Privacy Policy
Last updated 4 October 2026
1. Who we are
Wazen is the data controller for the personal data described here. You can reach us at support@wazen.dev, or by post at 128 City Road, London, EC1V 2NX, United Kingdom.
2. What we collect
- Account details: your email address and, if you add it, your name. We don't store passwords; you log in with single-use links and codes.
- Billing: payments are handled by Stripe. We store your plan and subscription status, not your card details.
- WhatsApp data: the numbers you connect, the WhatsApp login for each one, the messages and media sent and received through Wazen, and the group, channel and contact details needed to deliver them.
- How you use Wazen: API requests, and product events such as connecting a number or sending your first message. These events are stored with your account so we can understand how Wazen is used and help when something goes wrong.
- How you found us: the first page you landed on, the site that referred you and any campaign tags in the link, recorded when you sign up.
- Setup requests: if you ask us to build an integration for you, the name, email, company and project details you give us.
3. How we use it
- To run the service: connect your numbers, send and receive messages, deliver webhooks.
- To send the emails you need, such as login links, trial reminders, receipts and alerts.
- To prevent abuse, including people taking more than one free trial.
- To understand how Wazen is used and improve it.
- To send product news, only if you opted in.
4. Product news
When you sign up there is a box, ticked by default, to receive product news: new features and changes, about once or twice a month. You can untick it before signing up. Every one of these emails has a one-click unsubscribe link, and unsubscribing removes your readable email address from our list. Product news is sent through a separate email delivery provider from the one that sends your account emails.
5. Cookies and analytics
Essential: a login cookie keeps you signed in to the dashboard. The site also stores, in your browser, how you first arrived (landing page, referrer and campaign tags) so a signup can be credited to the right source.
Analytics: we use Google Analytics, loaded through Google Tag Manager, to understand visits to the website and which pages lead to signups. It sets cookies in your browser. If you are in the EU, EEA or UK, we ask for your consent first, and analytics cookies are not set unless you agree. Your choice is remembered in a cookie for a year, and you can change it any time from “Cookie settings” at the bottom of every page. When you sign up, we save Google Analytics' identifiers for your browser with your account so that events recorded by our server join the same visit.
6. Storage and security
Message content and WhatsApp logins are encrypted at rest with AES-256-GCM. API keys are stored only as SHA-256 hashes. Media files are stored in Amazon S3. Webhook deliveries are signed so you can check they came from us.
7. How long we keep it
- Media files attached to messages are deleted 30 days after the message.
- Your account and everything in it, including numbers, messages, webhooks and API keys, is deleted 30 days after your free trial or last subscription ends without being renewed.
- A signup record is kept after your account is deleted. It holds a keyed fingerprint of your email address (a code made from it with a secret key, which cannot be turned back into the address) and whether you used a free trial, so the same address can't take a second trial. WhatsApp numbers used during a trial are kept as fingerprints in the same way.
- Your readable email address is kept after deletion only if you subscribed to product news, and only until you unsubscribe.
- Setup requests are kept while we discuss the work with you. Ask us any time to delete yours.
8. Who else handles your data
We don't sell your data. We use these providers to run Wazen, each under its own privacy policy:
- Stripe, for payments.
- Amazon Web Services (S3), for media storage.
- An email delivery provider, for account emails such as login links and receipts.
- A second email delivery provider, for product news.
- Google, for website analytics.
Messages you send also pass through WhatsApp, under WhatsApp's own terms and privacy policy.
9. Your rights
Under UK and EU data protection law you can ask to see, correct, delete or export your personal data, and you can object to how we use it. Email support@wazen.dev and we'll respond within one month. You can also complain to your data protection authority; in the UK that is the Information Commissioner's Office.
10. Changes
If we change this policy, we update the date at the top of this page.