This Privacy Policy explains how Wappx, Ajman Media City Free Zone, Ajman, United Arab Emirates (“Wappx”, “we”) collects, uses, shares and protects personal data when you visit getwappx.com or use the Wappx platform. We follow the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) and other applicable laws.
1Our role
Wappx handles two kinds of personal data:
- Account data about our customers and their team members (for example name, email and login activity). For this data Wappx decides how it is used.
- Customer Data that businesses bring into Wappx about their own customers (for example phone numbers, names and WhatsApp messages). For this data the business is responsible for the purposes and lawful basis, and Wappx processes it on the business’s behalf to provide the service — with the exception of the retention described under “How long we keep data”.
If you are a customer of a business that uses Wappx and want to know how your data is used, please contact that business first.
2Data we collect
- Account and workspace: name, email address, password (stored only as a secure hash), two-step verification settings, language, business name, roles and team membership.
- Billing: plan, amounts, payment status and references from our payment provider. Card details are entered on Ziina’s pages; we never receive or store full card numbers.
- WhatsApp data: WhatsApp Business account and number details, access tokens (stored encrypted), contacts (phone number, name, language, tags, notes, consent status), messages, photos, videos, voice notes, documents, templates and delivery statuses.
- Usage and security: IP address, browser and device information, sign-in times, actions recorded in the audit log, and error logs.
- Support: your email address, the content of help requests and our replies.
- Cookies: see our Cookie Settings.
3How we use data
- to create and run your account and provide the features you use;
- to send and receive WhatsApp messages through Meta on your behalf;
- to process payments and keep billing records;
- to keep the service secure, prevent abuse and investigate incidents;
- to answer support requests and send service emails (verification, password reset, invitations, receipts, important notices);
- to comply with legal obligations and enforce our Terms;
- to understand and improve how the service works, using aggregated information.
We do not sell personal data and we do not use Customer Data for advertising.
4Legal bases
We process personal data because it is needed to perform our contract with you, to meet legal obligations, for our legitimate interests (such as security, fraud prevention and improving the service) or, where required, with consent — which you can withdraw at any time.
6International transfers
Some providers process data outside the United Arab Emirates. For example Meta operates globally and DeepSeek processes AI requests on servers that may be located in the People’s Republic of China. When we transfer personal data outside the UAE we rely on the grounds allowed by the PDPL and take reasonable steps to protect it.
7How long we keep data
- Account data is kept while your account is active and for up to 24 months after it closes, unless a longer period is required by law (for example accounting records).
- Messages and media are kept while the workspace is active. Media files are stored by Meta and fetched when viewed.
- Deleted contacts. When a business deletes a contact, the contact is removed from that business’s workspace, inbox and campaigns. Wappx keeps the contact record in its platform records for security, abuse prevention, dispute handling and record-keeping purposes, unless a valid deletion request requires us to erase it.
- Audit and security logs are kept for as long as needed to protect the service and meet legal obligations.
- Support requests are kept for up to 36 months.
8How we protect data
We use encrypted connections (HTTPS), encrypt access tokens and secrets at rest, store passwords as secure hashes, offer two-step verification, restrict staff access by role and record sensitive actions in an audit log. Wappx staff can see a customer’s conversations only when the customer grants support access, and every such access is logged. No system is completely secure, so please keep your login details safe.
9Your rights
Subject to the PDPL and other applicable law, you can ask to access, correct, delete or restrict the processing of your personal data, object to certain processing, ask for a copy in a portable format and withdraw consent. To make a request, email hello@getwappx.com or raise a ticket. We may need to verify your identity and will reply within 30 days. If you are not satisfied, you may complain to the UAE Data Office.
10Children
Wappx is a business service and is not directed at children. Businesses that communicate with minors (for example schools) must do so through parents or guardians and with the consent the law requires.
11Changes
We may update this policy. We will post the new version here with a new date and notify account owners of important changes.
12Contact
Wappx, Ajman Media City Free Zone, Ajman, United Arab Emirates
Email: hello@getwappx.com · WhatsApp: 055 729 6008