Whatsapp API law

Cookie Policy

anonymous@undisclosed.example.com (Anonymous) — Thu, 15 Oct 2026 23:05:19 +0000

Effective date: October 15, 2026

This Cookie Policy explains how The Provider, doing business as Whatsgate (“Whatsgate”, “we”, “us”, or “our”), uses cookies and similar technologies on whatsgate.org and related web interfaces.

This Policy should be read together with our Privacy Policy.

1. What Are Cookies and Similar Technologies?

Cookies are small text files stored on a browser or device. Similar technologies include local storage, software development kit identifiers, pixels, tags, and other technologies that store or access information on a device.

These technologies may be used to remember settings, keep users signed in, secure accounts, measure website performance, understand usage, or support advertising where enabled.

2. Categories We Use

Category	Purpose	Consent approach
Strictly necessary	Authentication, account security, fraud prevention, load balancing, network management, consent preference storage, and core website functions	Used where necessary to provide the website/service; generally not optional
Functional	Remembering optional preferences and convenience features	Used based on consent where required
Analytics	Measuring visits, navigation, errors, performance, and product/website usage	Used based on consent where required
Advertising / marketing	Attribution, campaign measurement, advertising, retargeting, or cross-site/cross-context tracking, if enabled	Used only where enabled and after consent/opt-out requirements are satisfied

The exact cookie and similar-technology inventory must match the technologies actually deployed on the website.

The current inventory should be displayed in the website's Cookie Settings interface and should identify, where applicable:

cookie or technology name;
provider;
purpose;
category;
expiration/retention period;
whether it is first-party or third-party.

Do not list a provider in this Policy unless that provider is actually deployed.

4. Stripe and Payment Pages

When you proceed to a Stripe-hosted checkout or other third-party payment page, the payment provider may set cookies or use similar technologies on its own domains for payment, authentication, fraud prevention, security, and other purposes.

Those technologies are governed by the payment provider's own privacy and cookie documentation.

Where applicable law requires prior consent, we use non-essential functional, analytics, and advertising/marketing cookies only after the required consent has been obtained.

You can refuse non-essential cookies without losing access to core website functions, although some optional features may be unavailable.

6. Managing Your Choices

You can manage cookie choices using the Cookie Settings control available on the website.

Where presented, you can:

accept all optional cookies;
reject non-essential cookies;
choose categories individually;
change or withdraw your choice later.

Your consent preference may itself be stored using a strictly necessary cookie or similar technology.

7. Browser and Device Controls

Most browsers allow you to block or delete cookies.

Blocking strictly necessary cookies may prevent account login, security features, or other essential website functionality from working properly.

Browser settings do not necessarily control all forms of local storage, pixels, server-side analytics, or app technologies.

8. Global Privacy Control

Where required by applicable U.S. state privacy law, we treat a valid Global Privacy Control (“GPC”) signal as an opt-out request for sale/sharing or targeted/cross-context behavioral advertising for the browser or device from which the signal is received.

More information is available at Your Privacy Choices.

9. Retention

Cookie expiration periods vary by purpose and provider.

Session cookies generally expire when the browsing session ends. Persistent cookies remain until their configured expiration time or until you delete them.

The Cookie Settings interface should show the relevant duration for individual cookies where available.

We may update this Cookie Policy when our technologies, providers, or legal obligations change.

The current version will be posted on this page with an updated effective date.

11. Contact

Questions about cookies or privacy:
service@whatsgate.org

Data Processing Addendum

anonymous@undisclosed.example.com (Anonymous) — Thu, 15 Oct 2026 23:07:53 +0000

Data Processing Addendum

Effective date: October 15, 2026

This Data Processing Addendum (“DPA”) forms part of the agreement between The Provider, doing business as Whatsgate (“Whatsgate”, “Processor”, “Service Provider”, “we”, “us”), and the Customer that uses the Whatsgate Service (“Customer”, “Controller”, “Business”).

This DPA applies where Whatsgate processes Personal Data contained in Customer Content on behalf of Customer.

If there is a conflict between this DPA and the Terms of Service concerning the processing of Customer Personal Data, this DPA controls.

1. Definitions

“Applicable Data Protection Law” means privacy and data-protection laws applicable to the processing covered by this DPA, which may include the EU GDPR, UK GDPR, applicable U.S. state privacy laws, and other applicable privacy laws.

“Customer Personal Data” means Personal Data contained in Customer Content that Whatsgate processes on behalf of Customer in providing the Service.

“Data Subject”, “Controller”, “Processor”, “Personal Data”, “Processing”, and “Supervisory Authority” have the meanings given by Applicable Data Protection Law.

“Subprocessor” means a third party engaged by Whatsgate to process Customer Personal Data on behalf of Customer.

2. Roles and Instructions

Customer is the Controller/Business of Customer Personal Data and Whatsgate is the Processor/Service Provider, except where Applicable Data Protection Law requires a different classification for a specific processing activity.

Whatsgate will process Customer Personal Data only:

to provide, secure, maintain, support, and troubleshoot the Service;
on Customer's documented instructions, including instructions expressed through Customer's configuration and API requests;
as otherwise necessary to comply with applicable law.

The agreement, Customer's use/configuration of the Service, and this DPA constitute Customer's documented instructions.

If Whatsgate believes an instruction violates Applicable Data Protection Law, we may notify Customer and suspend the affected processing until the parties resolve the issue.

3. Customer Obligations

Customer represents that:

it has all rights, notices, consents, permissions, and lawful bases required to provide Customer Personal Data to Whatsgate and instruct the processing;
its instructions comply with Applicable Data Protection Law;
it is responsible for responding to Data Subjects except to the extent law requires Whatsgate to respond directly;
it will not use the Service for unlawful, unsolicited, deceptive, or abusive communications.

Customer is responsible for determining whether the Service is suitable for processing sensitive or special-category data and for implementing additional safeguards required by law.

4. Processing Details

Item	Description
Subject matter	Provision of the Whatsgate messaging automation API, webhooks, connected sessions, support, security, and related SaaS functionality
Duration	For the duration of the Customer's use of the Service plus the limited retention/deletion periods described in the agreement and Privacy Policy
Nature of processing	Collection, transmission, routing, hosting, storage where technically required, retrieval, organization, display, security monitoring, troubleshooting, deletion, and other processing necessary to provide the Service
Purpose	To provide Customer-requested messaging, integration, automation, webhook, account, security, support, and related functionality
Data subjects	Customer personnel; Customer's customers, prospects, contacts, message recipients and senders; group participants; other persons whose data Customer submits or makes accessible through connected accounts
Personal-data categories	Names; usernames; phone numbers; messaging identifiers; message content; media/files; contact and group data; message metadata; delivery/status events; webhook data; device/session identifiers; technical logs; other Customer-submitted data
Sensitive data	Not intentionally required by the Service; may appear incidentally in Customer Content. Customer must ensure lawful processing and required safeguards

5. Confidentiality

Whatsgate will ensure that persons authorized to process Customer Personal Data are subject to appropriate confidentiality obligations.

Access will be limited to personnel and contractors who require access for legitimate Service, security, support, or legal purposes.

6. Security Measures

Whatsgate will maintain technical and organizational measures designed to provide a level of security appropriate to the risks of processing.

Measures may include, as appropriate:

access-control and least-privilege practices;
authentication and credential-management controls;
encrypted network transport;
infrastructure and session isolation;
logging and monitoring;
backup and recovery controls;
security incident response;
vulnerability and patch management;
protections for API keys, tokens, secrets, and administrative access;
vendor/subprocessor risk controls proportionate to the services provided.

Customer is responsible for securing its own systems, webhook endpoints, API credentials, connected accounts, recipient data, and authorized users.

7. Subprocessors

Customer authorizes Whatsgate to engage Subprocessors to provide the Service.

A current list of material Subprocessors should be maintained at:

Subprocessors and Service Providers

Whatsgate will impose data-protection obligations on Subprocessors that are appropriate to the processing they perform.

Where required by Applicable Data Protection Law, Whatsgate will provide notice of material new Subprocessors and a reasonable opportunity for Customer to raise a good-faith data-protection objection.

If the parties cannot reasonably resolve a valid objection, Customer may discontinue the affected Service in accordance with the agreement.

8. Data Subject Requests

Taking into account the nature of processing, Whatsgate will provide reasonable assistance to Customer in responding to verified requests from Data Subjects to exercise rights under Applicable Data Protection Law.

If Whatsgate receives a request concerning Customer Personal Data for which Customer is the Controller, Whatsgate may direct the requester to Customer unless prohibited by law.

Customer is responsible for evaluating and responding to the request.

9. Personal Data Breaches

Whatsgate will notify Customer without undue delay after becoming aware of a confirmed Personal Data Breach affecting Customer Personal Data where notification to Customer is required by Applicable Data Protection Law.

The notice will include information reasonably available to Whatsgate regarding the nature of the incident, affected data, likely consequences, and mitigation measures.

Whatsgate's notification is not an admission of fault or liability.

Customer is responsible for any notifications to Data Subjects or authorities required because Customer is the Controller, except to the extent law assigns an obligation directly to Whatsgate.

10. Assistance and Compliance Information

Taking into account the nature of processing and information available to us, Whatsgate will provide reasonable assistance with Customer's legally required security, breach, data-protection-impact-assessment, and regulatory consultation obligations relating to the Service.

Whatsgate will make available information reasonably necessary to demonstrate compliance with applicable processor obligations.

Any audit rights will be exercised in a manner that protects the confidentiality, security, and rights of other Customers and does not unreasonably disrupt operations. We may satisfy reasonable audit requests through current security documentation, questionnaires, certifications, or independent reports where appropriate.

On-site audits, if legally required and not reasonably satisfied by other means, must be subject to advance notice, confidentiality, security procedures, and reasonable scope limitations.

11. International Transfers

Customer authorizes Whatsgate and its Subprocessors to process Customer Personal Data in the United States and other countries in which authorized Subprocessors operate, subject to Applicable Data Protection Law.

Where a restricted transfer from the EEA requires contractual safeguards, the parties agree to implement the applicable European Commission Standard Contractual Clauses (“EU SCCs”) in the legally appropriate module and configuration, to the extent the SCCs are available and required for the transfer.

Where a restricted transfer from the United Kingdom requires additional contractual safeguards, the parties will apply the legally appropriate UK transfer mechanism, including the UK International Data Transfer Addendum to the EU SCCs or another valid mechanism where applicable.

If a different or successor transfer mechanism becomes legally required, the parties will cooperate in good faith to implement it.

12. Return and Deletion

Upon termination or expiration of the Service, Whatsgate will delete or return Customer Personal Data as required by Applicable Data Protection Law and consistent with the Service's documented export/deletion functionality.

Customer Content and session-data retention following termination is governed by:

Message content and webhook payloads may be retained for up to 7 days where necessary for delivery, retries, synchronization, troubleshooting, security, and service reliability. Media files may be temporarily cached for up to 24 hours where necessary for message delivery, processing, retries, or synchronization. Message delivery, status, and related operational metadata may be retained for up to 30 days for troubleshooting, abuse prevention, security, and service reliability. Connected-account session data, authentication data, and credentials required to maintain the integration are retained while the applicable integration remains active and may be retained for up to 7 days after the integration is disconnected, after which they are deleted or invalidated. Upon account termination, Customer Content remaining in active production systems is deleted according to the retention periods described above. Residual copies may remain in encrypted backups for up to 30 additional days before being overwritten in the ordinary backup cycle. Backup copies are not restored except where necessary for disaster recovery, security, or legal compliance.

Deletion may not immediately remove information from disaster-recovery or backup media, provided remaining copies are protected, not restored except where necessary for recovery/security, and deleted or overwritten in the ordinary backup cycle.

Whatsgate may retain information where required by law, provided it remains protected and is processed only for the legally required purpose.

13. U.S. State Privacy Terms

Where an applicable U.S. state privacy law treats Customer as a “business” or “controller” and Whatsgate as a “service provider”, “contractor”, or “processor”:

Whatsgate processes Customer Personal Data only for the limited and specified purposes described in the agreement and Customer's instructions;
Whatsgate will not sell Customer Personal Data;
Whatsgate will not retain, use, or disclose Customer Personal Data outside the direct business relationship with Customer except as permitted by applicable law and the agreement;
Whatsgate will not use Customer Personal Data for targeted advertising or cross-context behavioral advertising on its own behalf;
Whatsgate will provide legally required privacy protections and assistance.

14. Order of Precedence

If this DPA conflicts with another agreement between the parties on the same subject, this DPA controls with respect to Customer Personal Data.

If mandatory provisions of Applicable Data Protection Law conflict with this DPA, the mandatory law controls to the extent of the conflict.

15. Contact

Privacy and data-protection notices under this DPA:
service@whatsgate.org

Your Privacy Choices

anonymous@undisclosed.example.com (Anonymous) — Thu, 15 Oct 2026 23:03:57 +0000

Your Privacy Choices

Effective date: October 15, 2026

This page explains how to manage privacy choices and submit requests to Provider, doing business as Whatsgate.

Your rights depend on your location, the law that applies to you, and whether Whatsgate acts as controller/business or as processor/service provider for the information involved.

Use the Cookie Settings control on the website to manage non-essential cookies and similar technologies.

Where available, you may:

accept optional cookies;
reject non-essential cookies;
enable or disable categories individually;
change your preference later.

Strictly necessary technologies remain enabled where needed for security, authentication, consent storage, and core site functionality.

See our Cookie Policy.

2. Do Not Sell or Share / Targeted Advertising

Whatsgate does not sell Customer Content.

Whatsgate does not sell personal information for monetary consideration.

If our use of advertising or analytics technologies qualifies as “sale”, “sharing”, targeted advertising, or cross-context behavioral advertising under an applicable U.S. state privacy law, an eligible user may opt out through:

the Do Not Sell or Share My Personal Information control, if displayed;
the Cookie Settings control for relevant advertising/marketing categories;
a recognized browser-based opt-out signal such as Global Privacy Control, where required by law;
email to service@whatsgate.ru if an online control is unavailable.

3. Global Privacy Control

Where legally required, we recognize a valid Global Privacy Control (GPC) signal as an opt-out request for the browser or device that sends the signal.

If you use multiple browsers or devices, you may need to enable GPC or submit choices on each one unless the choice is associated with an authenticated account.

4. Access, Correction, Deletion, and Portability

Depending on applicable law, you may request that we:

confirm whether we process your personal information;
provide access to or a copy of personal information;
correct inaccurate personal information;
delete personal information, subject to legal exceptions;
provide portable information where required;
restrict or object to certain processing where applicable.

Submit requests to: service@whatsgate.ru

Please provide enough information for us to identify the relevant account or records. Do not send passwords, API keys, full payment-card numbers, or unnecessary sensitive information.

5. Customer Content Requests

Whatsgate often processes message content, contact information, and other Customer Content on behalf of a business Customer.

If you received a message from a Whatsgate Customer and want to access, correct, delete, or object to the use of information in that business's messaging records, contact the business that sent or controlled the communication.

When legally required, we assist our Customers in responding to verified data-subject or consumer requests.

6. Marketing Communications

You can unsubscribe from promotional email using the unsubscribe mechanism included in the message or by contacting service@whatsgate.ru.

You may still receive transactional or operational communications relating to account security, billing, outages, legal notices, or your use of the Service.

7. Verification

To protect personal information, we may verify your identity and authority before fulfilling a privacy request.

Verification may involve confirming control of an email address or account, requesting information that can be matched to our records, or using another method proportionate to the sensitivity of the request.

We will not ask for more information than reasonably necessary to verify and process the request.

8. Authorized Agents

Where applicable law permits an authorized agent to submit a request for you, we may require evidence that the agent is authorized and may also verify your identity directly, unless law provides otherwise.

9. Appeals

If applicable state privacy law gives you a right to appeal a decision on a privacy request, you may submit an appeal by emailing service@whatsgate.ru with the subject:

Privacy Request Appeal

Please identify the original request and explain why you believe the decision should be reconsidered.

10. Non-Discrimination

We will not unlawfully discriminate against you for exercising privacy rights granted by applicable law.

Exercising a privacy right may affect functionality only where the requested processing is necessary to provide the relevant Service or where law otherwise permits.

11. EEA / UK Rights

If GDPR or UK GDPR applies, you may have rights of access, rectification, erasure, restriction, data portability, objection, and withdrawal of consent, subject to legal conditions and exceptions.

You may also lodge a complaint with the competent data-protection authority.

See the Privacy Policy for more information.

12. Contact

Privacy requests and questions:
service@whatsgate.ru

Privacy Policy

anonymous@undisclosed.example.com (Anonymous) — Thu, 15 Oct 2026 23:12:04 +0000

Privacy Policy

Effective date: October 15, 2026

This Privacy Policy explains how The Provider, a New York corporation doing business as Whatsgate (“Whatsgate”, “we”, “us”, or “our”), collects, uses, discloses, and protects personal information in connection with:

the website whatsgate.org;
the Whatsgate account dashboard, APIs, webhooks, and related SaaS services;
customer support, billing, security, and business operations.

This Policy also explains the distinction between personal information we process for our own purposes and information we process on behalf of business Customers.

1. Who We Are

Controller/business for website, account, billing, and business-operation data:

Privacy contact: service@whatsgate.org

Whatsgate is an independent, unofficial integration and is not affiliated with, endorsed by, sponsored by, or authorized by WhatsApp LLC, Meta Platforms, Inc., or their affiliates.

The Service may programmatically interact with WhatsApp Web or other third-party services through a session authorized by a Customer.

2. Our Roles: Controller and Processor

For personal information about account holders, website visitors, prospects, billing contacts, and support contacts, Whatsgate generally determines why and how the information is processed and acts as a controller or business under applicable privacy laws.

For personal information contained in messages, media, contacts, groups, recipient information, webhook payloads, and other Customer Content processed through the Service on a Customer's instructions, the Customer generally determines the purposes and means of processing and acts as the controller/business, while Whatsgate acts as a processor/service provider.

If you are an individual whose information appears in Customer Content, such as the recipient of a Customer's WhatsApp message, you should normally direct privacy requests to the business that communicated with you. We will assist our Customers with legally required requests as described in our Data Processing Addendum.

3. Personal Information We Collect

We may collect the following categories of information.

Category	Examples
Account and profile information	Name, business name, email address, phone number, username, account identifiers, preferred language, account settings
Billing and transaction information	Billing name and address, tax status, tax identification number, subscription plan, invoices, payment status, transaction identifiers, limited payment-method metadata received from payment processors
Payment information handled by processors	Payment-card or bank information entered into a payment processor. Whatsgate generally does not receive the complete card number or card security code when hosted payment processing is used
Device and technical information	IP address, browser type, operating system, device information, timestamps, request identifiers, log data, authentication and security events
Usage information	API usage, feature usage, session status, errors, performance information, rate-limit events, account activity
Support and communications	Support requests, emails, chat messages, feedback, diagnostic information you provide
Customer Content	Message text, message metadata, phone numbers, contact names and identifiers, group information, media and files, webhook URLs and payloads, delivery/status events, and other data processed through connected accounts
Session and integration data	Session identifiers, authentication state, QR/code authorization data, connected account identifiers, callback/webhook configuration, technical credentials required to maintain a Customer-authorized connection
Cookie and analytics information	Consent choices, cookie identifiers, analytics events, attribution information where enabled and lawfully permitted

Customer Content may incidentally contain sensitive or special-category information depending on what Customers and their recipients send. Customers must not use the Service to process such information unless they have a valid legal basis and have implemented protections required by applicable law.

4. Sources of Information

We collect information:

directly from you when you create or manage an account, contact us, purchase a plan, or configure the Service;
automatically when you use our website, APIs, dashboard, and infrastructure;
from payment processors, fraud/security providers, analytics providers, and other service providers;
from third-party accounts and services that you intentionally connect or authorize;
from your organization or account administrator if they create or administer your account.

5. How We Use Personal Information

We use personal information to:

provide, operate, authenticate, maintain, and support the Service;
establish and maintain Customer-authorized sessions and integrations;
transmit messages, media, webhook events, and API responses as instructed by Customers;
create and administer accounts and subscriptions;
process payments, invoices, taxes, renewals, refunds, and payment failures;
provide customer support and troubleshoot technical issues;
detect, investigate, and prevent fraud, spam, abuse, security incidents, and violations of our Terms;
protect recipients, Customers, our infrastructure, third parties, and legal rights;
monitor performance, reliability, and product usage;
improve and develop the Service using information that we are permitted to use for that purpose;
send operational messages about accounts, billing, security, incidents, and Service changes;
send marketing communications where permitted by law and subject to applicable opt-out or consent requirements;
comply with legal, tax, accounting, sanctions, regulatory, and law-enforcement obligations;
establish, exercise, or defend legal claims.

We do not use Customer message content to create advertising profiles for recipients, and we do not sell Customer Content.

6. Legal Bases for EEA/UK Processing

Where EEA or UK data-protection law applies and Whatsgate acts as controller, we rely on one or more of the following legal bases:

Contract: processing necessary to enter into or perform our agreement with you.
Legitimate interests: operating and securing the Service, preventing abuse, improving reliability, supporting Customers, and protecting our business and users, where those interests are not overridden by your rights.
Legal obligation: processing required to comply with law, accounting, tax, sanctions, regulatory, or lawful disclosure obligations.
Consent: where required, including for certain non-essential cookies, analytics, advertising technologies, or marketing communications.

Where Whatsgate acts as processor, the Customer is responsible for identifying an appropriate legal basis for Customer Content.

7. Cookies and Similar Technologies

We use cookies and similar technologies as described in our Cookie Policy.

Where applicable law requires consent, non-essential cookies are not intended to be activated until the user has provided the required consent.

You can manage choices through the “Cookie Settings” control and, where applicable, the options described on Your Privacy Choices.

8. Payments

Payments may be processed by third-party payment processors.

When you enter payment information on a hosted payment page, the payment processor receives and processes that information under its own terms and privacy policy. We may receive transaction identifiers, payment status, billing details, card brand and last digits, fraud/risk indicators, subscription information, and similar data required to administer your account.

We do not use payment information for unrelated marketing purposes.

9. How We Disclose Personal Information

We may disclose personal information to:

hosting, infrastructure, database, monitoring, email, support, security, and other vendors that process information to provide services to us;
payment, billing, tax, and fraud providers for transactions and related compliance;
Customer-directed recipients and integrations, including webhook endpoints and systems that the Customer configures;
professional advisers, including attorneys, accountants, auditors, and insurers;
government authorities, regulators, courts, or law enforcement where required or lawfully necessary;
a buyer, investor, successor, or other transaction party in connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, subject to appropriate confidentiality protections;
other parties when you direct us to disclose information or provide valid consent.

A current list of material subprocessors used for Customer Personal Data should be maintained at: Subprocessors and Service Providers

We do not disclose Customer Content to data brokers for their own marketing purposes.

We do not sell Customer Content.

We do not sell personal information for monetary consideration.

If we use advertising or analytics technologies in a manner that is legally treated as “sale”, “sharing”, or targeted/cross-context behavioral advertising under an applicable U.S. state privacy law, eligible users may opt out through Your Privacy Choices and supported browser-based opt-out signals such as Global Privacy Control where legally required.

11. International Data Transfers

Whatsgate is operated by a U.S. corporation, and personal information may be processed in the United States and other countries where our service providers operate.

Where applicable law requires safeguards for international transfers, we use legally recognized transfer mechanisms appropriate to the circumstances. These may include contractual safeguards such as the European Commission's Standard Contractual Clauses and applicable UK transfer terms.

For Customer Personal Data, additional transfer terms may be set out in our Data Processing Addendum.

12. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including providing the Service, maintaining security, resolving disputes, enforcing agreements, and complying with legal, accounting, and tax obligations.

Typical retention considerations include:

account/profile information — while the account is active and for a reasonable period after closure;
billing, invoice, transaction, and tax records — for the period required by applicable accounting, tax, and legal rules;
security and technical logs — for periods reasonably necessary to investigate incidents, maintain reliability, and prevent abuse;
support communications — for as long as reasonably needed to resolve issues and maintain business records;
Customer Content, message-related data, media, and session data — Message content and webhook payloads may be retained for up to 7 days where necessary for delivery, retries, synchronization, troubleshooting, security, and service reliability. Media files may be temporarily cached for up to 24 hours where necessary for message delivery, processing, retries, or synchronization. Message delivery, status, and related operational metadata may be retained for up to 30 days for troubleshooting, abuse prevention, security, and service reliability. Connected-account session data, authentication data, and credentials required to maintain the integration are retained while the applicable integration remains active and may be retained for up to 7 days after the integration is disconnected, after which they are deleted or invalidated. Upon account termination, Customer Content remaining in active production systems is deleted according to the retention periods described above. Residual copies may remain in encrypted backups for up to 30 additional days before being overwritten in the ordinary backup cycle. Backup copies are not restored except where necessary for disaster recovery, security, or legal compliance..

Backups may persist for a limited period after deletion before being overwritten in the ordinary backup cycle.

If law, litigation, an investigation, fraud prevention, a security incident, or a valid preservation request requires longer retention, we may retain relevant information for the required period.

13. Security

We use administrative, technical, and organizational measures designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure.

These measures may include access controls, authentication controls, encrypted network transport, infrastructure isolation, logging, monitoring, backup controls, and vulnerability/security management appropriate to the nature of the Service.

No internet service can guarantee absolute security. You are responsible for protecting your own credentials, API keys, endpoints, connected accounts, and systems.

14. Your Privacy Rights

Depending on your location and applicable law, you may have rights to:

access or obtain a copy of personal information;
correct inaccurate information;
request deletion;
restrict or object to certain processing;
receive portable data where applicable;
withdraw consent where processing is based on consent;
opt out of certain sale/sharing or targeted advertising where applicable;
appeal certain privacy-request decisions where applicable;
lodge a complaint with a competent privacy or data-protection authority.

To submit a request concerning information for which Whatsgate acts as controller, contact service@whatsgate.org.

We may need to verify your identity and authority before completing a request. We will respond within the period required by applicable law.

If your request concerns Customer Content controlled by one of our Customers, we may direct you to that Customer and assist the Customer as required.

15. EEA and UK Users

If GDPR or UK GDPR applies, you may have the rights described above, including the right to object to direct marketing and, in certain circumstances, processing based on legitimate interests.

You may lodge a complaint with the data-protection authority in the country where you live, work, or believe an infringement occurred.

If we appoint an EU or UK representative under applicable law, current representative contact details will be published in this Policy or on a dedicated privacy page.

16. U.S. State Privacy Rights

Residents of certain U.S. states may have additional rights, subject to statutory scope, thresholds, exemptions, and verification requirements.

Details and opt-out methods are provided at Your Privacy Choices.

We do not discriminate against you for exercising rights granted by applicable privacy law.

17. Children

The Service is designed for business and professional users and is not directed to children.

You must be at least 18 years old and legally capable of entering into a binding agreement to create an account.

We do not knowingly collect personal information directly from children through account registration.

18. Third-Party Services

Our website and Service may link to or interoperate with third-party services.

Their privacy practices are governed by their own policies. Connecting a third-party account instructs us to exchange information with that service as necessary for the requested integration.

We are not responsible for independent privacy practices of third parties.

19. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in law, technology, vendors, or our practices.

We will post the updated version with a new effective date. If a change materially affects how we use information, we will provide additional notice where required by law.

20. Contact Us

Privacy questions and requests:
Email: service@whatsgate.org

Subprocessors and Service Providers

anonymous@undisclosed.example.com (Anonymous) — Thu, 15 Oct 2026 22:08:18 +0000

Subprocessors and Service Providers

Last updated: October 15, 2026

Whatsgate uses certain third-party service providers to operate, secure, support, and maintain the Service.

Where a provider processes Customer Personal Data on behalf of Whatsgate in connection with providing the Service, that provider acts as a subprocessor.

Subprocessors

Provider	Purpose	Processing location	Data categories
Hetzner Online GmbH	Cloud and dedicated server infrastructure, data storage, databases, backups, networking, and hosting	DE Nuremberg	Customer Content, message and webhook data, media, account data, session data, technical logs and metadata

Payment and Business Service Providers

The following providers may process personal information independently in connection with payments or other business operations. They do not process Whatsgate Customer Content as part of the messaging service unless specifically stated.

Provider	Purpose	Data categories
Stripe, Inc. and its affiliates	Payment processing, subscription billing, fraud prevention, invoicing, and tax-related functionality	Billing information, customer contact information, transaction information, tax information, and payment information

Hetzner Infrastructure

Whatsgate hosts its production infrastructure on servers provided by Hetzner Online GmbH.

This infrastructure may include:

application servers;
databases;
caching and queue systems;
media and temporary file storage;
backups;
technical logs and monitoring systems;
connected-account session data.

Whatsgate remains responsible for configuring and securing the infrastructure used to provide the Service.

Changes to Subprocessors

Whatsgate may update this list when service providers are added, removed, or replaced.

Where required by applicable data protection law or the Whatsgate Data Processing Addendum, we will provide reasonable notice before a new subprocessor begins processing Customer Personal Data.

Customers with a legally valid data protection objection may contact:

service@whatsgate.org

Contact

Privacy questions regarding subprocessors may be sent to:

service@whatsgate.org

Terms of Service

anonymous@undisclosed.example.com (Anonymous) — Thu, 15 Oct 2026 23:12:43 +0000

Terms of Service

Effective date: October 15, 2026

These Terms of Service (“Terms”) are a binding agreement between Provider, a corporation organized under the laws of the State of New York, doing business as Whatsgate (“Whatsgate”, “we”, “us”, or “our”), and the person or entity that accesses or uses the Service (“Customer”, “you”, or “your”).

By creating an account, purchasing a subscription, accessing the API, connecting an account or session, or otherwise using the Service, you agree to these Terms.

The Service is offered for business and professional use only. You represent that you are acting in the course of a business, trade, or profession and, if you use the Service on behalf of an organization, that you have authority to bind that organization.

1. The Service

Whatsgate provides hosted software, APIs, webhooks, session-management tools, and related functionality that allow Customers to automate sending and receiving messages and media, integrate communications with CRM systems, bots, ecommerce systems, customer-support tools, and other business workflows.

The features available to you depend on your plan, documentation, account configuration, and technical availability.

We may modify, add, discontinue, or replace features from time to time. If a material change substantially reduces the core functionality of a prepaid plan, we will use commercially reasonable efforts to provide notice.

2. Important Third-Party Platform Disclosure

Whatsgate is an independent and unofficial integration. It is not affiliated with, endorsed by, sponsored by, authorized by, or otherwise officially connected with WhatsApp LLC, Meta Platforms, Inc., or their affiliates.

The Service may programmatically interact with WhatsApp Web or other third-party services through a session authorized by the Customer. The Service is not the official WhatsApp Business Platform unless a specific feature is expressly identified as using an official third-party API.

Third-party platforms may change their software, technical interfaces, security controls, policies, or terms at any time. Such changes may impair or disable some or all Service functionality, may require reauthorization, and may result in limitations or suspension of a Customer's third-party account.

We do not warrant that a third-party platform permits the Customer's intended use of the Service. You are responsible for reviewing and complying with the terms, policies, and rules applicable to every third-party account or service you connect.

3. Customer Accounts and Security

You must provide accurate and current account information and keep it updated.

You are responsible for:

maintaining the confidentiality of passwords, API keys, tokens, session credentials, webhook secrets, and other authentication information;
all activity performed through your account and credentials;
restricting access to your account to authorized personnel;
promptly notifying us at service@whatsgate.org if you suspect unauthorized access or compromise.

You must not share API credentials publicly or embed secret credentials in client-side code or public repositories.

We may require multi-factor authentication, credential rotation, reauthorization, or other security measures where reasonably necessary.

4. Customer Responsibilities

You are solely responsible for your communications, recipient lists, message content, campaigns, workflows, and instructions submitted through the Service.

You must:

have all rights, permissions, consents, and lawful bases required to contact recipients and process their personal data;
honor opt-outs, unsubscribe requests, blocks, and other recipient preferences as required by applicable law;
accurately identify the sender where required;
comply with privacy, consumer-protection, telemarketing, electronic communications, anti-spam, marketing, sanctions, export-control, and other laws applicable to your use;
comply with contractual obligations and policies applicable to third-party services you connect;
maintain reasonable records showing the origin and lawful use of recipient data where appropriate.

You must not represent that Whatsgate, your integration, or your communications are officially authorized by WhatsApp or Meta unless you have a separate written authorization from the relevant party.

5. Acceptable Use Policy

You may not use the Service, directly or indirectly, to:

send unsolicited, deceptive, abusive, harassing, or unlawful messages;
conduct indiscriminate bulk messaging, spam, or cold outreach to recipients where you lack a lawful basis or required consent;
use purchased, rented, harvested, scraped, generated, or unlawfully obtained contact lists for unsolicited messaging;
facilitate phishing, impersonation, fraud, scams, credential theft, malware, or other malicious activity;
promote or facilitate illegal goods, illegal services, unlawful discrimination, exploitation, or violence;
infringe intellectual-property, privacy, publicity, confidentiality, or other rights of any person;
bypass authentication, security controls, access controls, rate limits, anti-abuse systems, or technical restrictions;
access another person's account, communications, contacts, or data without authorization;
interfere with the integrity, security, or availability of the Service or any third-party service;
resell access to the Service in a manner that conceals the identity of the actual user or bypasses our account controls, unless expressly authorized by us;
use the Service in connection with persons, entities, territories, transactions, or activities prohibited by applicable sanctions or export-control laws;
use the Service in any way that creates material legal, security, reputational, payment-network, or platform-abuse risk for Whatsgate.

High-volume or automated messaging is permitted only when it complies with this Section, applicable law, recipient permissions, and applicable third-party requirements.

We may investigate suspected abuse, apply rate limits, request evidence of consent or lawful use, restrict functionality, suspend sessions, or terminate accounts when reasonably necessary to protect recipients, the Service, third parties, or our legal and payment-provider relationships.

6. Customer Content

“Customer Content” means data, messages, media, phone numbers, contact and group information, message metadata, webhook payloads, files, instructions, and other information submitted to, transmitted through, or accessed by the Service on your behalf.

As between the parties, you retain your rights in Customer Content.

You grant Whatsgate a non-exclusive, worldwide, limited license to host, transmit, process, reproduce, and otherwise use Customer Content only as reasonably necessary to provide, secure, maintain, troubleshoot, and improve the Service, to comply with law, and as otherwise authorized by you.

You represent and warrant that you have all rights and lawful bases necessary for Whatsgate to process Customer Content in accordance with these Terms and your instructions.

We do not acquire ownership of Customer Content.

7. Data Protection

Our Privacy Policy explains how we process personal data for our own business purposes.

Where Whatsgate processes personal data contained in Customer Content on behalf of a Customer, the Customer generally acts as controller/business and Whatsgate acts as processor/service provider, as those terms are defined by applicable privacy laws.

If the Data Processing Addendum applies to you, it is incorporated into these Terms.

You must not instruct us to process personal data in violation of applicable law.

8. Subscriptions, Billing, and Payment

Paid plans are billed in advance at the price and billing interval shown at checkout.

Multi-month and annual plans are charged for the entire selected billing period in advance, even if pricing is displayed as an equivalent monthly amount. For example, a plan displayed as “$19/month, billed every 3 months” is charged as $57 every 3 months.

Unless expressly stated otherwise at checkout, subscriptions automatically renew for successive periods equal to the selected billing interval until canceled.

Payments are processed by third-party payment processors. We do not require you to provide full payment-card details directly to Whatsgate when payment is handled through a hosted payment processor. Payment processors may process payment and billing data under their own privacy terms.

You authorize us and our payment processors to charge the payment method associated with your account for recurring subscription fees, applicable taxes, and other amounts you expressly authorize.

If a payment fails, we may retry the payment, request an updated payment method, restrict paid functionality, or suspend the account until amounts due are paid.

9. Taxes

Prices are exclusive of sales tax, VAT, GST, and similar transaction taxes unless the checkout expressly states that tax is included.

Where required, applicable taxes may be calculated and added to the amount charged based on information such as your billing address, location, tax status, and tax identification number.

You are responsible for providing accurate billing and tax information. You are also responsible for taxes imposed on you that we are not required to collect or remit.

10. Trials and Promotions

We may offer free trials, discounted periods, credits, or promotions.

The duration, payment-method requirement, price after the promotional period, and other material conditions of an offer will be disclosed when you enroll.

If a trial is configured to convert automatically to a paid subscription and you provide a payment method, the subscription will begin charging at the disclosed rate when the trial ends unless you cancel before the conversion time.

Unless expressly stated otherwise, promotions are non-transferable, have no cash value, and may not be combined.

11. Cancellation and Refunds

You may cancel a subscription through the account interface where available or by contacting service@whatsgate.org

Unless otherwise stated at checkout, cancellation stops future renewals and takes effect at the end of the current prepaid billing period. You may continue using paid features until that period ends, subject to these Terms.

Except where required by applicable law or expressly stated in a written refund policy or offer:

prepaid subscription fees are non-refundable;
unused time within a prepaid billing period is not prorated;
downgrade or cancellation does not create a credit for previously paid periods.

If you believe a charge is incorrect, contact service@whatsgate.org before initiating a payment dispute so we can investigate.

Nothing in this Section limits rights that cannot lawfully be waived.

12. Service Availability and Third-Party Dependencies

The Service depends on internet infrastructure, hosting providers, payment providers, telecommunications networks, browsers, third-party platforms, and software outside our control.

We do not guarantee uninterrupted or error-free operation, permanent compatibility with any third-party platform, delivery of every message, or continued availability of any particular third-party feature.

A third party may block, restrict, suspend, or terminate an account or session. Whatsgate does not control those decisions and is not responsible for them.

We may perform maintenance, emergency changes, migrations, or security actions that temporarily affect availability.

13. Suspension and Termination

We may suspend or terminate access immediately if we reasonably believe that:

you materially breached these Terms or the Acceptable Use Policy;
your use presents a security, fraud, spam, legal, sanctions, privacy, recipient-harm, third-party-platform, or payment risk;
we receive credible complaints, legal demands, platform abuse reports, or payment-provider instructions relating to your use;
payment is overdue;
continued provision of the Service would expose us or another person to material risk or legal liability.

Where reasonably practicable and lawful, we will provide notice and an opportunity to cure a remediable breach.

You may stop using the Service at any time and cancel recurring billing as described above.

Sections that by their nature should survive termination, including payment obligations, intellectual-property provisions, confidentiality/data-protection obligations, disclaimers, limitations of liability, indemnity, and dispute provisions, will survive.

14. Intellectual Property

Whatsgate and its licensors retain all rights, title, and interest in the Service, software, API, documentation, website, trademarks, branding, and related technology, excluding Customer Content.

Subject to these Terms and payment of applicable fees, we grant you a limited, non-exclusive, non-transferable, revocable right to access and use the Service during your subscription for your internal business purposes.

Except to the extent a restriction is prohibited by law, you may not reverse engineer, copy, modify, create derivative works from, sell, sublicense, or commercially exploit the Service except as expressly permitted by us.

“WhatsApp”, “Meta”, and related names and marks belong to their respective owners. Their use on our website is solely to identify compatibility or the third-party service to which the integration relates and does not imply affiliation or endorsement.

15. Feedback

If you provide suggestions or feedback regarding the Service, you grant us a worldwide, perpetual, irrevocable, royalty-free right to use and incorporate that feedback without obligation to you.

16. Confidentiality

Each party may receive non-public information of the other party that is identified as confidential or that reasonably should be understood to be confidential.

The receiving party will use such information only as necessary to perform or exercise rights under these Terms and will protect it using reasonable care.

Confidentiality obligations do not apply to information that is public through no breach, already lawfully known, independently developed without use of confidential information, or lawfully obtained from another source without confidentiality restrictions.

A party may disclose confidential information when legally required, subject to lawful efforts to provide prior notice where appropriate.

17. Disclaimers

TO THE MAXIMUM EXTENT PERMITTED BY LAW, THE SERVICE IS PROVIDED “AS IS” AND “AS AVAILABLE.”

WE DISCLAIM IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, AND ANY WARRANTIES ARISING FROM COURSE OF DEALING OR USAGE OF TRADE.

WE DO NOT WARRANT THAT:

THE SERVICE WILL BE UNINTERRUPTED, ERROR-FREE, OR COMPATIBLE WITH THIRD-PARTY PLATFORMS INDEFINITELY;
MESSAGES WILL ALWAYS BE DELIVERED;
USE OF THE SERVICE WILL PREVENT A THIRD PARTY FROM LIMITING OR SUSPENDING AN ACCOUNT;
THE SERVICE OR ANY CUSTOMER USE IS APPROVED BY WHATSAPP, META, OR ANY OTHER THIRD PARTY;
THE SERVICE WILL SATISFY YOUR PARTICULAR LEGAL OR REGULATORY REQUIREMENTS.

YOU ARE RESPONSIBLE FOR DETERMINING WHETHER YOUR USE OF THE SERVICE IS APPROPRIATE AND LAWFUL.

Some jurisdictions do not allow certain warranty exclusions, so some of the above may not apply to you.

18. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW, NEITHER PARTY WILL BE LIABLE TO THE OTHER FOR INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, PUNITIVE, OR CONSEQUENTIAL DAMAGES, OR FOR LOSS OF PROFITS, REVENUE, BUSINESS, GOODWILL, OR DATA, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

TO THE MAXIMUM EXTENT PERMITTED BY LAW, WHATSGATE'S AGGREGATE LIABILITY ARISING OUT OF OR RELATING TO THE SERVICE OR THESE TERMS WILL NOT EXCEED THE TOTAL FEES PAID OR PAYABLE BY YOU TO WHATSgate FOR THE SERVICE DURING THE TWELVE (12) MONTHS IMMEDIATELY PRECEDING THE EVENT GIVING RISE TO THE CLAIM.

These limitations do not apply to liability that cannot lawfully be limited or excluded.

19. Indemnification

To the extent permitted by law, you will defend, indemnify, and hold harmless The Provider and its officers, directors, employees, contractors, and affiliates from third-party claims, losses, penalties, costs, and reasonable attorneys' fees arising from or relating to:

Customer Content;
your communications or recipient lists;
your violation of applicable law;
your violation of third-party rights or third-party terms;
spam, unlawful marketing, privacy, consumer-protection, fraud, or harassment claims caused by your use;
your material breach of these Terms.

We will provide reasonable notice of a covered claim and reasonable cooperation at your expense. You may not settle a claim in a way that admits fault by or imposes obligations on us without our written consent.

20. Export Controls and Sanctions

You may not access or use the Service if doing so would violate applicable U.S. export-control or sanctions laws or expose Whatsgate or its service providers to prohibited dealings.

You represent that you are not a person or entity with whom transactions are prohibited under applicable sanctions laws and that you will not use the Service for prohibited persons, territories, or activities.

We may restrict access by country, region, person, or transaction where reasonably required for legal or service-provider compliance.

21. Changes to These Terms

We may update these Terms from time to time.

For material changes, we will provide reasonable notice through the Service, by email, or by posting an updated effective date. Changes will apply prospectively unless a different effective date is required by law.

If you continue to use the Service after the updated Terms take effect, you agree to the revised Terms.

22. Governing Law and Venue

These Terms are governed by the laws of the State of New York, without regard to conflict-of-laws principles.

To the extent a dispute is not subject to a mandatory forum under applicable law, the state and federal courts located in Kings County, New York will have exclusive jurisdiction, and each party consents to personal jurisdiction and venue in those courts.

The United Nations Convention on Contracts for the International Sale of Goods does not apply.

23. General

If a provision of these Terms is unenforceable, it will be modified to the minimum extent necessary to make it enforceable, and the remaining provisions will remain in effect.

Our failure to enforce a provision is not a waiver.

You may not assign these Terms without our prior written consent, except in connection with a merger, acquisition, or sale of substantially all of your assets. We may assign these Terms in connection with a corporate reorganization, merger, acquisition, financing, or sale of assets.

These Terms, together with documents expressly incorporated by reference, constitute the entire agreement between the parties regarding the Service and supersede prior agreements regarding the same subject matter.

24. Contact

Support: service@whatsgate.org
Legal notices: service@whatsgate.org
Privacy: service@whatsgate.org

Whatsapp API law

Cookie Policy

Cookie Policy

1. What Are Cookies and Similar Technologies?

2. Categories We Use

3. Current Cookie Inventory

4. Stripe and Payment Pages

5. Consent for Non-Essential Cookies

6. Managing Your Choices

7. Browser and Device Controls

8. Global Privacy Control

9. Retention

10. Changes to This Cookie Policy

11. Contact

Data Processing Addendum

Data Processing Addendum

1. Definitions

2. Roles and Instructions

3. Customer Obligations

4. Processing Details

5. Confidentiality

6. Security Measures

7. Subprocessors

8. Data Subject Requests

9. Personal Data Breaches

10. Assistance and Compliance Information

11. International Transfers

12. Return and Deletion

13. U.S. State Privacy Terms

14. Order of Precedence

15. Contact

Your Privacy Choices

Your Privacy Choices

1. Cookie Preferences

2. Do Not Sell or Share / Targeted Advertising

3. Global Privacy Control

4. Access, Correction, Deletion, and Portability

5. Customer Content Requests

6. Marketing Communications

7. Verification

8. Authorized Agents

9. Appeals

10. Non-Discrimination

11. EEA / UK Rights

12. Contact

Privacy Policy

Privacy Policy

1. Who We Are

2. Our Roles: Controller and Processor

3. Personal Information We Collect

4. Sources of Information

5. How We Use Personal Information

6. Legal Bases for EEA/UK Processing

7. Cookies and Similar Technologies

8. Payments

9. How We Disclose Personal Information

10. Sale, Sharing, and Targeted Advertising

11. International Data Transfers

12. Data Retention

13. Security

14. Your Privacy Rights

15. EEA and UK Users

16. U.S. State Privacy Rights

17. Children

18. Third-Party Services

19. Changes to This Privacy Policy

20. Contact Us

Subprocessors and Service Providers

Subprocessors and Service Providers

Subprocessors

Payment and Business Service Providers

Hetzner Infrastructure

Changes to Subprocessors

Contact

Terms of Service

Terms of Service

1. The Service

2. Important Third-Party Platform Disclosure

3. Customer Accounts and Security

4. Customer Responsibilities