Privacy Policy

Effective upon publication. Version: 23 September 2026.

Who operates Wabtek

Wabtek is operated by Everbiz Info Solutions LLP, India. This policy describes processing connected with the Wabtek portal, messaging services and integrations. Contact: support@wabtek.io. It also covers the associated Meta app, formerly named AppKonnect, where used to connect Wabtek services.

Our role and your business contacts

We use account, billing and support information to operate our business. When a business customer uploads contacts or uses Wabtek to communicate with recipients, we process that customer content on its instructions to provide the service. The customer is responsible for explaining its own processing to recipients and having the necessary authority and permissions. Recipients can contact that business about its messages or contact us for help identifying the relevant account.

Information processed

Depending on enabled features, information can include account names, email addresses, telephone numbers, business details, team membership, subscription and payment references; imported contact lists and custom fields; message content, attachments, templates, conversation notes and delivery events; and support correspondence. Connected Meta services may provide authorised business portfolio, WhatsApp Business Account and phone-number identifiers, profile information, template information and messaging events. Access tokens and linked-session credentials may be stored to maintain authorised connections. Technical records can include IP addresses, browser information, request times, errors and security events. Only permissions and data needed for the enabled integration should be requested.

Why information is used

We process information to authenticate users, connect authorised accounts, send and receive messages, manage templates and contacts, operate customer-selected workflows, show delivery information, provide support and billing, prevent misuse and meet applicable obligations. Where consent is required, the relevant processing depends on that consent. Other processing may be necessary to provide the requested service, meet legal obligations or pursue legitimate operational interests where recognised by applicable law. Customer message content is not authorised for unrelated advertising or general-purpose AI model training under this policy.

Who may receive information

Information is shared as needed with authorised users of your workspace, recipients and their messaging providers, Meta/WhatsApp for connected features, and providers supporting hosting, backups, communications, payments or support. Customer-enabled external integrations receive the data needed for their selected function. Information may also be disclosed when legally required or necessary to investigate abuse or protect rights. We do not sell customer contact lists or message content. Any enabled AI feature must identify its provider and relevant data handling before customer content is sent to that provider.

Browser storage and third-party services

The portal may use cookies and browser storage for authentication, preferences and cached application data, including chats. Shared-device users should sign out and clear Wabtek site data when appropriate. Optional analytics or advertising technologies, if introduced, require corresponding disclosures and any required choices. Meta and other external services operate under their own privacy terms. Processing through international providers may involve countries outside your location; applicable transfer requirements must be addressed for the services used.

Retention and security

Customer contacts, messages and attachments are retained while needed to provide the active service. After subscription expiry, this content is retained for a 30-day renewal or export-request period and is then deleted unless the subscription is renewed. We send a reminder 7 days before the scheduled deletion. A verified deletion request is handled separately under our Data Deletion Instructions; the expiry grace period does not delay that process. Backups are retained on a rolling 30-day schedule. Following deletion from live systems, residual copies may remain in existing backups for up to a further 30 days, unavailable for ordinary use. If a backup is restored, previously approved deletions are reapplied before affected data returns to normal service. Billing, security and dispute records may be retained separately only where necessary for a specific legal or operational purpose; this does not justify retaining all message content. We use access controls and operational safeguards appropriate to the service. Do not send passwords, access tokens or authentication codes to support.

Your choices and requests

Contact support@wabtek.io to request access, correction, deletion or help withdrawing an integration permission, and to raise a privacy concern. Other rights, including objection, restriction, portability or complaints to a competent authority, may apply depending on your location and applicable law. We may verify identity and authority before acting, using only information reasonably needed. Removing a Meta integration does not necessarily delete information already stored by Wabtek; use our Data Deletion Instructions for a deletion request.

Children and changes

Wabtek business accounts are intended for adults authorised to act for their organisations. We do not intend the service for children to register independently. Notify us if inappropriate collection is suspected. Material changes to this policy will be communicated through an appropriate service notice. The effective version is identified at the top of this page.