Privacy & data protection

Privacy Policy

How Whapp collects, uses, shares, and protects personal information.

We respect your privacy and aim to process personal information lawfully, transparently, and securely.

1. Who we are

Whapp (Pty) Ltd, referred to in this policy as Whapp, we, us or our, provides WhatsApp automation, AI agent, booking, ordering, enquiry, and customer-support solutions. For purposes of the Protection of Personal Information Act 4 of 2013 (POPIA), Whapp is the responsible party for personal information processed through this website and our direct business interactions.

2. Information we collect

Depending on how you interact with us, we may collect:

  • Your name, company name, email address, telephone number, and enquiry details.
  • Information you provide when requesting a demo, quotation, consultation, or support.
  • Messages and information submitted through a Whapp-powered WhatsApp workflow.
  • Technical information such as device, browser, IP address, referral source, and website usage data.
  • Information supplied by our customers when we process data on their behalf.

Please do not submit unnecessary sensitive or special personal information.

3. How and why we use information

We process personal information where permitted by law and for purposes including:

  • Responding to enquiries and arranging demonstrations or consultations.
  • Preparing quotations, contracts, onboarding, and delivering our services.
  • Operating, securing, supporting, and improving our website and automation solutions.
  • Communicating service information and, where permitted, relevant marketing.
  • Meeting legal, regulatory, accounting, and fraud-prevention obligations.

Our lawful grounds may include consent, performing or preparing to enter into a contract, compliance with law, and our legitimate business interests where these do not unfairly override your rights.

4. WhatsApp automation and customer data

When Whapp provides a solution to another business, that business generally determines why customer information is collected and is the responsible party. Whapp processes that information as an operator under the customer's instructions and applicable agreements. Your business retains control of its customer information and ownership of data it lawfully supplies; Whapp does not claim ownership of your contacts, leads or conversations. Data subjects retain their privacy rights. Processing instructions, confidentiality and security obligations are recorded in the applicable written agreement. Your business is responsible for a lawful basis for processing and marketing, consent where required, appropriate consent records, opt-out mechanisms and honouring opt-outs. Using Whapp does not automatically make a campaign compliant. WhatsApp and Meta services are also subject to their own privacy terms.

5. Sharing and international processing

We may share information with trusted service providers that help us deliver hosting, communications, WhatsApp and Meta integrations, email, analytics, security, and professional services. We may also disclose information where required by law or in connection with a legitimate corporate transaction. Some providers may process data outside South Africa. Where applicable, we use reasonable contractual and technical safeguards for cross-border processing. We do not sell personal information.

6. Google Workspace API Data

Whapp's use of raw or derived user data received from Google Workspace APIs adheres to the Google User Data Policy, including the Limited Use requirements. Whapp does not use, transfer or share Google Workspace user data to train or improve general-purpose or foundational AI/ML models.

7. Cookies and third-party content

Our website may use essential cookies or similar technologies required for operation, security, and performance. Embedded videos, social-media links, or other third-party services may collect information under their own privacy policies when you interact with them. You can restrict cookies through your browser settings, although some features may then work differently.

8. Retention and security

We retain personal information only for as long as necessary for lawful processing purposes, applicable contractual requirements or legal obligations. Retention is not indefinite. When information is no longer lawfully required, it is securely deleted, destroyed or de-identified.

Access to Whapp ends when the service terminates. Contact us before termination to confirm available access or export options, especially for assignments, reports and automation records that may not appear in WhatsApp. Data retained by Whapp after termination is handled under the applicable retention schedule, subject to legal, accounting, security and dispute-resolution requirements. Ask us to confirm the periods applicable to your service before onboarding or cancellation.

Residual copies may remain temporarily in protected backups until the applicable retention cycle ends. Retained information remains protected and is not used for unrelated purposes. Recovery depends on available backups and the agreed service configuration; no particular recovery time or zero-data-loss outcome is guaranteed unless agreed in writing.

We use reasonable technical and organisational safeguards and restrict access to authorised personnel who need it for service delivery, administration or support. No internet transmission or storage system can be guaranteed completely secure.

Deleting data held by Whapp does not delete copies independently held by your business, Meta or other integrated services. WhatsApp history and export availability depend on Meta and your setup. See our Data Deletion guidance for requests and offboarding.

9. Your privacy rights

Subject to POPIA and other applicable law, you may ask us to:

  • Confirm whether we hold your personal information and request access to it.
  • Correct, update, or delete inaccurate or unlawfully held information.
  • Object to certain processing or withdraw consent where processing relies on consent.
  • Stop direct marketing communications.

We may need to verify your identity before completing a request. You may also lodge a complaint with the Information Regulator (South Africa).

10. Children's information

This website is intended for business users and is not directed at children. We do not knowingly collect children's personal information through this website without lawful authority or the involvement of a competent person where required.

11. Contact us and policy updates

For privacy questions or requests, email hello@whapp.co.za, call +27 11 314 0231, or use our contact page.

We may update this policy as our services or legal requirements change. The latest version will be published here. Last updated: 3 September 2026.