WhatsaffLegal

Privacy Policy

Last updated: 2 November 2026

Whatsaff ("Whatsaff", "we", "us") is a WhatsApp marketing, automation and customer-communication platform (the "Service") operated by AWstreams DMCC, Dubai, United Arab Emirates, the data controller for account data. This policy explains what we collect, why, who we share it with, how long we keep it and how you can have it deleted.

1. Information we collect

  • Account information: name, email address, phone number, business name and billing details you give us when you register.
  • Meta Platform Data: when you connect a WhatsApp Business Account, Facebook Page or Instagram account through Facebook Login or WhatsApp Embedded Signup, we receive the business account, phone number and page identifiers, access tokens, message templates, and the messages, contacts, delivery and read statuses exchanged through those accounts. How each permission is used is set out in our Meta Platform Data Use page.
  • Your customers' data: phone numbers, names and message content of the people your business talks to. We process this on your behalf, as your processor, under your instructions.
  • Usage data: log data, device and browser information, IP address and the features you use, to run and secure the Service.
  • Payment information: handled by our payment processor; we do not store full card numbers.

2. How we use information

  • To provide the Service: send and receive messages, run automations, campaigns, inboxes and reports you configure.
  • To communicate with you about your account, billing, security and support requests.
  • To detect and prevent fraud, abuse, spam and security incidents.
  • To meet legal obligations and the WhatsApp Business Messaging Policy.

We do not sell personal data. We do not use Meta Platform Data for advertising, profiling, or to train AI models for anyone other than the business that owns the account, and we do not share it with data brokers.

3. Sharing

  • Meta / WhatsApp: as needed to deliver your messages through the WhatsApp Business Platform and Meta APIs.
  • Service providers: hosting, storage, email delivery, analytics and payment processors acting on our instructions under confidentiality and data-protection terms.
  • Sub-processor for optional AI features: OpenAI, a processor whenever a business turns on an optional AI reply or suggestion feature; only the message text needed for that reply is sent. Your team can take over any conversation at any time.
  • Authorities: where required by law or valid legal process.

4. Retention

We keep account data and Meta Platform Data while your account is active. When you close your account or ask us to delete your data, we remove it as described in our Data Deletion Instructions; encrypted backups roll off within 35 days. We keep billing records for as long as tax law requires.

5. Security

Encryption in transit, access tokens encrypted at rest, signed webhooks, access controls and regular security reviews. No method of transmission or storage is perfectly secure.

6. International transfers

We serve businesses in the UAE, the GCC and Egypt; data may be processed in other countries where our hosting and sub-processors operate (including the European Union). We apply appropriate safeguards to those transfers.

7. Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal data, and to object to or restrict processing. Email info@awstreams.com. If you are a customer of a business that uses Whatsaff, contact that business first; we will help it answer your request.

8. Children

The Service is for businesses and is not directed at anyone under 18.

9. Contact

AWstreams DMCC, Dubai, United Arab Emirates. Email: info@awstreams.com.

10. Changes

We will post changes on this page and tell account holders about material changes by email or in the Service.