Your privacy is important to us. This Privacy Policy explains how WasapFLOW collects, uses, discloses, and safeguards your information when you use our service.
1. Information We Collect
1.1 Information You Provide
| Data Type |
Examples |
Purpose |
| Account Information |
Name, email, password, phone |
Account creation |
| Business Information |
Company name, business type |
Service customization |
| Payment Information |
Billing address, payment method |
Subscription processing |
| Contact Data |
Customer names, phone numbers |
CRM functionality |
| API Credentials |
WhatsApp tokens, OpenAI keys |
Service integration (encrypted) |
1.2 Information Collected Automatically
- Device Information: Browser type, operating system, device identifiers
- Usage Data: Pages visited, features used, time spent
- Log Data: IP address, access times, referring URLs
- Cookies: Session cookies for authentication and preferences
2. How We Use Your Information
- Service Delivery: To provide, maintain, and improve our Service
- Communication: To send service updates, security alerts, and support messages
- Authentication: To verify your identity and secure your account
- Analytics: To understand usage patterns and improve user experience
- Billing: To process payments and manage subscriptions
- Legal Compliance: To comply with legal obligations and enforce our terms
3. Data Storage and Security
- Your data is stored on secure servers
- Sensitive data (API keys, tokens) encrypted using AES-256-CBC
- Passwords hashed using bcrypt algorithm
- SSL/TLS encryption for all data transmission
- Regular security audits and vulnerability assessments
- 24-hour monitoring and incident response
Important: While we implement robust security measures, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.
4. Data Sharing and Disclosure
We Do NOT Sell Your Data
We do not sell, trade, or rent your personal information to third parties for marketing purposes.
Third-Party Service Providers
We may share data with trusted providers:
- Meta/WhatsApp: For WhatsApp Business API messaging
- OpenAI: For AI-powered features (using your API key)
- ToyyibPay: For payment processing
5. Your Rights and Choices
- Access: Request a copy of your personal data
- Correction: Update or correct inaccurate information
- Deletion: Request deletion of your account and data
- Export: Download your data in a portable format
- Opt-out: Unsubscribe from marketing communications
To exercise these rights, contact us at [email protected]
6. Data Retention
- Account data: Until account deletion + 30 days
- Message history: As configured in your workspace settings
- Payment records: 7 years (legal requirement)
- Log data: 90 days
7. Cookies
- Essential Cookies: Required for authentication and security
- Preference Cookies: Remember your settings
- Analytics Cookies: Understand how you use our Service
8. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via email or platform notification.
9. Contact Us
If you have questions about this Privacy Policy, please contact us at: [email protected]
10. Compliance
This Privacy Policy is designed to comply with:
- Malaysia Personal Data Protection Act 2010 (PDPA)
- WhatsApp Business API data handling requirements
- General data protection best practices
By using WasapFLOW, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your information as described herein.