Privacy Policy

How we handle your data

Last updated: February 20, 2026

1. Who We Are

wappr is a platform that provides access to WhatsApp Business API services, operated by Wappr Tecnologia Ltda., with registered address at Natal, RN, Brazil ("we", "us", "our").

For questions about this Privacy Policy or to exercise your rights, contact our Data Protection Officer at dpo@wappr.dev.

2. Data We Collect

2.1 Account data

When you sign up, we collect your email address, name, and company name.

2.2 WhatsApp Business data

To connect your WhatsApp Business account through Meta's Embedded Signup flow, we receive your WhatsApp Business phone number, Business Manager ID, and display name. This data is provided by Meta and governed by their Business Terms of Service.

2.3 Message metadata

We log metadata about messages sent through our platform (timestamps, delivery status, message IDs). We do not store the content of messages.

2.4 Usage data

We collect information about how you use the platform (API call counts, feature usage, error logs) for service improvement and billing purposes.

2.5 Technical data

IP addresses, browser type, and device information collected automatically when you access our platform.

3. How We Use Your Data

We use your data to:

  • Provide, maintain, and improve the wappr Service
  • Process your subscription and payments
  • Send service notifications and product updates (you may opt out at any time)
  • Monitor platform health and debug issues
  • Comply with legal obligations

We do not sell your personal data to third parties.

4. Third-Party Services

We share data with the following third parties only as necessary to operate the Service:

  • Meta Platforms, Inc. — Your WhatsApp Business account data is processed according to Meta's Business Data Privacy Policy.
  • Stripe, Inc. — Payment information is processed by Stripe. We do not store full card details. See Stripe's Privacy Policy.
  • Google LLC (Google Analytics 4) — We use GA4 to analyze traffic on wappr.dev. Data is anonymized and processed by Google in the United States. See Google's Privacy Policy. You can opt out via the GA Opt-out Add-on.
  • Cloud infrastructure providers — Our servers are located in Brazil. Hosting providers process data subject to data processing agreements (DPAs) with us.

International data transfers: While our main servers are located in Brazil, some third-party services (Meta, Google, Stripe) process data in the United States. These transfers are governed by the respective providers' standard contractual clauses.

5. Data Retention

  • Account data: Retained while your account is active and for 30 days after account deletion.
  • Message metadata and logs: Retained for 90 days.
  • Payment records: Retained for 7 years as required by applicable law.

6. Your Rights

Under the Brazilian General Data Protection Law (LGPD, Lei nº 13.709/2018) and the GDPR (for EU/EEA residents), you have the following rights:

  • Access: Request a copy of your personal data.
  • Correction: Request correction of inaccurate data.
  • Deletion: Request deletion of your data (subject to legal retention requirements).
  • Portability: Request your data in a structured, machine-readable format.
  • Objection: Object to processing based on legitimate interests.
  • Withdrawal of consent: Where processing is based on consent, you may withdraw it at any time.

To exercise these rights, contact dpo@wappr.dev. We will respond within 15 business days.

7. Security

We implement industry-standard security measures including encryption at rest and in transit (TLS 1.3), access controls, and regular security reviews. However, no system is completely secure. We will notify you promptly in the event of a data breach that affects your personal data.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a prominent notice on the platform at least 15 days before the change takes effect. Continued use of the Service after that period constitutes acceptance of the updated policy.

9. Contact

Data Protection Officer: dpo@wappr.dev
Legal entity: Wappr Tecnologia Ltda.
Address: Natal, RN, Brazil