Privacy Policy

1. Information we collect

We collect the following categories of data:

• Account data: name, email, password, workspace and role, set when you register.
• Billing data: plan, billing contact and payment metadata (card details are handled by our payment processor, not stored by us).
• Usage data: pages viewed, features used, log and diagnostic data, IP address and device/browser information.
• Messaging & customer data: contacts, conversations and message content you and your end-users exchange through connected channels (e.g. WhatsApp), processed to provide the Service.
• Cookies and similar technologies used for authentication, preferences and analytics.

2. How we use information

• Provide, operate, secure and improve the Service.
• Authenticate users and manage workspaces, billing and support.
• Route, store and deliver messages across connected channels.
• Detect, prevent and investigate fraud, abuse and security incidents.
• Comply with legal obligations and enforce our Terms.

3. Legal bases

Where applicable law (such as the GDPR) requires it, we process personal data on the basis of: performance of a contract, our legitimate interests in operating and securing the Service, your consent, and compliance with legal obligations.

4. WhatsApp and Meta Platforms

When you connect a WhatsApp Business account, we process data through the WhatsApp Business Platform and Meta APIs solely to send and receive messages on your behalf. Your use of those channels is also subject to Meta’s and WhatsApp’s own terms and policies.

We do not use message content for advertising and we do not sell personal data.

5. How we share information

We do not sell personal data. We share data only as needed to run the Service, with categories of service providers (sub-processors) bound by contracts that require appropriate confidentiality and security safeguards:

Cloud infrastructure and hosting providers; the messaging platforms you connect (such as WhatsApp) to deliver messages on your channels; authentication providers; and analytics, monitoring and payment providers.

An up-to-date list of our sub-processors is available on request at privacy@apifycloud.io. We may also disclose data when required by law or to protect rights, safety and security.

6. International data transfers

We operate primarily in the United States. Where we transfer personal data internationally, we rely on appropriate transfer mechanisms (such as Standard Contractual Clauses) where required by law.

7. Data retention

We retain personal data for as long as your account is active or as needed to provide the Service, and thereafter as required to comply with legal obligations, resolve disputes and enforce agreements. Business customers can configure or request deletion of their workspace data.

8. Security

We implement reasonable technical and organizational measures to protect personal data, including encryption in transit and at rest, access controls and secrets management. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Your rights

Depending on your location, you may have rights to access, correct, delete, restrict or port your personal data, and to object to certain processing. To exercise these rights, contact us at privacy@apifycloud.io. If your data is processed on behalf of a business customer, we will refer your request to that customer.

10. Cookies

We use strictly necessary cookies for authentication and preferences, and limited analytics cookies to understand usage. You can control cookies through your browser settings.

11. Children

The Service is not directed to individuals under 18, and we do not knowingly collect personal data from children.

12. Changes to this policy

We may update this policy from time to time. We will post the updated version here and revise the “Last updated” date. Material changes will be communicated through the Service or by email.