Privacy Policy

This Privacy Policy describes how WAHooks ("we", "us", "our"), operated by Dhruv Yadav, collects, uses, and protects your personal information when you use our platform at wahooks.com ("Service").

1. Information We Collect

Account Information

Email address (via Google OAuth or email/password registration), name (if provided through Google OAuth). Passwords are hashed by Supabase Auth — we never see plaintext passwords.

WhatsApp Session Data

Phone numbers associated with your sessions, encrypted session authentication state, session metadata (status, timestamps, identifiers). We do not permanently store WhatsApp message content — messages are relayed to your webhook endpoints.

Webhook Configuration

Webhook URLs, event filters, signing secrets, and delivery logs (event type, delivery status, timestamps). Retained for debugging.

Billing Information

Stripe customer ID and subscription status. We do not store credit card numbers — all payment data is processed by Stripe.

Usage Analytics

Through PostHog: session recordings, page views, feature usage, device information, and IP address.

Cookies

• Authentication — session tokens to keep you logged in.
• Country detection — for regional pricing.
• Analytics — PostHog tracking for usage analytics.

2. How We Use Your Information

• Provide and operate the Service (provision connections, deliver webhooks).
• Process payments and apply regional pricing.
• Improve the Service through aggregated analytics.
• Send service-related notifications and respond to support requests.
• Detect and prevent abuse, fraud, and unauthorized access.
• Comply with legal obligations.

3. Third-Party Services

We share data with the following providers, each with their own privacy policy:

• Supabase — Authentication and database hosting. Privacy Policy
• Stripe — Payment processing. Privacy Policy
• PostHog — Product analytics and session recordings. Privacy Policy
• Vercel — Web dashboard hosting. Privacy Policy
• Hetzner Cloud — API and worker infrastructure (Germany). Privacy Policy

We do not sell your personal information to third parties.

4. Data Retention

• Account data — retained while your account is active, deleted within 30 days of account deletion.
• WhatsApp session data — deleted when you delete a connection.
• Webhook delivery logs — retained for up to 30 days.
• Billing records — up to 7 years (tax/accounting requirements).
• Analytics data — up to 12 months.
• Server logs — up to 90 days.

5. Data Security

All data in transit is encrypted via TLS. Session authentication state and API keys are stored encrypted. Infrastructure runs in a private Kubernetes cluster — WhatsApp workers are not publicly accessible. Authentication uses bcrypt password hashing and JWT tokens via Supabase Auth.

No method of transmission or storage is 100% secure. We cannot guarantee absolute security.

6. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access — request a copy of your personal data.
• Correction — update your account information.
• Deletion — request deletion of your account and data.
• Data portability — export your data in a machine-readable format.
• Object / Restrict processing — opt out of analytics by enabling "Do Not Track" or contacting us.
• Withdraw consent — at any time, without affecting prior processing.

Contact support@wahooks.com to exercise any of these rights. We respond within 30 days.

7. International Data Transfers

Our primary infrastructure is in Germany (Hetzner Cloud). The dashboard is hosted on Vercel (multiple regions). Third-party services may process data in various jurisdictions. By using the Service, you consent to these transfers.

8. Children's Privacy

The Service is not intended for individuals under 18. We do not knowingly collect data from children. Contact us if you believe a child has provided personal data.

9. Open Source

This Privacy Policy applies only to the hosted Service at wahooks.com. Self-hosted instances of the open source software are not covered — you are responsible for your own data handling practices.

10. Changes to This Policy

We may update this policy to reflect changes in our practices or legal requirements. Material changes will be communicated via email or dashboard notice. Continued use after changes constitutes acceptance.

11. Contact

WAHooks
Operated by Dhruv Yadav
Email: support@wahooks.com