Privacy Policy

Last updated: August 17, 2026

PrasuNova ("we", "us", "our") operates a WhatsApp Business Platform Tech Provider service that allows client businesses to connect their WhatsApp Business Account and send messages (including OTP, transactional, and template messages) to their own customers through our API. This policy explains what data we collect, why, and how it is protected.

What we collect

• From onboarded client businesses: WhatsApp Business Account (WABA) ID, phone number ID, business display name, and an access token issued by Meta that authorizes us to send messages and manage the account on the client's behalf.
• Message metadata: message type, template name, delivery status, and timestamps, kept for delivery tracking, debugging, and billing purposes. We do not read or store message content beyond what's required to send and log the transaction.
• From our own consumer applications: API credentials used to authenticate requests to our platform.

How we use it

Data is used solely to operate the service: authenticating with Meta's Graph API to send messages on a client's behalf, routing inbound webhook events back to the client's systems, and tracking usage for billing. We do not sell data, and we do not use client data for advertising.

How we protect it

Access tokens are never stored in plain text. Each token is encrypted at rest using AES-256-GCM envelope encryption before being written to our database, and is only decrypted in memory at the moment it's needed to call Meta's API.

Sharing

We share data only with Meta, as required to operate the WhatsApp Business Platform integration, and with the specific client business a message was sent for. We do not share data with any other third party.

Data retention and deletion

We retain client account data for as long as the client remains onboarded to our platform. A client may request deletion of their data at any time by contacting us below; we will deauthorize and remove their stored credentials and account records. Full step-by-step instructions, and what exactly gets deleted, are on our Data Deletion Instructions page.

Use of the service is also governed by our Terms of Service.

Contact

Questions about this policy or requests regarding your data can be sent to founder@prasunova.com.