is perfectly secure, so keep your API keys private.
Your rights
You can ask to see, correct or delete your data by contacting [support email].