1. Introduction

emitq ("we", "our", "us") provides a WhatsApp integration platform that routes messages to your applications via webhooks and REST API. This Privacy Policy explains how we collect, use, and protect your information when you use our service.

2. Information We Collect

Account Information

When you sign in with Google, we receive your name, email address, and profile picture from your Google account. We use this information to create and manage your emitq account.

WhatsApp Data

When you link a WhatsApp account, we store the WhatsApp phone number, display name, and connection credentials required to maintain the session. Message content is processed in real time and forwarded to your configured webhook URL — we store notification metadata (sender, type, timestamp, delivery status) in audit logs but do not permanently store full message content beyond what is needed for delivery and replay.

Usage Data

We collect notification delivery logs including timestamps, message types, delivery status, and webhook response codes to power the audit and analytics features.

3. How We Use Your Information

• To authenticate you and manage your account
• To maintain WhatsApp connections and route messages to your webhooks
• To provide audit logs, analytics, and delivery monitoring
• To detect and prevent abuse of the platform

4. Data Security

API keys are stored as SHA-256 hashes and cannot be recovered. Webhook payloads are signed with HMAC-SHA256 using your secret key. All connections use TLS encryption in transit. WhatsApp session credentials are stored securely on our servers and are not accessible to other users.

5. Data Retention

Notification logs are retained for as long as your account is active. When you delete an account, all associated notification history and credentials are permanently removed. You can disconnect an account at any time to stop message routing while preserving your history.

6. Third-Party Services

We use Google OAuth for authentication and WhatsApp's messaging protocol for connectivity. Your webhook URLs receive message data directly from our servers — we do not share your data with any other third parties.

7. Your Rights

You can access, export, or delete your data at any time through the dashboard. The audit log export feature lets you download your notification history as CSV. To delete your account entirely, please contact us.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting a notice on the dashboard.

9. Contact

If you have questions about this Privacy Policy, please contact us.