Privacy Policy

Last updated: 15 July 2026

This Privacy Policy explains how [Your registered business name] ("we", "us", "our"), the operator of WaSender, collects, uses, shares and protects personal data when you visit https://whatscale.asaani.app or use our services. We serve customers in Pakistan and internationally, and this policy applies to all of them.

1. Who we are

[Your registered business name] is the data controller for the information described below.

2. Information we collect

Account information

Your name, email address and a securely hashed password. We never store your password in plain text.

Billing information

Your plan, subscription status, billing period, and a record of each payment attempt (amount, currency, order reference and the payment provider's transaction identifier). We never receive or store your card details. Card data is collected and processed directly by our payment provider (Safepay) on their systems.

WhatsApp session data

For each number you connect, we store the connection status, the phone number, the WhatsApp display name, a per-session API token and webhook secret, and the WhatsApp Web session credentials that keep the number linked. These credentials are stored on our servers so your session survives restarts.

Automation configuration

The auto-reply rules, chatbot templates and message-forwarding destinations you create.

Conversation data

When a message arrives on a connected number, we process it in real time to trigger your automation and to forward it to the webhook URL you have configured. We do not store the content of your WhatsApp messages.The one exception is limited chatbot state: where you use an interactive menu or a "collect details" step, we store which step a customer is on and the answers they submit, because that is required to run the flow. You control those flows and can delete them.

Technical data

Server logs, IP address, browser and device information, and diagnostic data. We use strictly necessary cookies to keep you signed in.

3. How we use your information

• To provide, operate and maintain the service.
• To process payments, manage subscriptions and enforce plan limits.
• To deliver your messages and run your automations.
• To secure the platform, prevent abuse and enforce our Terms.
• To respond to support requests.
• To comply with legal obligations.

4. Legal bases (EEA / UK users)

Where the GDPR or UK GDPR applies, we rely on: performance of a contract (providing the service), our legitimate interests (security, abuse prevention, service improvement), compliance with a legal obligation, and consent where required.

5. How we share information

• Payment provider — Safepay processes payments and receives the data needed to complete a transaction.
• Infrastructure providers — hosting, database and related vendors that run the platform on our behalf.
• Your own webhook endpoint — where you enable forwarding, incoming message data is sent to the URL you specify. You are responsible for that endpoint.
• Legal — where required by law, regulation or valid legal process, or to protect our rights and users.

We do not sell your personal data and we do not use your message content for advertising.

6. International transfers

We operate internationally and our infrastructure providers may process data in countries other than yours, which may have different data protection laws. Where required, we put appropriate safeguards in place for such transfers.

7. Retention

We keep account, subscription and payment records for as long as your account is active and thereafter as required for legal, tax and accounting purposes. Session credentials, rules, templates and chatbot state are deleted when you delete the session or your account.

8. Security

We use HTTPS in transit, hash passwords, issue per-session API tokens, and sign outgoing webhooks with HMAC so you can verify authenticity. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Your rights

Subject to applicable law, you may request access to, correction of, or deletion of your personal data; object to or restrict processing; request a copy of your data; and withdraw consent. You can update your profile or delete your account from the dashboard, or contact us at support@example.com. EEA/UK users may also complain to their local supervisory authority.

10. Your responsibilities as a sender

When you use WaSenderto message your own customers, you act as the controller of their personal data and we act as your processor. You are responsible for having a lawful basis and any required consent to message them, for honouring opt-outs, and for complying with WhatsApp's terms and applicable messaging and privacy laws.

11. Children

The service is not directed at children and is not intended for anyone under 18. We do not knowingly collect data from children.

12. Cookies

We use strictly necessary cookies for authentication and session security. We do not use them to build advertising profiles.

13. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by a new "Last updated" date on this page.

14. Not affiliated with WhatsApp

WaSender is an independent service and is not affiliated with, endorsed by, or sponsored by WhatsApp LLC or Meta Platforms, Inc.

15. Contact

Questions about this policy? Email support@example.com or write to us at the address in section 1. See also our Terms and Conditions and Refund Policy.